How to remove windrv.exe
windrv.exe
The module windrv.exe has been detected as General Threat
File Details
| Product Name: | Borland Image Editor |
| Company Name: | Inprise Corporation |
| MD5: | 6219ac9c546fc9953a74240302f78a49 |
| Size: | 579 KB |
| First Published: | 2017-12-12 11:09:56 (6 years ago) |
| Latest Published: | 2017-12-12 12:00:31 (6 years ago) |
| Status: | General Threat (on last analysis) | |
| Analysis Date: | 2017-12-12 12:00:31 (6 years ago) |
Common Places:
| %profile% |
| %sysdrive% |
File Names:
| winmgr.exe |
| windrv.exe |
| Music.exe |
| Private.exe |
| Pictures.exe |
| Movies.exe |
| Secret.exe |
| 505050.exe |
| Documents.exe |
Geography:
| 100.0% |
OS Version:
| Windows 8.1 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0005b3a8 |
PE Sections:
| Name | Size of data | MD5 |
| CODE | 369664 | b21b04adc034b77c515e113b65c182d8 |
| DATA | 31744 | 476d857c0efd1a84d294c37801ac2bc7 |
| BSS | 0 | 00000000000000000000000000000000 |
| .idata | 8704 | c8516b9eda1cd10f53623ba6f36e6183 |
| .tls | 0 | 00000000000000000000000000000000 |
| .rdata | 512 | 54ba3834ee065954b7c1681b1db513ac |
| .reloc | 26112 | 9a51d3dd99542fe29b17c159a4319138 |
| .rsrc | 155904 | b50be9812208ba735053c6a945d9a1b2 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for windrv.exe
