How to remove msi.exe
msi.exe
The module msi.exe has been detected as Trojan.LoadMoney
File Details
| Product Name: | ERROA |
| Company Name: | ©Serel tocelie |
| MD5: | fbb43095b2d28f6ba96624c06cf9915d |
| Size: | 1 MB |
| First Published: | 2017-08-28 04:03:21 (7 years ago) |
| Latest Published: | 2017-08-28 21:08:36 (7 years ago) |
| Status: | Trojan.LoadMoney (on last analysis) | |
| Analysis Date: | 2017-08-28 21:08:36 (7 years ago) |
Overview
| Signed By: | OOO, "Plita" |
| Status: | Valid |
Common Places:
| %profile%\downloads |
| %appdata%\microsoft |
File Names:
| excel_7_e2a-33c___.exe |
| msi.exe |
Geography:
| 66.7% | ||
| 33.3% |
OS Version:
| Windows 10 | 66.7% | |
| Windows 7 | 33.3% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00001229 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 120320 | ed0fb8fb27260c60e3c9fa18e20bf177 |
| .rdata | 311296 | 906301e63d2b54f43ac7a408b00e53a2 |
| .data | 442880 | 54f78b5070c71f9379080b97b3cd420b |
| .74Es2 | 313856 | 4d05ab99eb6ae07c34301b8316037c58 |
| .yro79 | 713728 | ad4c33709ebed1ef2cff82d0b55e846c |
| .rsrc | 53760 | 61f423d09558dae15506c1970d17a9fb |
| .reloc | 4096 | 1ccc8fc20266e594daf92e4c00d40775 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for msi.exe
