How to remove kuaizipdrive.sys

kuaizipdrive.sys

The module kuaizipdrive.sys has been detected as Adware.Kuaiba

kuaizipdrive.sys
Remove kuaizipdrive.sys

File Details

Product Name:

WinMount Driver
Company Name:

WinMount International Inc
MD5: fee53173263b621656360f99e68dcda5
Size: 90 KB
First Published: 2017-05-25 23:03:26 (7 years ago)
Latest Published: 2023-01-04 23:17:33 (2 years ago)
Status: Adware.Kuaiba (on last analysis)
Analysis Date: 2023-01-04 23:17:33 (2 years ago)

Overview

Signed By: 上海广乐网络科技有限公司
Status: Valid

Common Places:

%programfiles%\辦揤\x64
%system%\drivers
%appdata%\zhp\quarantine
%programfiles%\¿ìñ¹\x64
%programfiles%\ｿ・ｹ\x64
%sysdrive%\system recovery\repair\backup
%programfiles%\¿לׁ¹\x64
%programfiles%\їмс№\x64
%sysdrive%\adwcleaner\quarantine\files
%sysdrive%\adwcleaner\quarantine\files\mkkqjpbdchlqaondykutffxwdslcecpl\x64

File Names:

KuaiZipDrive.sys
kuaizipdrive.sys
1FED940BD4057B6AADE28434835778EC7701BCB1.sys
kkfjafodfljaebwqpqqrfoprgvrfgvtc.back
qfcyhbyzclsvzquoycjccbsqzpijkwac.back
bwmhdcgxrmsxwfgfvunylgbmrknhlxfk.back

Geography:

16.5%
15.7%
6.1%
5.2%
4.3%
4.3%
4.3%
4.3%
4.3%
2.6%
2.6%
2.6%
2.6%
2.6%
1.7%
1.7%
1.7%
1.7%
1.7%
1.7%
1.7%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%
0.9%

OS Version:

Windows 10 51.7%
Windows 7 36.7%
Windows 8.1 10.8%
Windows 8 0.8%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x00016064

PE Sections:

Name Size of data MD5
.text 65024 53870cb8b5b7ba76fd9043c76865c8a4
.rdata 10752 39d563dbfe558cccd7ab40b3c4730dd8
.data 512 0949f85c2c90906fa0e79aada9fb749c
.pdata 2560 34b7b01d1995475b08e4ac2b927e27c0
INIT 3072 3687f5b7700f1103c5019af57fbf23aa
.rsrc 1024 27cbe0df31da5df5b0b183288c9c254c
.reloc 1024 efded90990668a6c239cb6ba3d45b9e5

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for kuaizipdrive.sys
copyright for information about kuaizipdrive.sys