How to remove krnl.dll
krnl.dll
The module krnl.dll has been detected as Trojan.Conteban
File Details
| MD5: | 5fb557e07f9d572aae81534d3a7a52cf |
| Size: | 3 MB |
| First Published: | 2022-09-13 23:35:07 (2 years ago) |
| Latest Published: | 2024-07-05 23:02:06 (8 months ago) |
| Status: | Trojan.Conteban (on last analysis) | |
| Analysis Date: | 2024-07-05 23:02:06 (8 months ago) |
Overview
| Signed By: | 1305119 B.C. Ltd |
| Status: | Valid |
Common Places:
| %profile% |
| %profile%\downloads |
| %sysdrive%\$recycle.bin\s-1-5-21-2732113432-2500164492-3555940364-1001 |
| %profile%\downloads |
Geography:
| 50.0% | ||
| 25.0% | ||
| 25.0% |
OS Version:
| Windows 8.1 | 50.0% | |
| Windows 10 | 50.0% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x10000000 |
| Entry Address: | 0x0060aef7 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .rdata | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .data | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .detourc | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .detourd | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .uo2s0 | 0 | d41d8cd98f00b204e9800998ecf8427e |
| .uo2s1 | 3713024 | 9ff70c9261706fa27ad069d634fd4290 |
| .reloc | 7168 | 2efdd1c0bfa0c47e3a458e522c273c6e |
| .rsrc | 512 | f01b312f0d103941c492b77ae6280847 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for krnl.dll
