How to remove gtasaSrv.exe

gtasaSrv.exe

The module gtasaSrv.exe has been detected as Backdoor.Ramnit

gtasaSrv.exe
Remove gtasaSrv.exe

File Details

MD5: 8be9289810068cf9782033bbceb3b9fb
Size: 111 KB
First Published: 2018-07-21 20:07:02 (5 years ago)
Latest Published: 2018-09-02 21:14:57 (5 years ago)
Status: Backdoor.Ramnit (on last analysis)
Analysis Date: 2018-09-02 21:14:57 (5 years ago)

Common Places:

%profile%
%sysdrive%\plants vs. zombies

File Names:

DesktopLayer.exe
gtasaSrv.exe

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0002e000

PE Sections:

Name Size of data MD5
UPX0 0 00000000000000000000000000000000
UPX1 53760 69a63f46f284ca3eb291d3cfecc800c2
.rsrc 1536 c92204b5396c844fe086f262c30c9047
.rmnet 57856 315a581d8d6a235bba1cbffd6e18a0b1

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for gtasaSrv.exe
copyright for information about gtasaSrv.exe