How to remove xanlib.dll
xanlib.dll
The module xanlib.dll has been detected as Worm.Ramnit
File Details
Product Name: | Xan Compression Driver |
Company Name: | Origin Systems, Inc. |
MD5: | 2876a60f0302c186d65359e5c09071be |
Size: | 143 KB |
First Published: | 2017-12-05 15:03:02 (6 years ago) |
Latest Published: | 2017-12-05 15:03:02 (6 years ago) |
Status: | Worm.Ramnit (on last analysis) | |
Analysis Date: | 2017-12-05 15:03:02 (6 years ago) |
Common Places:
%programfiles%\freetime\formatfactory\ffmodules\encoder\codecs |
Geography:
100.0% |
OS Version:
Windows 7 | 100.0% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x90000000 |
Entry Address: | 0x0000e000 |
PE Sections:
Name | Size of data | MD5 |
.text | 27136 | 6f9891c340717b098ccda838b8c4a575 |
.rdata | 512 | ccb482c162288ecbcee40af42eb99fa5 |
.data | 512 | e1284e2e4053127d895371b6a5581fed |
.idata | 1024 | fd5ad7e54cb24dbcc5c362c9d2cc1ec7 |
.edata | 3584 | ffe3605f8d139bdbab8cbfb952be0f40 |
.rsrc | 1024 | 615446f795a93f3cb6d5649d66233202 |
.reloc | 1024 | 095a693aec41f3cf671ff744c61c178d |
.text | 110592 | 22dc1db02b9b54c655fd19f3829e5ad5 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for xanlib.dll