How to remove _Setup.dll
_Setup.dll
The module _Setup.dll has been detected as Worm.Ramnit
File Details
| Product Name: | InstallShield® |
| Company Name: | InstallShield Software Corporation |
| MD5: | b231d792146cea2794f6019cfc65821a |
| Size: | 140 KB |
| First Published: | 2021-01-09 11:45:16 (4 years ago) |
| Latest Published: | 2021-01-09 11:45:16 (4 years ago) |
| Status: | Worm.Ramnit (on last analysis) | |
| Analysis Date: | 2021-01-09 11:45:16 (4 years ago) |
Common Places:
| %sysdrive%\new folder (4)\new folder\master\canoscan |
Geography:
| 100.0% |
OS Version:
| Windows 7 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x10000000 |
| Entry Address: | 0x0000d000 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 13312 | 68ee93e48100d66415ec243a4fd24d84 |
| .rdata | 2560 | a08bc1c7282af36c479fc85112a82377 |
| .data | 10240 | a12537137a2b64c44fbf3d19b3388e36 |
| .rsrc | 6144 | 0abf1f1d842c1b263bdc058b2da2f73d |
| .reloc | 1536 | 056fd0ff69db323a56c3768d47d8e5a9 |
| .text | 108544 | 6daf07f72d95ec56433ba48e777dba18 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for _Setup.dll
