How to remove WinHlp.exe
WinHlp.exe
The module WinHlp.exe has been detected as Adware.ELEX
File Details
Product Name: | TU-Funs |
Company Name: | TU-Funs LIMITED |
MD5: | 6574969092aed97eea9b154dd5c6f685 |
Size: | 319 KB |
First Published: | 2017-07-10 09:10:18 (7 years ago) |
Latest Published: | 2020-12-10 07:03:52 (4 years ago) |
Status: | Adware.ELEX (on last analysis) | |
Analysis Date: | 2020-12-10 07:03:52 (4 years ago) |
Common Places:
%commonappdata%\swdms |
%commonappdata%\twdmt |
%windir%\system32upd |
%commonappdata%\vwdmv |
%allusersprofile%\\application data\dwdmd |
%commonappdata%\rwdmr |
%commonappdata% |
%sysdrive%\adwcleaner\quarantine\files |
%allusersprofile%\\dane aplikacji |
%commonappdata% |
File Names:
WdMan.exe |
WinHlp.exe |
trzB350.tmp |
Geography:
33.3% | ||
16.7% | ||
8.3% | ||
8.3% | ||
4.2% | ||
4.2% | ||
4.2% | ||
4.2% | ||
4.2% | ||
4.2% | ||
4.2% | ||
4.2% |
OS Version:
Windows 7 | 50.0% | |
Windows 8.1 | 20.8% | |
Windows Vista | 12.5% | |
Windows 8 | 8.3% | |
Windows XP | 8.3% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x00400000 |
Entry Address: | 0x00015d92 |
PE Sections:
Name | Size of data | MD5 |
.text | 184320 | d395a7f7d0e0a4a65a2f02bdd69e9bc1 |
.rdata | 74240 | fe4d3cc8da6cc1d52bc21a79c4b71ecf |
.data | 13312 | afe54a47c790614c944d3e21a7881ae0 |
.rsrc | 9728 | 8e69b51dfaa8c5d00dddc07a924b44ac |
.reloc | 44032 | 8dbfdd1246a4e62c6c59eabf2fd51af8 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for WinHlp.exe