How to remove wp_ATI.dll

wp_ATI.dll

The module wp_ATI.dll has been detected as Worm.Ramnit

wp_ATI.dll
Product Name:

wp_ATI 动态链接库

MD5: bfdfd74b89dabf4dc08dd81068236193
Size: 471 KB
First Published: 2018-04-15 08:11:40 (6 years ago)
Latest Published: 2018-04-15 08:11:40 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2018-04-15 08:11:40 (6 years ago)
%sysdrive%\งานกู้ 240658\root\program files\wondershare\video editor
100.0%
Windows XP 100.0%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x00053000

PE Sections:

Name Size of data MD5
.text 231424 9a5589775fc90681c18d6a6dd9cd78d1
.rdata 58368 2529856bced26f5e08c583ad5eb688ae
.data 10752 783b4f8fb7fcd5a9d1017afc13c659b4
.rsrc 1536 a9a4ce0fb394f1aeea8ca887523614a8
.reloc 12800 2cc7b547f3b16899679a68727bc548ee
.text 166400 6c678888b58e26b6f34d3365a89c4a3f

More information:

Download GridinSoft Anti-Malware - Removal tool for wp_ATI.dll