How to remove ntwdblib.dll

ntwdblib.dll

The module ntwdblib.dll has been detected as Trojan.CoinMiner

ntwdblib.dll
Remove ntwdblib.dll

File Details

Product Name:

UACMe
Company Name:

UG North
MD5: c8fe2d4044db1d949de61be4c220c39e
Size: 41 KB
First Published: 2018-10-30 05:07:38 (6 years ago)
Latest Published: 2018-11-10 20:10:35 (6 years ago)
Status: Trojan.CoinMiner (on last analysis)
Analysis Date: 2018-11-10 20:10:35 (6 years ago)

Common Places:

%system%
%temp%
%windir%\microsoft.net\framework64

File Names:

unbcl.dll
ntwdblib.dll
dismcore.dll
elsext.dll
pe386.dll
MSCOREE.DLL

Geography:

44.4%
33.3%
22.2%

OS Version:

Windows 10 55.6%
Windows 8.1 44.4%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000180000000
Entry Address: 0x000026dc

PE Sections:

Name Size of data MD5
.text 7168 1a85fc67dad0f26c980fd4081f19751d
.rdata 31744 92517a3996f7443439fbd95835faa10a
.data 512 a92f94c6aed250e03affdacd6da88ce6
.pdata 512 3195cd75cdfdb08212bbd8ee0fbba299
.rsrc 1024 ba1529dbc74d718cbf5720789c592e90

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for ntwdblib.dll
copyright for information about ntwdblib.dll