How to remove winlsecsrv.sys

winlsecsrv.sys

The module winlsecsrv.sys has been detected as Trojan.Winsecsrv

winlsecsrv.sys
Remove winlsecsrv.sys

File Details

MD5: 58618a763b8aec015b83ab0e4a5cc207
Size: 121 KB
First Published: 2017-11-10 10:02:25 (7 years ago)
Latest Published: 2017-11-10 10:02:44 (7 years ago)
Status: Trojan.Winsecsrv (on last analysis)
Analysis Date: 2017-11-10 10:02:44 (7 years ago)

Overview

Signed By: Chengdu Xiongdichuang Trading Co., Ltd.
Status: Valid

Common Places:

%windir%\system32
%system%\drivers

File Names:

miroexpanded.sys
winlsecsrv.sys

Geography:

100.0%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 32
Image Base: 0x00010000
Entry Address: 0x0001b034

PE Sections:

Name Size of data MD5
.text 97792 e252f79faf48fdbf09b58cb90a853c46
.data 5632 4046fa8ee7418914baaea51b0da8286f
INIT 4608 7fcf8fd984723091829745178fccebca
.rsrc 1024 09de5cb4b7d9e6c9320fbbeeeba48f30
.reloc 6144 8c0d2ada326a88a538ec9fe0db5fcd2b

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for winlsecsrv.sys
copyright for information about winlsecsrv.sys