How to remove winSAP.dll
winSAP.dll
The module winSAP.dll has been detected as Adware.ELEX
![Remove Adware.ELEX winSAP.dll](/screens/screen-17fdeaff277c6cc1b21a08764ce1c4d6.png)
File Details
Product Name: | TODO: <产品名> |
Company Name: | TODO: <公司名> |
MD5: | 17fdeaff277c6cc1b21a08764ce1c4d6 |
Size: | 1 MB |
First Published: | 2017-05-26 08:02:23 (7 years ago) |
Latest Published: | 2019-12-01 17:59:25 (5 years ago) |
Status: | Adware.ELEX (on last analysis) | |
Analysis Date: | 2019-12-01 17:59:25 (5 years ago) |
Common Places:
%windir%\temp\winsap_update |
%appdata%\winsapsvc |
%programfiles%\kugshcoijich\_allowdel_155feb76 |
%programfiles%\shufward\_allowdel_151b65c6 |
%programfiles%\clunaryanerhiy\_allowdel_df3621 |
%programfiles%\plucuskenerk\_allowdel_40dd7 |
%temp%\hpc89d.tmp |
%temp%\hp400d.tmp |
%temp%\hp2e52.tmp |
%programfiles%\rerladomlimipy\_allowdel_8f5e30b |
File Names:
WinSAP.dll |
winSAP.dll |
winSAPx.dll |
winSAP.dll.quarantined |
WinSAP.dll.quarantined |
Geography:
28.5% | ||
20.8% | ||
12.8% | ||
5.8% | ||
5.8% | ||
4.0% | ||
2.6% | ||
1.8% | ||
1.5% | ||
1.5% | ||
1.5% | ||
1.5% | ||
1.5% | ||
1.1% | ||
0.7% | ||
0.7% | ||
0.7% | ||
0.7% | ||
0.7% | ||
0.7% | ||
0.7% | ||
0.4% | ||
0.4% | ||
0.4% | ||
0.4% | ||
0.4% | ||
0.4% | ||
0.4% | ||
0.4% | ||
0.4% | ||
0.4% | ||
0.4% | ||
0.4% |
OS Version:
Windows 7 | 50.7% | |
Windows 10 | 35.0% | |
Windows 8.1 | 6.8% | |
Windows XP | 6.4% | |
Windows 8 | 0.7% | |
Windows Vista | 0.4% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x10000000 |
Entry Address: | 0x0008014b |
PE Sections:
Name | Size of data | MD5 |
.text | 1395200 | 1a6cf82724cd86b5c2da7f03fba8d2d5 |
.rdata | 329216 | 3bad00441de370c9fe24fa50782b2c0b |
.data | 27648 | 4f086439c585b159ec9748b7eca4cfa8 |
.rsrc | 14336 | 44fc8257b33de662f9a8050394c69d90 |
.reloc | 119808 | cb95e4784649b60d216868bb864734d6 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for winSAP.dll
![copyright for information about winSAP.dll](/images/copyright.png)