How to remove niPortableRegistry.dll

niPortableRegistry.dll

The module niPortableRegistry.dll has been detected as Worm.Ramnit

niPortableRegistry.dll
Remove niPortableRegistry.d

File Details

Product Name:

NIPORTABLEREGISTRY
Company Name:

National Instruments Corporation
MD5: ac7b337047df94d5c1b70b0ca3cd6920
Size: 421 KB
First Published: 2018-07-10 11:13:36 (6 years ago)
Latest Published: 2018-07-10 11:13:36 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2018-07-10 11:13:36 (6 years ago)

Common Places:

%programfiles%\national instruments\shared

Geography:

100.0%

OS Version:

Windows XP 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x0003f000

PE Sections:

Name Size of data MD5
.text 173568 9abcaa6d5c40073cd5d14fd808acd6b9
.rdata 41984 b9d762d4cd78f3026de5a65aa053c941
.data 3584 e966e4b052fbe866738132d242d15304
.rsrc 2048 db57c752324533de5802f6637247f248
.reloc 17920 64836e7788c86d8a60a669cb80ed903c
.text 191488 7a9b9f2bbc362f18004ed17a584b414b

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for niPortableRegistry.dll
copyright for information about niPortableRegistry.dll