How to remove tucl.dll.vir
tucl.dll.vir Removal: How to Get Rid of tucl.dll.vir1fa609bc0d252ca0915d6aed2df7ccc2
- File Details
- Overview
- Analysis
tucl.dll.vir
The module tucl.dll.vir has been detected as Trojan.Agent
File Details
| MD5: |
1fa609bc0d252ca0915d6aed2df7ccc2 |
| Size: |
6 KB |
| First Published: |
2017-07-18 23:06:47 (4 years ago) |
| Latest Published: |
2021-07-20 20:48:45 (9 days ago) |
| Status: |
Trojan.Agent (on last analysis) |
|
| Analysis Date: |
2021-07-20 20:48:45 (9 days ago) |
| %appdata%\ltdltd61\ea |
| %appdata%\notifynotify82\ea |
| %windir%\setup\fou |
| %system%\mfen.exe |
| %commonappdata%\rundll |
| %windir%\system32 |
| %commonappdata%\svhost |
| %temp%\5\rarsfx1 |
| %sysdrive%\$recycle.bin\s-1-5-21-2570348591-2767011175-3200952900-1016\$ro0c72t.rar\445\run\specials |
| %commonappdata%\temp\445.zip\run\specials |
|
39.7% |
|
|
12.1% |
|
|
8.9% |
|
|
8.3% |
|
|
3.7% |
|
|
3.6% |
|
|
2.8% |
|
|
2.5% |
|
|
1.7% |
|
|
1.7% |
|
|
1.5% |
|
|
1.4% |
|
|
0.9% |
|
|
0.9% |
|
|
0.8% |
|
|
0.7% |
|
|
0.7% |
|
|
0.6% |
|
|
0.6% |
|
|
0.5% |
|
|
0.4% |
|
|
0.4% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.3% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.2% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
|
0.1% |
|
| Windows 7 |
86.2% |
|
| Windows 10 |
8.9% |
|
| Windows Server 2008 R2 |
2.3% |
|
| Windows 8.1 |
1.1% |
|
| Windows XP |
0.8% |
|
| Windows Vista |
0.4% |
|
| Windows Server 2012 R2 |
0.3% |
|
| Windows Web Server 2008 R2 |
0.1% |
|
| Windows Server 2003 |
0.1% |
|
| Windows 8 |
0.1% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00001575 |
| Name |
Size of data |
MD5 |
| .text |
2560 |
40197c0c95411770a66d1df825d4b358 |
| .rdata |
1536 |
ba732bcf5b4d089ebfd0aef873c8342d |
| .data |
512 |
8fe55a0fd6f8d7370eec49f0fcfe9707 |
| .reloc |
512 |
1075d07c9e34499e6396e8397e9490c6 |
