How to remove remorecover-windows (2017_12_20 22_40_44 UTC).exe

remorecover-windows (2017_12_20 22_40_44 UTC).exe

The module remorecover-windows (2017_12_20 22_40_44 UTC).exe has been detected as PUP.Gen

remorecover-windows (2017_12_20 22_40_44 UTC).exe
Remove remorecover-windows

File Details

Product Name:

Remo Recover

Company Name:

Remo Software

MD5: c23fce53dc02c9400742f598764ee14a
Size: 21 MB
First Published: 2017-12-26 15:10:09 (6 years ago)
Latest Published: 2019-11-04 03:09:47 (5 years ago)
Status: PUP.Gen (on last analysis)
Analysis Date: 2019-11-04 03:09:47 (5 years ago)

Overview

Signed By: Remo Software Private Limited
Status: Invalid (digital signature could be stolen or file could be patched)

Common Places:

%profile%
%sysdrive%\filehistory\black-moon\black-moon1965\data\c\users\trojanhorse6
%profile%\downloads
%desktop%
%profile%
%sysdrive%
%sysdrive%\windows.old\users\luis.direito
%desktop%

File Names:

remorecover-windows.exe
remorecover-windows (2017_12_20 22_40_44 UTC).exe
remorecover-windows (1).exe

Geography:

14.3%
10.7%
7.1%
7.1%
7.1%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%
3.6%

OS Version:

Windows 10 64.3%
Windows 7 25.0%
Windows 8.1 7.1%
Windows Server 2012 R2 3.6%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000117dc

PE Sections:

Name Size of data MD5
.text 62464 a33e9ff7181115027d121cd377c28c8f
.itext 4096 caec456c18277b579a94c9508daf36ec
.data 3584 746954890499546d73dce0e994642192
.bss 0 00000000000000000000000000000000
.idata 4096 e9b9c0328fd9628ad4d6ab8283dcb20e
.tls 0 00000000000000000000000000000000
.rdata 512 3dffc444ccc131c9dcee18db49ee6403
.rsrc 497664 948b38735f5baae8a57e664fadb037bb

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for remorecover-windows (2017_12_20 22_40_44 UTC).exe
copyright for information about remorecover-windows (2017_12_20 22_40_44 UTC).exe