How to remove c1bf95b7-9d21-4302-bbde-c1ab4ab9ccf5-10.exe.vir

c1bf95b7-9d21-4302-bbde-c1ab4ab9ccf5-10.exe.vir

The module c1bf95b7-9d21-4302-bbde-c1ab4ab9ccf5-10.exe.vir has been detected as Adware.Crossrider

c1bf95b7-9d21-4302-bbde-c1ab4ab9ccf5-10.exe.vir
Remove c1bf95b7-9d21-4302-b

File Details

Product Name:

I - Cinema
Company Name:

iCinema
MD5: cf4159463b40bedbbe4284ae1e3570bb
Size: 1 MB
First Published: 2018-09-18 15:07:38 (6 years ago)
Latest Published: 2019-04-21 02:22:38 (5 years ago)
Status: Adware.Crossrider (on last analysis)
Analysis Date: 2019-04-21 02:22:38 (5 years ago)

Common Places:

%sysdrive%\adwcleaner\quarantine\c\program files
%sysdrive%\windows.old\program files (x86)

Geography:

50.0%
50.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0009a34d

PE Sections:

Name Size of data MD5
.text 786432 8d374a36f5b39f94b3ac8af5e86ea426
.rdata 286720 363803fd27f6cfa9509177a8a974beaa
.data 25600 47d56943baa94aad5b8b9204e776c73a
.tls 512 bf619eac0cdf3f68d496ea9344137e8b
.rsrc 73728 0370351e1b5216fa8a510f263876583d
.reloc 115712 adeb97a1b569be75eadce7a57d1e55a2

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for c1bf95b7-9d21-4302-bbde-c1ab4ab9ccf5-10.exe.vir
copyright for information about c1bf95b7-9d21-4302-bbde-c1ab4ab9ccf5-10.exe.vir