RemoveAny.sys
RemoveAny
Valery Kuzniatsou
The file RemoveAny.sys, “RemoveAny log driver” by Valery Kuzniatsou has been detected as a potentially unwanted program by 2 anti-malware scanners. It runs as a Windows 64-bit kernel mode device driver named “RemoveAny driver”.
Publisher:
HeavenWard (signed by Valery Kuzniatsou)
Description:
RemoveAny log driver
MD5:
d622b72e8e0dbeec35a48da677a653eb
SHA-1:
f5dcf8035cfe43588fd35ff6f11fc30c057073b4
SHA-256:
5a32442b0286ddafe417a10fed36a9d572f145bcccff89aa585c8bda227b84fb
Scanner detections:
2 / 68
Status:
Potentially unwanted
Analysis date:
4/24/2024 2:23:08 AM UTC (today)
Scan engine
Detection
Engine version
Reason Heuristics
PUP.ValeryKuzniatsou.M
14.7.31.23
Vba32 AntiVirus
Malware-Cryptor.General.3
3.12.16.4
File size:
14.7 KB (15,096 bytes)
Copyright:
Copyright (C) 2011. Valery Kuzniatsou.
Original file name:
RemoveAny.sys
File type:
Driver (Win64 SYS)
Language:
English (United States)
Common path:
C:\Windows\System32\drivers\removeany.sys
Authority:
The USERTRUST Network
Valid from:
5/17/2011 5:00:00 PM
Valid to:
5/17/2012 4:59:59 PM
Subject:
CN=Valery Kuzniatsou, O=Valery Kuzniatsou, STREET=Slobodskaia st. 167-101, L=Minsk, S=Minsk, PostalCode=220025, C=BY
Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US
Serial number:
7F9B5967BFBFB7F7613E0268C57CCF79
CTPH (ssdeep):
192:8rF4dn18qR7KCj/UfGb9B1r7KBbGBEAmzdg9Wqcx6lwpyMrj6cGg2YlH9:O4R18F4sfmZKdG+g9WqcIlwYMCkH
Driver
Display name:
RemoveAny driver
Type:
Kernel device driver (KernelDriver)