How to remove ndistpr64.sys

ndistpr64.sys

The module ndistpr64.sys has been detected as Rootkit.5Hex

ndistpr64.sys
Remove ndistpr64.sys

File Details

MD5: a1184d89fddc3c481bce6ecc1384a192
Size: 78 KB
First Published: 2017-06-06 15:09:28 (6 years ago)
Latest Published: 2017-10-15 23:17:48 (6 years ago)
Status: Rootkit.5Hex (on last analysis)
Analysis Date: 2017-10-15 23:17:48 (6 years ago)

Overview

Signed By: Handan City Congtai District LiKang Daily Goods Department
Status: Valid

Common Places:

%system%\drivers

Geography:

100.0%

OS Version:

Windows 10 90.0%
Windows 7 10.0%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x000db000

PE Sections:

Name Size of data MD5
.text 37376 2a20f59513f833d06ac4e7d7a8d1d125
.rdata 19968 53441b5135c766b0477332adf2ea4887
.data 7680 aeb08dcbeadebd6b30dcdb5c880b084d
.pdata 2048 c019e2abb090147a1db198f98dd47069
INIT 4096 233f77187ee0c68d71e527b166375a72
.reloc 3584 2a21d405cb795fc46c70c97c05030c96

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for ndistpr64.sys
copyright for information about ndistpr64.sys