How to remove rcrbsi.exe
rcrbsi.exe
The module rcrbsi.exe has been detected as Trojan.Nitol
File Details
| Product Name: | yetaimei |
| Company Name: | yetaimei |
| MD5: | f279b3fd0a7e9a90057b855b8f33c435 |
| Size: | 20 KB |
| First Published: | 2017-10-30 10:13:09 (7 years ago) |
| Latest Published: | 2017-10-30 10:13:48 (7 years ago) |
| Status: | Trojan.Nitol (on last analysis) | |
| Analysis Date: | 2017-10-30 10:13:48 (7 years ago) |
Common Places:
| %sysdrive%\windows |
| %localappdata%\microsoft\windows\temporary internet files\content.ie5\2ocb4zma |
File Names:
| cksgso.exe |
| rcrbsi.exe |
| posters[1].exe |
Geography:
| 66.7% | ||
| 33.3% |
OS Version:
| Windows Server 2008 R2 | 66.7% | |
| Windows Server 2012 R2 | 33.3% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0000e410 |
PE Sections:
| Name | Size of data | MD5 |
| UPX0 | 0 | 00000000000000000000000000000000 |
| UPX1 | 17920 | 26edda881160cc45bfdfe6491a4af914 |
| .rsrc | 2048 | 75e0ab84649669f4879403a3f8355652 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for rcrbsi.exe
