How to remove st_rsser64.exe.vir

st_rsser64.exe.vir

The module st_rsser64.exe.vir has been detected as PUP.Toolbar

st_rsser64.exe.vir
Remove st_rsser64.exe.vir

File Details

Product Name:

Spyware Terminator 2015
Company Name:

Crawler Group, LLC
MD5: 8b76b9e23a8a2979abdcfecdee13214b
Size: 3 MB
First Published: 2017-05-26 13:02:15 (7 years ago)
Latest Published: 2024-11-15 23:01:03 (a month ago)
Status: PUP.Toolbar (on last analysis)
Analysis Date: 2024-11-15 23:01:03 (a month ago)

Overview

Signed By: Crawler Group, LLC
Status: Valid

Common Places:

%programfiles%\spyware terminator
%sysdrive%\windows.old.000\program files (x86)\spyware terminator
%commonappdata%\spyware terminator\update
%commonappdata%\martau\total uninstall 6\backup\spyware terminator 2015.analyzed.zip\c:\program files (x86)\spyware terminator
%sysdrive%\cce_quarantine
%programfiles%
%sysdrive%
%sysdrive%\w.system
%profile%\1 mynextportables\1 aa for128gigstickportable\spyware terminator premium 2015 3 0 1 112 portable\spyware terminator premium 2015 3.0.1.112 portable\data\roaming\modified\@appdatacommon@\spyware terminator\shared
%profile%\1 mynextportables\1 aa for128gigstickportable\spyware terminator premium 2015 3 0 1 112 portable\spyware terminator premium 2015 3.0.1.112 portable\data\roaming\modified\@programfilesx86@

File Names:

st_rsser64.exe
st_rsser64.exe.vir
{854E323E-6D90-4BC7-BA27-4241FA3BDE66}

Geography:

19.3%
16.2%
9.4%
7.0%
5.5%
3.1%
2.9%
2.6%
2.6%
2.6%
2.3%
2.3%
2.3%
1.8%
1.6%
1.6%
1.3%
1.3%
1.3%
1.3%
1.0%
1.0%
1.0%
0.8%
0.8%
0.8%
0.8%
0.5%
0.5%
0.5%
0.5%
0.5%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%

OS Version:

Windows 10 53.5%
Windows 7 34.1%
Windows 8.1 11.1%
Windows 8 0.5%
Windows Server 2008 R2 0.5%
Windows Vista 0.3%

Analysis

Subsystem: Windows CUI
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000400000
Entry Address: 0x002934e0

PE Sections:

Name Size of data MD5
.text 2696704 7834c0b40d6964566ff46af6db34a588
.data 263680 56d0d588362c5e007af383c9bf2b0a3a
.bss 0 00000000000000000000000000000000
.idata 12800 0ca92c46e707517f445faecc516cd0e5
.didata 3072 a04752109cd4d08b9066091cc4bd8ee5
.tls 0 00000000000000000000000000000000
.rdata 512 cef03107e35ff86b143a451b5daf9a2c
.pdata 156160 e9f72acdad9011e1d9b9ab61f05ffcd8
.rsrc 145408 6c3c25967157643e586401ffd4925a2e

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for st_rsser64.exe.vir
copyright for information about st_rsser64.exe.vir