How to remove wrg.exe.vir

wrg.exe.vir

The module wrg.exe.vir has been detected as Adware.Agent

wrg.exe.vir
MD5: fc32c1a3ed0b3f2ac2bc9b3b15410471
Size: 95 KB
First Published: 2017-05-28 21:03:36 (6 years ago)
Latest Published: 2022-06-20 23:44:04 (2 years ago)
Status: Adware.Agent (on last analysis)
Analysis Date: 2022-06-20 23:44:04 (2 years ago)
Signed By: Yang Liwei
Status: Valid
%appdata%\rundir\temp
%appdata%\rundir
%sysdrive%\adwcleaner\filequarantine\c\documents and settings\user\application data\rundir
%appdata%\logpath\temp
%appdata%\logpath
%sysdrive%\adwcleaner\quarantine\files\jituaghphzdqgbulhukkrmknfubmjdwa\temp
%sysdrive%\adwcleaner\quarantine\files\jituaghphzdqgbulhukkrmknfubmjdwa
%appdata%
%sysdrive%\windows.old\users\pezao\appdata\roaming\rundir
%sysdrive%\windows.old\users\pezao\appdata\roaming
wrg.exe
wrg.exe.vir
70.8%
16.2%
2.8%
2.8%
1.9%
1.9%
1.9%
0.9%
0.9%
Windows 7 78.9%
Windows 8.1 9.2%
Windows 10 6.4%
Windows 8 3.2%
Windows XP 2.3%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000036f7

PE Sections:

Name Size of data MD5
.text 45568 88651fcdb88cd13ba611022c9b50c048
.rdata 26112 2a9651a3efd0155ec5c88538efc094cf
.data 4096 028da457a6b6f13da58e01ea5c8f51c4
.rsrc 512 d4d4915b98128349b07155f4a59a814f
.reloc 15872 33ba8bf93178c42f08c3dd770a5a2d6c

More information:

Download GridinSoft Anti-Malware - Removal tool for wrg.exe.vir