How to remove ctor.dll
ctor.dll
The module ctor.dll has been detected as Worm.Ramnit
File Details
| Product Name: | InstallShield (R) |
| Company Name: | InstallShield Software Corporation |
| MD5: | db32f4c0b49712355a28fd9383f0e130 |
| Size: | 212 KB |
| First Published: | 2017-05-30 08:04:34 (6 years ago) |
| Latest Published: | 2017-06-12 06:06:17 (6 years ago) |
| Status: | Worm.Ramnit (on last analysis) | |
| Analysis Date: | 2017-06-12 06:06:17 (6 years ago) |
Geography:
| 100.0% |
OS Version:
| Windows Vista | 50.0% | |
| Windows 7 | 50.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x10000000 |
| Entry Address: | 0x00013000 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 28672 | 36def2ae458b82ee74bd36fe5374d635 |
| .rdata | 8192 | b874a8ec2cead6396cea7cab6f5e69df |
| .data | 4096 | 447d3fd07062f093b35ab3f0fe3cf510 |
| .rsrc | 28672 | 0809aa53be4e2de89c428d93edab1810 |
| .reloc | 4096 | 0ce68ed8d63eb04bca96f4ddcad75f3d |
| .text | 139264 | 2ce76dfe861f874390570438b17c091e |
More information:
Download GridinSoft
Anti-Malware - Removal tool for ctor.dll
