How to remove tvcshell.exe

tvcshell.exe

The module tvcshell.exe has been detected as Worm.Ramnit

tvcshell.exe
Product Name:

tvcshell Application

MD5: 28c110129168eaf4990caeb710903ab7
Size: 3 MB
First Published: 2017-12-18 12:06:08 (6 years ago)
Latest Published: 2017-12-18 12:06:08 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2017-12-18 12:06:08 (6 years ago)
%sysdrive%\logiciel\converter 3gp
100.0%
Windows 7 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0033f000

PE Sections:

Name Size of data MD5
.text 4096 edd9f2cab39b711326c4b92f80b4e62c
.rdata 4096 304850e60f95ba6031fe50c25cf611d3
.data 4096 27f91d0b12ed843df7d3b5bed5b48f4f
.rsrc 102400 6b02e02a1f6003787af4bbaf05006bde
rwvouoz 0 00000000000000000000000000000000
.text 155648 e5820204290628c337043a4a6681b448
udtypkz 73728 46b6b5edcacccbc64489e69bbeaeb897
.text 188416 ef7e683cf9ed713943a9e037805e6fe1
guzyzwa 86016 7e45866cb2ab115910c5cda870819593
.text 217088 27e54d3ff067b0df410146b5b8029dbe
offbehf 73728 daa767d680b393334604bd9a33e8436c
.text 249856 3531a235dd1d2227a618d5c4ae1da2df
ofmkrff 73728 098a07838a2bfcb3dbec38c00d77371d
.text 409600 bf5926167777d06b5ee5b178fc7e1798
jbtvfdm 0 00000000000000000000000000000000
.text 409600 e5d5a00cde6d5bf93efe588095ca7dbc
vxqotsd 0 00000000000000000000000000000000
.text 217088 16a79434d84783e23426d48bcb84c520
xrnxhan 0 00000000000000000000000000000000
.text 217088 b57f906ff548947f759b75b5aaae5603
nhqcvgs 0 00000000000000000000000000000000
.text 409600 235cd671d0cb29019baeceb8338c1d3d
phacndp 0 00000000000000000000000000000000
.text 188416 51dbb5f4f94be5aa434abfe2c69a49f4
utooyqc 32768 765e10472dc1abba013277e68ee14150
fwsctdb 0 00000000000000000000000000000000
.text 249856 a02cacb186e2442bb38c3782955c2da1
bmwejim 0 00000000000000000000000000000000
.text 159744 43879414b2d8ca59a0c113d8774a1723

More information:

Download GridinSoft Anti-Malware - Removal tool for tvcshell.exe