How to remove irfanview_1271942517.exe

irfanview_1271942517.exe

The module irfanview_1271942517.exe has been detected as Adware.InstallCore

irfanview_1271942517.exe
Remove irfanview_1271942517

File Details

Product Name:

Bebonefolo

Company Name:

Pepe

MD5: 3bd27b5dc079f2f2823edf48d52a5a05
Size: 1 MB
First Published: 2018-06-02 20:05:04 (6 years ago)
Latest Published: 2018-11-12 18:03:35 (6 years ago)
Status: Adware.InstallCore (on last analysis)
Analysis Date: 2018-11-12 18:03:35 (6 years ago)

Overview

Signed By: LAM Proactive And Investments Ltd
Status: Valid

Common Places:

%profile%
%temp%
%sysdrive%\$recycle.bin

File Names:

internet_explorer_0340326942.exe
irfanview_1271942517.exe
yahoo_messenger_1686857486.exe
windows_movie_maker_2318291479.exe
imacros_for_firefox_2291151234.exe
$RA3WD5L.exe

Geography:

33.3%
22.2%
22.2%
11.1%
11.1%

OS Version:

Windows 7 66.7%
Windows 10 33.3%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00009c40

PE Sections:

Name Size of data MD5
CODE 37888 eaae66294fde7b85d03ea440f17e5bec
DATA 1024 d5ea23d4ecf110fd2591314cbaa84278
BSS 0 00000000000000000000000000000000
.idata 2560 bb5485bf968b970e5ea81292af2acdba
.tls 0 00000000000000000000000000000000
.rdata 512 9ba824905bf9c7922b6fc87a38b74366
.reloc 0 00000000000000000000000000000000
.rsrc 11264 1174d219cea8e8fe67174b8ac91332e7

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for irfanview_1271942517.exe
copyright for information about irfanview_1271942517.exe