How to remove xanlib.dll
xanlib.dll
The module xanlib.dll has been detected as Worm.Ramnit
File Details
| Product Name: | Xan Compression Driver |
| Company Name: | Origin Systems, Inc. |
| MD5: | 2f5fb0221bed970f72bdf4f56c9369fa |
| Size: | 97 KB |
| First Published: | 2017-07-22 13:12:04 (6 years ago) |
| Latest Published: | 2017-07-22 13:12:04 (6 years ago) |
| Status: | Worm.Ramnit (on last analysis) | |
| Analysis Date: | 2017-07-22 13:12:04 (6 years ago) |
Common Places:
| %programfiles%\freetime\formatfactory\ffmodules\encoder\codecs |
Geography:
| 100.0% |
OS Version:
| Windows 7 | 100.0% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x90000000 |
| Entry Address: | 0x0000e000 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 27136 | 6f9891c340717b098ccda838b8c4a575 |
| .rdata | 512 | ccb482c162288ecbcee40af42eb99fa5 |
| .data | 512 | e1284e2e4053127d895371b6a5581fed |
| .idata | 1024 | fd5ad7e54cb24dbcc5c362c9d2cc1ec7 |
| .edata | 3584 | ffe3605f8d139bdbab8cbfb952be0f40 |
| .rsrc | 1024 | 615446f795a93f3cb6d5649d66233202 |
| .reloc | 1024 | 095a693aec41f3cf671ff744c61c178d |
| .text | 64000 | c5627b0056f605343366ac10bea8371b |
More information:
Download GridinSoft
Anti-Malware - Removal tool for xanlib.dll
