How to remove atikmdag.sys

atikmdag.sys

The module atikmdag.sys has been detected as Trojan.Generic

atikmdag.sys
Remove atikmdag.sys

File Details

Product Name:

ATI Radeon Famil
Company Name:

Advanced Micro Devices, Inc
MD5: 71e9e3cdd83c723650fb9d2e4a3e468f
Size: 25 MB
First Published: 2024-05-30 23:01:11 (2 years ago)
Latest Published: 2024-05-30 23:01:11 (2 years ago)
Status: Trojan.Generic (on last analysis)
Analysis Date: 2024-05-30 23:01:11 (2 years ago)

Common Places:

%temp%\{39fd8e2e-d766-3b91-dbda-520866d7913b}
%system%\driverstore\temp\{6c1eb7e8-0ed8-0546-bc49-d101bb655370}

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x00007a80

PE Sections:

Name Size of data MD5
.text 2350592 2440801c062b360c22c35c516a1b0646
.rdata 1693696 7c74d30f2230155ae1df0061571250bb
.data 8003072 21c1dfbeafeafba2556bedb61c3354bb
.pdata 369664 36fc463314657a5f867aadd9b0854938
PAGE_COM 518144 5185cb6994316c9e93165e97026c04a9
PAGE 8192 91f59397fd2d370d9b01572dccd9aaaf
PAGE_CAI 274944 45bd5dff476608b81031d3248862724c
PAGE_DAL 2246656 8bb4fffbbb073aac8ce34187b8b9690a
PAGE_ISR 34816 8bae0d1a9a5ea87d2a194c197d36074e
PAGEDC40 1024 a8f580c6549643b0ce344312174dc464
PAGEDC41 1536 a914b4102ab6464004cf29374cb6fd2f
PAGEDC50 1024 e49609adfbd0b271769ce605e19bfb01
PAGEDC60 1536 78d4956149891d6d93460df5a6a57615
PAGEDC80 28672 70c828db00ad725e985ff4dc6a6c3727
PAGEDC10 16384 f1d60ecca7fbc1c4330569982a7af2e9
PAGEDC11 47104 b70b401afb4fb76434c8b82384cb3863
PAGEDC11 11776 3a5e72c111fe9ae0ab86fa9128cacc91
PAGEDC12 16384 685505f3a9cd86dd781b5cc1b6ecb641
PAGE_PPL 729088 e6ecb55134a918c3dd5d6265aa448279
PAGE_CPC 154112 1c8343a98f09770c21228b485b786ddf
PAGE_CAI 3405312 18ea8d6d38f647db810c59af5a829a27
PAGE 3908096 e068f4e192a834a4d83f3cc71087161e
PAGE_IGN 2048 fb0d14eb2381c2d087d5c6a1c3063776
PAGE_IRV 1536 10ff4cd7c41a2adfb4f677eb1a3c1212
PAGE_IEG 46592 eb8b8c27bbb36ea7a3450e277d78adcd
PAGE_ILN 24064 30388cc035e34cfa1e55723ed0d8da59
PAGE_IBT 41984 8b841efdd62740fd999ab20cacbd205f
PAGE_INI 45056 ba4015b9784e79740980eb0678b9108f
PAGE_ITN 32256 560502fa90d34e34dc91891d07d04b84
PAGE_ISI 45568 e43e49ba06e9aa6fa0e6f74d8b9ef4b3
PAGE_ICI 51200 d326bd453c7c0a65eef8b708146311bc
PAGE_IKV 47616 b1b9adf7418774dd4a73089d88c8de52
PAGE_IIL 22016 635dd555de5d9230e08dc28f290f8334
PAGE_IVI 55808 d616a1412fb508e3bc8d9921b2a05c3a
PAGE_ICZ 52736 5c5cbdac416b90fda902427ffc677435
PAGEI015 512 74841d4bf0eb867039f7f813da1aa8a4
PAGEI007 6656 13e69817691c8f8d4ff9368b63021c1b
PAGEI013 512 ce7f89cd4cc8bc2c2b6c12ed2ef1ebd7
