How to remove WMSProvider.dll
- File Details
- Overview
- Analysis
WMSProvider.dll
The module WMSProvider.dll has been detected as Worm.Ramnit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
f1cf5d1ddfc4ecdedeb1855597f489a0 |
| Size: |
656 KB |
| First Published: |
2017-05-25 10:06:39 (7 years ago) |
| Latest Published: |
2017-05-25 10:06:39 (7 years ago) |
| Status: |
Worm.Ramnit (on last analysis) |
|
| Analysis Date: |
2017-05-25 10:06:39 (7 years ago) |
| %programfiles%\autocad civil 3d land desktop companion 2009\fdo\bin |
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x0008a000 |
| Name |
Size of data |
MD5 |
| .text |
372736 |
33380a1177c789bafe182b98f38564c1 |
| .rdata |
90112 |
086d19bf00f58a5ce2b7a99e3c2d53bd |
| .data |
16384 |
b6c4ebbd0fdccfc88b7f41b684a33f9b |
| .idata |
36864 |
fd2dd5de74f164543c73c8919dcf0431 |
| .rsrc |
4096 |
f6c6dc1a6061302f5196e35890cfcc5a |
| .reloc |
40960 |
8e5a352be985c20afe8e741d3ecda94b |
| .text |
106496 |
df04a7e9bdd1ca80b485ff0678804023 |
