How to remove wp_ATI.dll
wp_ATI.dll
The module wp_ATI.dll has been detected as Worm.Ramnit
File Details
Product Name: | wp_ATI 动态链接库 |
MD5: | bfdfd74b89dabf4dc08dd81068236193 |
Size: | 471 KB |
First Published: | 2018-04-15 08:11:40 (6 years ago) |
Latest Published: | 2018-04-15 08:11:40 (6 years ago) |
Status: | Worm.Ramnit (on last analysis) | |
Analysis Date: | 2018-04-15 08:11:40 (6 years ago) |
Common Places:
%sysdrive%\งานกู้ 240658\root\program files\wondershare\video editor |
Geography:
100.0% |
OS Version:
Windows XP | 100.0% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x10000000 |
Entry Address: | 0x00053000 |
PE Sections:
Name | Size of data | MD5 |
.text | 231424 | 9a5589775fc90681c18d6a6dd9cd78d1 |
.rdata | 58368 | 2529856bced26f5e08c583ad5eb688ae |
.data | 10752 | 783b4f8fb7fcd5a9d1017afc13c659b4 |
.rsrc | 1536 | a9a4ce0fb394f1aeea8ca887523614a8 |
.reloc | 12800 | 2cc7b547f3b16899679a68727bc548ee |
.text | 166400 | 6c678888b58e26b6f34d3365a89c4a3f |
More information:
Download GridinSoft
Anti-Malware - Removal tool for wp_ATI.dll