PAGEI018 2048 55dc2902d43713ff4bfa479a6fedbb4b
PAGEI020 2048 ac03cbbfe6ecbc7d995e587025893364
PAGEI002 17920 f5fe9b89377e20a765782edf05e7a640
PAGEI024 1536 5f125a3f938944107314ae1537bf7c71
PAGEI025 512 bb059fc47735c463c790c15b438be271
PAGEI021 5120 a491aa82ca327eedaf3669f9a046e810
PAGEI017 512 7d9b747bff5086cdf136fe4b3a7a7aa5
PAGEI023 1024 679f96a2d88e1f53c6e77139a622770f
PAGEI010 512 2a18d48cee27676600d8b17d7d60a722
PAGEI012 512 7d784f775875377c61e85f9e6ca4bfad
PAGEI028 512 470d61d40865df64a2eefc883dbe287f
PAGEI001 1024 99a82f0b3d848e8163bce144ac432bc4
PAGEI000 512 c0e44d67b093f0f4d9892987d80395c1
PAGEI006 512 753cad7d063d0402d7b5511c9c8efcdc
PAGEI027 1536 a481510b64eefded229adc86e3a84c3f
PAGEI004 512 3125f98562cec947b9cafa9a6a894b64
PAGEI008 6656 9265cfeb384422378b9bb4330b2e20d8
PAGEI014 512 2aa119b701ffba9196ab85d3fabbf6c7
PAGEI019 2048 a4720d8ff4c12cee4b4b45d52d9967ae
PAGEI003 11264 99ceb4ec1e9bb84610b95726f15ff515
PAGEI026 2048 4ccf066081768dc4a9e728ea71334977
PAGEI016 512 e86074780dcba6c11f6c5245403c886b
PAGEI022 1024 b1945d98938c91e5c0a5426078561101
PAGEI009 512 b8c40e5695e94292b239e9fdff3c9330
PAGEI011 512 5cfef0070e22f79910bd43a0325dd720
PAGEI005 512 559fe2d842405cb7607c29260a75349a
PAGE_RW 1574400 cde9c9c2ef244f87d89b4b36b72c12b3
PAGE_RO 384512 a720e5c509f97714eceaeff5826d62fb
PAGE_ISR 1024 40b51f750e300e7abc4a75afbb1894a7
PAGE_ISR 17408 ff33fc13a13d12f6ca0e094b63605958
PAGEDC40 512 03f30ad7fe7b297fe792ce78f9c0eaa8
PAGEDC40 512 027fecd6bf28fe809a22e39d25d05e8a
PAGEDC41 512 f79b2cb8c124376a967b3c7ce9f055c3
PAGEDC41 512 88a3421512dcfdb830b0fdbfca96c47d
PAGEDC50 512 7fe928fcc1e008e6887702821ada746a
PAGEDC50 512 6b231d0c63ca8c455a4347f0b2501a1e
PAGEDC60 512 bcc288a8a4c017dda2c386980c859039
PAGEDC60 512 c73131ba41834e20f845a3a3becc0652
PAGEDC80 2048 fe899f4ae64587d9a2f15394e48a58d7
PAGEDC80 512 c8dde11a6742a31b6a9db27e45a12ddf
PAGEDC10 512 db70df336d4855dc4843d8a548a26a6a
PAGEDC10 512 050a7a31f64d1fcc5fa111d0a8470dba
PAGEDC11 10240 5a1455db5b4aa6bebe7d7b04d08d0212
PAGEDC11 512 8700151e1c876b9d0a3210635380275e
PAGEDC11 512 a04f6141f268c42b50a51ce0c88f5c9a
PAGEDC11 512 6dee5ca074825668f2398fe452994769
PAGEDC12 512 ef8e3ae3abb5cfc5eb4891b2675bd353
PAGEDC12 1024 e83de5728e6a85783ee46c542c2fac98
PAGE_CPR 36864 69a991842aea746713de9e9d329abf8e
INIT 7168 6ccb0044d4bc9794f8d5d4280daf35dc
.rsrc 9216 4d3e10b536f489b119dda6ccc5f3271c
.reloc 142336 ee50194665966ca64fd3f0a4a2104a68

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for atikmdag.sys
copyright for information about atikmdag.sys