How to remove defwind.dll

defwind.dll

The module defwind.dll has been detected as Trojan.Gen

defwind.dll
Remove defwind.dll

File Details

Product Name:

GTCoach
Company Name:

GTek Technologies Ltd.
MD5: 258b067d0391d74d09287c024cc0a6b1
Size: 16 KB
First Published: 2017-05-24 20:02:55 (7 years ago)
Latest Published: 2020-02-08 09:58:57 (4 years ago)
Status: Trojan.Gen (on last analysis)
Analysis Date: 2020-02-08 09:58:57 (4 years ago)

Common Places:

%commondir%\aolshare\coach\en_en\player\plugin
%commondir%\aolshare\coach\uk_uk\player\plugin
%commondir%\aolshare\coach\player\plugin
%sysdrive%\programme\gemeinsame dateien\aolshare\coach\de_de\player\plugin
%commondir%\aolshare\coach\uk_uk\player
%commondir%\aolshare\coach\player
%commondir%\aolshare\coach\en_en\player
%sysdrive%\tom drive alt4\program files\common files\aolcoach\en_en\player

Geography:

54.5%
18.2%
18.2%
9.1%

OS Version:

Windows 10 27.3%
Windows XP 27.3%
Windows 7 27.3%
Windows 8.1 9.1%
Windows Vista 9.1%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x00002b50

PE Sections:

Name Size of data MD5
.text 7680 96373c8dbaa5a0b8f279dbae5abd6eca
.rdata 1024 25760f8159993d5edda8bef57ea88210
.data 1024 6a1a54d3e320750b728952580c8aaa62
.idata 3584 d79545093b25ed69847fea8ca2219f5c
.rsrc 1024 23e819fe3069368ab42fb2cab4407b4c
.reloc 1024 368b66c426a782a7a43c6b312c0ddfed

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for defwind.dll
copyright for information about defwind.dll