How to remove WSRecord.dll

WSRecord.dll

The module WSRecord.dll has been detected as Worm.Ramnit

WSRecord.dll
Remove WSRecord.dll

File Details

Product Name:

WSRecord dll
Company Name:

http://www.wondershare.com
MD5: 90884b415e442181a8b418ae2fdf73c5
Size: 240 KB
First Published: 2018-04-15 08:11:45 (6 years ago)
Latest Published: 2018-04-15 08:11:45 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2018-04-15 08:11:45 (6 years ago)

Common Places:

%sysdrive%\งานกู้ 240658\root\program files\wondershare

Geography:

100.0%

OS Version:

Windows XP 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x00016000

PE Sections:

Name Size of data MD5
.text 40960 a9a54ab921917458d2de0b6c748e87dd
.rdata 16384 dffa1c0f5df1737b1447548570266d47
.data 4096 c5e8c178d8098315253929e08f4f2d00
.rsrc 4096 58d576765586c6f409aafcf842839785
.reloc 8192 682627d38e839b4260f3db2b397d6c65
.text 167936 899a80eb93ae99bb7fb79f8152ccc7aa

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for WSRecord.dll
copyright for information about WSRecord.dll