How to remove protector.dll
- File Details
- Overview
- Analysis
protector.dll
The module protector.dll has been detected as Adware.Rotbrow
File Details
Product Name: |
|
Company Name: |
|
MD5: |
6003e9c2b9a865d7a1fbc5d87295d197 |
Size: |
2 MB |
First Published: |
2017-07-27 21:09:36 (7 years ago) |
Latest Published: |
2019-05-08 00:12:10 (5 years ago) |
Status: |
Adware.Rotbrow (on last analysis) |
|
Analysis Date: |
2019-05-08 00:12:10 (5 years ago) |
Overview
Signed By: |
Bit89 Inc. |
Status: |
Invalid (digital signature could be stolen or file could be patched) |
%sysdrive%\!!!!admin\moje dokumenty\ustawienia lokalne\temporary internet files\content.ie5\0fsk8gek |
%localappdata%\microsoft\windows\temporary internet files\content.ie5\at3wk9d9 |
Windows 7 |
66.7% |
|
Windows 10 |
33.3% |
|
Analysis
Subsystem: |
Windows CUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x10000000 |
Entry Address: |
0x00142745 |
Name |
Size of data |
MD5 |
.text |
1581056 |
29da7b01f5f8e49cee404ac9a4deb785 |
.rdata |
497152 |
0e442c0ad8784fe0f1b82d533fdea1bd |
.data |
23552 |
b5180a5941ad625ccf1ac074b5b57762 |
.tls |
512 |
bf619eac0cdf3f68d496ea9344137e8b |
.rsrc |
1536 |
dd1edb975c8c619673b9018624c86246 |
.reloc |
121344 |
8f5e72ac7e11a1d9675d6b2738cdaa16 |