How to remove defrag.exe

defrag.exe

The module defrag.exe has been detected as Worm.Ramnit

defrag.exe
Remove defrag.exe

File Details

Product Name:

SPSS For Windows
Company Name:

SPSS Inc
MD5: 96f9394b5d861b2dd8635c98e548ee52
Size: 9 MB
First Published: 2018-04-15 08:11:38 (6 years ago)
Latest Published: 2018-04-15 08:11:38 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2018-04-15 08:11:38 (6 years ago)

Common Places:

%sysdrive%\งานกู้ 240658\root\program files

Geography:

100.0%

OS Version:

Windows XP 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00912000

PE Sections:

Name Size of data MD5
.text 28672 e7cf3d8a6f2b1d87d194022e691054ae
.rdata 8192 27db0a66795e4b1a7ddd2169cb125306
.data 4096 ec6c4e8097a83a5902dece7047cfa69e
.idata 4096 7be3a22944b64eac8b049853dd5af378
.rsrc 16384 bf63b8420a02039891fd7bb8f601eae6
.reloc 4096 5e3f23acc88ce3a65b984141f9cc930b
.grdata 20480 92949c5d1d2dddd92c96aa63decb59d2
.text 188416 ae582b3efe0176fb09ce8e0197e850e3
.text 188416 c60eabbb40bab4ff40cfc1a96fb1d1c5
.text 188416 3891eacb8308bf1a26846153fabd5928
.text 188416 0cfc6843d0adb3cad1a6c4b9bd0bb7e2
.text 188416 6d1862ffa4ff08f191d63fafd14e4700
.text 188416 30932bf686ff9c039ccfdce284519a19
.text 188416 0f0f1e20eda276c35a8bdb04bd1049d8
.text 188416 586ed53f0f3e9f1d7daf71e0a76029d7
.text 188416 f80af1d4a007bb5cd5f742718a11ae96
.text 188416 07fb796f5b643f0fa9d1b37254d43851
.text 188416 5b23a20540048b62993f7c6c1d267e72
.text 188416 f2ae24b92a12ca844f388ccdfc7a9c24
.text 188416 5a157db8eb34612a2cd2d23e838bb955
.text 188416 cbab57f473579150f935de0384ceb4b7
.text 188416 c9d6b872515c34d08fc254a37b05b018
.text 188416 4d83623abc20485c44c1e4428b3f3c0b
.text 188416 1cd6fd2b0edeafc52222fbb6b1b8798d
.text 188416 e92aa1affb946ffb3537c7acdb0dd2c8
.text 188416 b443109ef380a22148cf9b550e0c9709
.text 188416 610d26cc1ae2adecc84fecfa016f156d
.text 188416 3494aa9cba9fabb6e7f38ffecbe7b2d7
.text 188416 0d46ea136fb2ae578fb1603cfb007ba0
.text 188416 499169654d943298503b546d4dad53e2
.text 188416 d50e8d793ad9f411841227493533bb87
.text 188416 702fcc895b51db56d16d7f647a851786
.text 188416 3864bec4a742190ea213b9974ee942dd
.text 188416 452660d4a917a0c533b3045698b92f40
.text 188416 8a1820d097116b30c82565b676262ab1
.text 188416 6fb7f8f9e1544d3ace219f5609a2c442
.text 188416 ada839ea26cd6f2de60abb3cac8896ea
.text 188416 6ccaa0b2ea7f741e4f13a8e3b4764431
.text 188416 3b0c6df124ec7462e3dc2f81efdc348a
.text 188416 fcf889281ee934f9f3aa8dfdc73b8607
.text 188416 03576e0baa8632e086bb97c07817cb96
.text 188416 f6ef9cf033c852055ab551e19c8b8123
.text 188416 97aa2a18760aad7cb1d1ce3de265cb12
.text 188416 48948c4629bc5bbd078eb7cddd16840b
.text 188416 6cb0d57d8e681917adcc143d0adbb344
.text 188416 4328f7fab079b307c2a81886927b450b
.text 188416 751e9f946e4128c2f788295032fdb7a6
.text 188416 b67a43525db2c55923b3b61949467072
.text 188416 042e9c0fb919bfd0370d3f26049a0e28
.text 188416 03947cc469c5187e745a9aa03dab7628
.text 188416 72d5c58e8e0f732c8f164a52936d9f16
.text 188416 a8758da2e358f9d7fa95ee3a98e3cd4a
.text 188416 fac7035758bc51363e4a95bfa9858e46
.text 188416 3fe423b2058b8b4c0ec049939b825548
.text 188416 52cb5a5149ad62e2222abd620bbdc0ff
.text 188416 639fd07ccc9d47c2ca137b64220373a6
.text 188416 fe1f9d5d810e9788b020c3882ca94bda
.text 167936 0ef03eaaf8b3baa96804063170f09bcd

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for defrag.exe
copyright for information about defrag.exe