How to remove krnl.dll
krnl.dll
The module krnl.dll has been detected as Trojan.Conteban
File Details
| MD5: | 572aa6b582c7682d7c774f159f1ec392 |
| Size: | 7 MB |
| First Published: | 2022-08-14 23:37:40 (3 years ago) |
| Latest Published: | 2025-02-04 23:01:36 (9 months ago) |
| Status: | Trojan.Conteban (on last analysis) | |
| Analysis Date: | 2025-02-04 23:01:36 (9 months ago) |
Overview
| Signed By: | 1305119 B.C. Ltd |
| Status: | Valid |
Common Places:
| %desktop% |
| %desktop% |
| %desktop%\1 |
| %appdata% |
| %sysdrive%\$recycle.bin\s-1-5-21-1765715252-3419368395-949136665-1001\$r3ojaj0 |
Geography:
| 40.0% | ||
| 20.0% | ||
| 20.0% | ||
| 20.0% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x10000000 |
| Entry Address: | 0x00d9ccbb |
PE Sections:
| Name | Size of data | MD5 |
| .text | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .rdata | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .data | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .detourc | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .detourd | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .km30 | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .km31 | 7583744 | 5c4e3c773b7364c336686c129cd783f0 |
| .reloc | 1536 | ff1fc5e5e2c4d26ec3b73b151bfbdb69 |
| .rsrc | 512 | ddf8352771647ddf22ac9c63d5484cdb |
More information:
Download GridinSoft
Anti-Malware - Removal tool for krnl.dll
