How to remove $RIWB65E.quarantined
- File Details
- Overview
- Analysis
$RIWB65E.quarantined
The module $RIWB65E.quarantined has been detected as Trojan.Packed
File Details
Product Name: |
|
Company Name: |
|
MD5: |
087f8dcb0cb0027d7548fec73c7c6c47 |
Size: |
4 MB |
First Published: |
2018-08-19 14:10:46 (6 years ago) |
Latest Published: |
2024-10-10 23:01:58 (2 months ago) |
Status: |
Trojan.Packed (on last analysis) |
|
Analysis Date: |
2024-10-10 23:01:58 (2 months ago) |
%profile%\downloads |
%sysdrive%\downloads\7 |
%sysdrive%\софт |
%sysdrive%\всякие\windows программы |
%sysdrive%\котя\программы\а-проги |
%desktop%\arhiv |
%profile%\downloads\programs |
%desktop% |
%sysdrive%\progi j+r\1 установлены |
%sysdrive%\программы!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!\диагностика |
HDD.Regenerator.v2011.exe |
$RIWB65E.quarantined |
|
51.1% |
|
|
25.5% |
|
|
6.4% |
|
|
6.4% |
|
|
4.3% |
|
|
2.1% |
|
|
2.1% |
|
|
2.1% |
|
Windows 10 |
51.1% |
|
Windows 7 |
31.9% |
|
Windows 8.1 |
12.8% |
|
Windows XP |
4.3% |
|
Analysis
Subsystem: |
Windows GUI |
PE Type: |
pe |
OS Bitness: |
32 |
Image Base: |
0x00400000 |
Entry Address: |
0x0000331c |
Name |
Size of data |
MD5 |
.text |
24576 |
dd493ae9ebfb948f2a612edd72200a78 |
.rdata |
5120 |
8a134e15423272c853e24b49bfc8707f |
.data |
1536 |
baf389fb3ef48369d3c1f90021fcff8b |
.ndata |
0 |
00000000000000000000000000000000 |
.rsrc |
43520 |
95496fab2e56ba8cb7b6dc3d98a32d8d |