How to remove WMVADVE.DLL

WMVADVE.DLL

The module WMVADVE.DLL has been detected as Worm.Ramnit

WMVADVE.DLL
Remove WMVADVE.DLL

File Details

Product Name:

Microsoft® Windows Media Services
Company Name:

Microsoft Corporation
MD5: a7d49074ffc8c4b2193a24a311b36f44
Size: 1 MB
First Published: 2018-04-15 08:11:51 (6 years ago)
Latest Published: 2018-04-15 08:11:51 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2018-04-15 08:11:51 (6 years ago)

Common Places:

%sysdrive%\งานกู้ 240658\root\windows\registeredpackages

Geography:

100.0%

OS Version:

Windows XP 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x08d90000
Entry Address: 0x001cc000

PE Sections:

Name Size of data MD5
.text 1250304 54885467c868acd99de296d2e07efde7
RT_CODE 16896 c85094d865cc980e72f951435a254362
.data 210432 07d1682337bfec1b92d92a2c0dc03a9c
RT_DATA 512 822caa25ac854f0197979bd2f445754c
.rsrc 1024 261089646c5be17d7644a158dc13fc38
.reloc 29184 f27b8baa8c98a3c26900df6ea8c5eb70
.text 166400 6386e819053c4e0795d7ed95c2f78fdb

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for WMVADVE.DLL
copyright for information about WMVADVE.DLL