How to remove rs-recover64.exe

rs-recover64.exe

The module rs-recover64.exe has been detected as PUP.Gen

rs-recover64.exe
Remove rs-recover64.exe

File Details

Product Name:

Remo Recover [Windows]
Company Name:

Remo Software
MD5: 814bb531cb35087f603dbf73954cedb4
Size: 3 MB
First Published: 2018-05-01 16:08:12 (6 years ago)
Latest Published: 2019-10-09 23:24:10 (5 years ago)
Status: PUP.Gen (on last analysis)
Analysis Date: 2019-10-09 23:24:10 (5 years ago)

Overview

Signed By: Remo Software Private Limited
Status: Invalid (digital signature could be stolen or file could be patched)

Common Places:

%desktop%\portatili\nuova cartella\remo data recovery software\roaming\modified\@programfiles@\remo recover 4.0
%sysdrive%\programme\remo recover 4.0
%programfiles%\undelete files & folders\remo data recovery software\roaming\modified\@programfiles@\remo recover 4.0

Geography:

33.3%
33.3%
33.3%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000140000000
Entry Address: 0x0017521c

PE Sections:

Name Size of data MD5
.text 1818624 15cda56d29032cb74e5b24637334c897
.rdata 617472 7d450dc18cd6087db3deeefe8d6f9d11
.data 17920 a84cf02dfe065a7a69a039bf15b2de0b
.pdata 87552 9b6355767e5cfec08f76039a1ce51249
.rsrc 1446400 c8ce6e6f825db6dc6b49e85c3d13ab1c
.reloc 29696 9c6a0fe6d39224f940e0bc8b24185468

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for rs-recover64.exe
copyright for information about rs-recover64.exe