How to remove Restore.exe

Restore.exe

The module Restore.exe has been detected as Worm.Ramnit

Restore.exe
Remove Restore.exe

File Details

Product Name:

Restore.exe
Company Name:

Sysmex
MD5: d568dc72401257145f00fb6c05778935
Size: 172 KB
First Published: 2018-10-02 20:05:20 (6 years ago)
Latest Published: 2018-10-02 20:05:20 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2018-10-02 20:05:20 (6 years ago)

Common Places:

%programfiles%\sysmex

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0002e000

PE Sections:

Name Size of data MD5
.text 40448 ccf449a453936531c7c90557d3b2c346
.rdata 17408 5cf8909585708902051209313548fd76
.data 1024 a2cb51d25938b645a28d1d5649f52bdd
.rsrc 45056 fdcd79968e38a6d5d7c1be2d3423e3a7
.reloc 7168 58d41df6a4f5f9653c71f2d0868edb23
.text 64512 a2c90de2bc48d0c7da9e5602ef9e9be3

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for Restore.exe
copyright for information about Restore.exe