How to remove diff.exe
diff.exe
The module diff.exe has been detected as Spy.Zbot
File Details
| Product Name: | DiffUtils |
| Company Name: | GNU <www.gnu.org> |
| MD5: | 5c2e8379860a650366a65f663565531d |
| Size: | 147 KB |
| First Published: | 2018-05-08 14:04:19 (6 years ago) |
| Latest Published: | 2018-06-15 03:10:51 (6 years ago) |
| Status: | Spy.Zbot (on last analysis) | |
| Analysis Date: | 2018-06-15 03:10:51 (6 years ago) |
Common Places:
| %programfiles%\rstudio\bin |
| %desktop%\tron\resources\stage_0_prep\log_tools |
| %programfiles%\kdiff3 |
| %desktop%\rstudio-0.99.893\bin |
| %sysdrive%\kiwi-pc\backup set 2017-11-17 101328\backup files 2018-01-01 010001\backup files 2.zip\c\program files\rstudio\bin |
| %profile%\downloads\programy\rstudioportable\app\rstudio\bin |
| %desktop%\data backup\program files\kdiff3 |
| %profile%\downloads\tron\resources\stage_0_prep\log_tools |
| %desktop%\retweaker |
| %programfiles%\westermo\weconfig |
Geography:
| 17.7% | ||
| 8.1% | ||
| 8.1% | ||
| 6.5% | ||
| 4.8% | ||
| 4.8% | ||
| 4.8% | ||
| 4.8% | ||
| 3.2% | ||
| 3.2% | ||
| 3.2% | ||
| 3.2% | ||
| 3.2% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% | ||
| 1.6% |
OS Version:
| Windows 10 | 58.1% | |
| Windows 7 | 37.1% | |
| Windows 8.1 | 4.8% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00001000 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 140800 | ba4ba835ea8ecdfe3cbe7be3da4ff1ce |
| .data | 512 | 6b76063ce0637a76a429dfd7ec6b8410 |
| .bss | 0 | 00000000000000000000000000000000 |
| .idata | 4096 | 884047882bfd797abd85c48566944c1d |
| .rsrc | 4096 | 5329d2ee6b0c07f62a937fa85d1786cc |
More information:
Download GridinSoft
Anti-Malware - Removal tool for diff.exe
