How to remove WNPPORTFR.SYS

WNPPORTFR.SYS

The module WNPPORTFR.SYS has been detected as Trojan.Presenoker

WNPPORTFR.SYS
Remove WNPPORTFR.SYS

File Details

Product Name:

Windows (R) Win 7 DDK driver
Company Name:

Windows (R) Win 7 DDK provider
MD5: bc819e739269372740f3297f15caea8a
Size: 43 KB
First Published: 2017-05-22 10:19:06 (7 years ago)
Latest Published: 2020-01-23 09:20:18 (4 years ago)
Status: Trojan.Presenoker (on last analysis)
Analysis Date: 2020-01-23 09:20:18 (4 years ago)

Overview

Signed By: Biz Secure Labs Pvt. Ltd.
Status: Valid

Common Places:

%programfiles%\net protector 2017
%programfiles%\net protector 2016
%system%\drivers
%programfiles%
%system%
%sysdrive%
%system%
%system%
%system%
%system%

File Names:

WIN7_32_NPPORTFR.SYS
WNPPORTFR.SYS
NPPORTFR.SYS
NPPORTFR.sys
WNPPORTFR.sys

Geography:

93.8%
4.2%
2.1%

OS Version:

Windows 7 77.1%
Windows 10 16.7%
Windows 8 4.2%
Windows 8.1 2.1%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 32
Image Base: 0x00010000
Entry Address: 0x0000b03e

PE Sections:

Name Size of data MD5
.text 30208 8bc3658d4bd2a7ed56d01f895e3635d1
.rdata 2048 d7f94dd9a33ab1e11d55d4482edb789e
.data 512 bf30a46ba52cfea06d234e66bc22cb6c
INIT 3072 e73d83e4f9cf4fcebc9c0095e04e1511
.rsrc 1024 723bef53511a75078ffefcd0d1ce6be1
.reloc 2560 1b2b33cb732d5d95fd00674d91fcf0c7

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for WNPPORTFR.SYS
copyright for information about WNPPORTFR.SYS