How to remove $RVJI98K.exe

$RVJI98K.exe

The module $RVJI98K.exe has been detected as Adware.InstallCore

$RVJI98K.exe
Remove $RVJI98K.exe

File Details

Product Name:

Repo

Company Name:

Gapa

MD5: 7149c9f81258ca0428e3d761ebc4dd24
Size: 966 KB
First Published: 2017-05-24 15:07:50 (6 years ago)
Latest Published: 2020-05-29 08:18:16 (3 years ago)
Status: Adware.InstallCore (on last analysis)
Analysis Date: 2020-05-29 08:18:16 (3 years ago)

Common Places:

%localappdata%\temp
%temp%\rarsfx3
%temp%\rarsfx0
%temp%\rarsfx1
%profile%\downloads\gridinsoft_notepad_pro_v3_2_2_keygen\gridinsoft_notepad_pro_v3_2_2_keygen
%temp%\rarsfx4
%temp%\rarsfx2
%sysdrive%\docume~1\quochu~1\locals~1\temp\rarsfx0
%profile%\downloads\compressed\dbf_manager_2_45_keygen_by_inferno
%windir%\temp

File Names:

ICReinstall_keygen-step-2.exe
keygen-step-2.exe
ICReinstall_ICReinstall_keygen-step-2.exe
$RL9W0HC.exe
$RVJI98K.exe

Geography:

17.0%
12.5%
10.5%
9.9%
6.8%
5.4%
5.1%
3.7%
3.7%
3.4%
2.6%
2.6%
1.7%
1.7%
1.7%
1.7%
1.4%
1.4%
1.1%
0.6%
0.6%
0.6%
0.6%
0.6%
0.6%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%
0.3%

OS Version:

Windows 10 50.0%
Windows 7 31.0%
Windows 8.1 11.2%
Windows XP 7.5%
Windows 8 0.3%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000a5f8

PE Sections:

Name Size of data MD5
CODE 40448 4438c8496e8097cb2a1af59ce3f3b0ed
DATA 1024 1ee71d84f1c77af85f1f5c278f880572
BSS 0 00000000000000000000000000000000
.idata 2560 bb5485bf968b970e5ea81292af2acdba
.tls 0 00000000000000000000000000000000
.rdata 512 9ba824905bf9c7922b6fc87a38b74366
.reloc 0 00000000000000000000000000000000
.rsrc 11264 d9a2ef2ae7dc8c1d5c23ae109af0ca05

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for $RVJI98K.exe
copyright for information about $RVJI98K.exe