How to remove perf_nt.dll

perf_nt.dll

The module perf_nt.dll has been detected as Worm.Ramnit

perf_nt.dll
Remove perf_nt.dll

File Details

Product Name:

Microsoft® Windows® Performance Analyzer
Company Name:

Microsoft Corporation
MD5: 0634a91f7d0b18baba5f8fb768cfb007
Size: 1 MB
First Published: 2017-12-03 13:04:14 (7 years ago)
Latest Published: 2017-12-03 13:05:00 (7 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2017-12-03 13:05:00 (7 years ago)

Common Places:

%programfiles%\internet explorer

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x00105000

PE Sections:

Name Size of data MD5
.text 972800 27f38f739a0d653ac05c51fab98577e0
.data 9216 49d3065ab477b31f7e33e6db857ab287
.idata 5120 57a7977b8d939bbd337c9139f6ecccee
.rsrc 1536 e49a31e40cec68f6de2c69e6c9edca17
.reloc 62976 652979e33af2c32309a15f8769c66729
.text 64000 29d1bd96cf8283508d216e5bbd6fbe9b

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for perf_nt.dll
copyright for information about perf_nt.dll