How to remove gsort.exe

gsort.exe

The module gsort.exe has been detected as Spy.Zbot

gsort.exe
Remove gsort.exe

File Details

Product Name:

CoreUtils
Company Name:

GNU <www.gnu.org>
MD5: 4de87d064877fa6726654f6812a719b0
Size: 94 KB
First Published: 2018-05-08 19:11:52 (6 years ago)
Latest Published: 2018-06-11 12:09:14 (6 years ago)
Status: Spy.Zbot (on last analysis)
Analysis Date: 2018-06-11 12:09:14 (6 years ago)

Common Places:

%profile%\downloads\downloads\ubcd535\ubcd\tools\win32\unxutils
%sysdrive%\- web traffic generators\proxyfire.v1.23.zip
%programfiles%\microchip\mplabx\v4.05\gnubins\gnuwin32
%sysdrive%\galaxy1\programas\recovery prog\ubcd502\ubcd\tools\win32\unxutils
%sysdrive%\saved applications\microsoft windows complete\microsoft builds\ubcd538\ubcd\tools\win32\unxutils
%profile%\downloads\win7-ie11-slipstream-master
%profile%\downloads\új mappa (2)\ubcd\tools\win32\unxutils
%profile%\downloads\tools\proxyfire.v1.24.zip
%programfiles%\microchip\mplabx\v3.15\gnubins\gnuwin32
%desktop%\desktop\7 reasons your pbn sucks\hackpack v2\hackpack\proxy grabbers\proxyfire.master.suite.professional.v1.23.incl.keygen-ngen

File Names:

sort.exe
gsort.exe
gnusort.exe
SORT_.DAT

Geography:

30.6%
14.3%
8.2%
8.2%
6.1%
4.1%
4.1%
4.1%
4.1%
4.1%
4.1%
2.0%
2.0%
2.0%
2.0%

OS Version:

Windows 10 59.2%
Windows 7 32.7%
Windows 8.1 8.2%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00001000

PE Sections:

Name Size of data MD5
.text 86528 b783dfd178d65a15cf0aacf4d0d737e7
.data 512 e21bfe3c92320bbf78f30b0cbd1b0f0f
.bss 0 00000000000000000000000000000000
.idata 4096 6b0946a4e3d93780ac0ae46020e98ed6
.rsrc 4096 c6a67cb7d4b40519339f59d956c4a2f6

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for gsort.exe
copyright for information about gsort.exe