How to remove NSISPromotion.dll

NSISPromotion.dll

The module NSISPromotion.dll has been detected as Worm.Ramnit

NSISPromotion.dll
Remove NSISPromotion.dll

File Details

Product Name:

gretech NSISPromotion
Company Name:

gretech
MD5: e6cfa5198d5828e595481d197a706946
Size: 608 KB
First Published: 2018-03-13 14:06:22 (6 years ago)
Latest Published: 2018-03-13 14:06:22 (6 years ago)
Status: Worm.Ramnit (on last analysis)
Analysis Date: 2018-03-13 14:06:22 (6 years ago)

Common Places:

%temp%

Geography:

100.0%

OS Version:

Windows 7 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x00081000

PE Sections:

Name Size of data MD5
.text 65536 6b2c5cb9b769a8f65ece0b2f960f2151
.rdata 12288 10a8f7cbaf1c9f8b32a4fca4a185269c
.data 12288 8852c8f931c8adfeb0c00e07c295deb9
.rsrc 348160 6f11d762f4bb21afb29ef090af04949b
.reloc 12288 a7476026616e1eb6fb48dc022b61ef9e
.text 167936 84a9a3afcaad866d64939884e6c24c73

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for NSISPromotion.dll
copyright for information about NSISPromotion.dll