How to remove niPortableRegistryRemote.dll

niPortableRegistryRemote.dll

The module niPortableRegistryRemote.dll has been detected as Worm.Ramnit

niPortableRegistryRemote.dll
Remove niPortableRegistryRe

File Details

Product Name:

NIPORTABLEREGISTRYREMOTE
Company Name:

National Instruments Corporation
MD5: 9c815a20a58268d8c45535a8afed6586
Size: 508 KB
First Published: 2018-07-10 11:13:39 (6 years ago)
Latest Published: 2018-07-10 11:13:39 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2018-07-10 11:13:39 (6 years ago)

Common Places:

%programfiles%\national instruments\shared

Geography:

100.0%

OS Version:

Windows XP 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x00055000

PE Sections:

Name Size of data MD5
.text 239104 cc074cf42ee980901f09507bfd6fded8
.rdata 57856 9064930ed3e4f24c0e71a8b29078e597
.data 7168 3306a91e428e3dd12a22f96bf4fb3d26
.rsrc 2048 d6e9aa2765f67061b31cfe28fddcac6f
.reloc 22016 20fe6778798eefe0eda2175d0184ffa5
.text 191488 f53276331c9eba95ad0794eb93802508

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for niPortableRegistryRemote.dll
copyright for information about niPortableRegistryRemote.dll