How to remove roboot.exe.vir
- File Details
- Overview
- Analysis
roboot.exe.vir
The module roboot.exe.vir has been detected as PUP.Systweak
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
412f900c6a5770d4b877ab6b097bc873 |
| Size: |
16 KB |
| First Published: |
2017-05-21 15:02:00 (6 years ago) |
| Latest Published: |
2020-11-07 12:18:35 (3 years ago) |
| Status: |
PUP.Systweak (on last analysis) |
|
| Analysis Date: |
2020-11-07 12:18:35 (3 years ago) |
Overview
| %windir%\system32 |
| %sysdrive%\qoobox\quarantine\c\windows\system32 |
| %system% |
| %system% |
| %system% |
| %system% |
| roboot.exe |
| roboot.exe.vir |
|
30.2% |
|
|
17.0% |
|
|
11.3% |
|
|
11.3% |
|
|
7.5% |
|
|
3.8% |
|
|
3.8% |
|
|
3.8% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
|
1.9% |
|
| Windows 7 |
72.5% |
|
| Windows XP |
13.7% |
|
| Windows 10 |
9.8% |
|
| Windows 8 |
2.0% |
|
| Windows Vista |
2.0% |
|
Analysis
| Subsystem: |
Native |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x01000000 |
| Entry Address: |
0x000025dc |
| Name |
Size of data |
MD5 |
| .text |
8192 |
9d7f561c4d8d7a71bf1e873c7a94ff95 |
| .data |
512 |
563629f165a1b00ba1c92b2b4adf94bb |
| .rsrc |
1024 |
6466b0cc4315665db3c28e22292102b5 |
| .reloc |
512 |
e9fafa8c166ea119be272f16090f9734 |
