How to remove rm.exe
rm.exe
The module rm.exe has been detected as Spy.Zbot
File Details
| Product Name: | FileUtils |
| Company Name: | GNU <www.gnu.org> |
| MD5: | 08fd0668bcf8182eb38b55223717299e |
| Size: | 77 KB |
| First Published: | 2018-05-11 13:06:23 (6 years ago) |
| Latest Published: | 2018-06-09 10:24:14 (6 years ago) |
| Status: | Spy.Zbot (on last analysis) | |
| Analysis Date: | 2018-06-09 10:24:14 (6 years ago) |
Common Places:
| %sysdrive%\gal\visual novel reader (140302)\visual novel reader\library\update |
| %sysdrive%\gal\visual novel reader (151227)\visual novel reader\library\update |
| %sysdrive%\dmm\visual novel reader\visual novel reader\library\update |
| %sysdrive%\dmm\visual novel reader\visual novel reader (160220).7z\visual novel reader\library\update |
| %sysdrive%\dmm\visual novel reader\visual novel reader (160403).7z\visual novel reader\library\update |
| %sysdrive%\visual novel reader\library\update |
| %sysdrive%\download's firefox2\visual novel reader (160403).7z\visual novel reader\library\update |
| %sysdrive%\trans\vnr\visual novel reader (160403)\visual novel reader\library\update |
Geography:
| 63.6% | ||
| 18.2% | ||
| 18.2% |
OS Version:
| Windows 10 | 100.0% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00001000 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 70656 | 85666ff4b0ddf087bfb369c35c7423fd |
| .data | 512 | 4931ecf8fb5358fe61d7fb0076a87a8d |
| .bss | 0 | 00000000000000000000000000000000 |
| .idata | 2560 | dd3b913576e4548a353e57e80b5c98ef |
| .rsrc | 4096 | 5d856a8e021897dbec560beb46d25232 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for rm.exe
