How to remove r_install.exe

r_install.exe

The module r_install.exe has been detected as PUP.RemoteAdmin

r_install.exe
Product Name:

ROMServer

MD5: 2eea60ab91bf1a90af8c49c108ec18ae
Size: 6 MB
First Published: 2017-09-29 05:08:04 (6 years ago)
Latest Published: 2018-07-13 20:28:00 (6 years ago)
Status: PUP.RemoteAdmin (on last analysis)
Analysis Date: 2018-07-13 20:28:00 (6 years ago)
Signed By: Yakhnovets Denis Aleksandrovich IP
Status: Valid
%programfiles%\litemanager pro - server\romserverupdate
%programfiles%\litemanager pro - server
%programfiles%\litemanager pro - viewer\server
%sysdrive%\programmi\litemanager pro - viewer
%sysdrive%\programmi
%programfiles%
%programfiles%\litemanager pro - viewer
%profile%\downloads
ROMServer.exe
r_install.exe
35.3%
17.6%
17.6%
11.8%
5.9%
5.9%
5.9%
Windows 10 52.9%
Windows 7 29.4%
Windows XP 17.6%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x004b7e34

PE Sections:

Name Size of data MD5
.text 4928512 6fa71ffd038f06f3f3226a3264d72c3f
.itext 12288 d9f95ed6a3341ab897707e04892644a3
.data 80384 013d2a8b4bc8ac768832f86e859a6883
.bss 0 00000000000000000000000000000000
.idata 21504 127b95e0a39f6ba3b4ab639ff8189c99
.didata 3072 3e82e1fb8ea6ba290212ae52741221e1
.edata 512 2c993fd87361fb0c53d779b7caec7f68
.tls 0 00000000000000000000000000000000
.rdata 512 85bc46bfadb02ce7b930da0f1f74eff1
.reloc 419328 7d9d1d287b52348adca33998bb3150c7
.rsrc 957952 ffdc6a951b3c7bb3c942e27686f796b1

More information:

Download GridinSoft Anti-Malware - Removal tool for r_install.exe