How to remove ff_unrar.dll

ff_unrar.dll

The module ff_unrar.dll has been detected as Worm.Ramnit

ff_unrar.dll
Remove ff_unrar.dll

File Details

Product Name:

RAR decompression library
Company Name:

Alexander Roshal
MD5: 0cc574935663de88d7082b15539282a0
Size: 269 KB
First Published: 2017-09-20 14:03:01 (6 years ago)
Latest Published: 2017-09-20 14:03:01 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2017-09-20 14:03:01 (6 years ago)

Common Places:

%programfiles%\k-lite codec pack\filters\ffdshow

Geography:

100.0%

OS Version:

Windows XP 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x0002f000

PE Sections:

Name Size of data MD5
.text 124416 178ceefc3e75f8d7b1f4a0630b7c3de3
.rdata 15872 5e71fec134407a3880dcd2785bc425f2
.data 5632 d94c33893a695c08bbf72ac98ac924ed
.rsrc 1536 7975fa3fe9c16eb57a23e93d73ac8184
.reloc 8704 9d8e47a9864958eb6afad74d66f5f73f
.text 118272 283b7e0eabd649ff9ffdcdfaf21fc6ca

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for ff_unrar.dll
copyright for information about ff_unrar.dll