How to remove WhatsApp.0.3.4157.x86.Portable_YasDL.com.exe

WhatsApp.0.3.4157.x86.Portable_YasDL.com.exe

The module WhatsApp.0.3.4157.x86.Portable_YasDL.com.exe has been detected as Trojan.CoinMiner

WhatsApp.0.3.4157.x86.Portable_YasDL.com.exe
Remove WhatsApp.0.3.4157.x8

File Details

Product Name:

WhatsApp FoxxApp
Company Name:

FoxxApp-PAF.blogspot.com/PortableAppZ.ru
MD5: c5362c811333cad03332ac4f0529666c
Size: 90 MB
First Published: 2020-07-16 10:35:09 (3 years ago)
Latest Published: 2020-09-04 21:33:18 (3 years ago)
Status: Trojan.CoinMiner (on last analysis)
Analysis Date: 2020-09-04 21:33:18 (3 years ago)

Common Places:

%profile%\downloads\whatsapp.0.3.4157.x86.portable_yasdl.com
%sysdrive%\software
%sysdrive%\temporary files

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000034a5

PE Sections:

Name Size of data MD5
.text 26112 b43b2ced6b7e258b9963474013872382
.rdata 5120 d45dcba8ca646543f7e339e20089687e
.data 1536 1e10f6b13c15d3a90978a12f3335fcd2
.ndata 0 d41d8cd98f00b204e9800998ecf8427e
.rsrc 165376 2677a35e42dd7dd652e2a682f8e341bc

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for WhatsApp.0.3.4157.x86.Portable_YasDL.com.exe
copyright for information about WhatsApp.0.3.4157.x86.Portable_YasDL.com.exe