How to remove wp_ATI.dll
wp_ATI.dll
The module wp_ATI.dll has been detected as Worm.Ramnit
File Details
Product Name: | wp_ATI 动态链接库 |
MD5: | fd3bb3f091b54970b64ac170b32d8899 |
Size: | 504 KB |
First Published: | 2017-09-01 12:10:36 (7 years ago) |
Latest Published: | 2017-09-01 12:10:36 (7 years ago) |
Status: | Worm.Ramnit (on last analysis) | |
Analysis Date: | 2017-09-01 12:10:36 (7 years ago) |
Common Places:
%programfiles%\wondershare\video converter ultimate\plugins |
Geography:
100.0% |
OS Version:
Windows 7 | 100.0% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x10000000 |
Entry Address: | 0x0006b000 |
PE Sections:
Name | Size of data | MD5 |
.text | 271872 | 0e018118dce374836fd55b5d5a185e41 |
.rdata | 77312 | bbf2fb458961e528967bf0c7333cbed1 |
.data | 12288 | fdbad0f946dc5e15c954ef243692a7d5 |
.rsrc | 1536 | dae267577dc88bb5c40697734533b1ec |
.reloc | 13824 | 95e743ddfb85ca89f50e166b888223b8 |
.text | 138240 | 99a495df3d6656f67b5216c36ed1d190 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for wp_ATI.dll