How to remove yes.exe
yes.exe
The module yes.exe has been detected as Spy.Zbot
File Details
| Product Name: | CoreUtils |
| Company Name: | GNU <www.gnu.org> |
| MD5: | 9c5052d6badb9799c8b2b89e5a98076b |
| Size: | 22 KB |
| First Published: | 2018-05-12 01:03:41 (6 years ago) |
| Latest Published: | 2018-06-11 12:09:15 (6 years ago) |
| Status: | Spy.Zbot (on last analysis) | |
| Analysis Date: | 2018-06-11 12:09:15 (6 years ago) |
Common Places:
| %programfiles%\microchip\mplabx\v4.05\gnubins\gnuwin32 |
| %programfiles%\microchip\mplabx\v3.15\gnubins\gnuwin32 |
| %programfiles%\microchip\mplabx\gnubins\gnuwin32 |
| %programfiles%\microchip\mplabx\v3.50\gnubins\gnuwin32 |
| %programfiles%\microchip\mplabx\v4.01\gnubins\gnuwin32 |
| %sysdrive%\xilinx\14.7\ise_ds\edk\gnuwin |
| %sysdrive%\xmplab\gnubins\gnuwin32 |
| %programfiles%\microchip\mplabx\v3.20\gnubins\gnuwin32 |
Geography:
| 25.0% | ||
| 16.7% | ||
| 8.3% | ||
| 8.3% | ||
| 8.3% | ||
| 8.3% | ||
| 8.3% | ||
| 8.3% | ||
| 8.3% |
OS Version:
| Windows 7 | 58.3% | |
| Windows 10 | 33.3% | |
| Windows 8.1 | 8.3% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x00001000 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 15872 | f8db59040c6c42556cd95739695361cb |
| .data | 512 | 1cf316ba5f1b8ffb5dd9cf6b960743c6 |
| .bss | 0 | 00000000000000000000000000000000 |
| .idata | 1536 | 076d7ecbe0a0465843fc75561a3689a0 |
| .rsrc | 4096 | 4a3dae003143feae696c464e0ee5b173 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for yes.exe
