How to remove FFInst.exe
FFInst.exe
The module FFInst.exe has been detected as Worm.Ramnit
File Details
Product Name: | FormatFactory Installer |
Company Name: | Free Time |
MD5: | 5ce44a52649118116500cd039ec0b5d9 |
Size: | 158 KB |
First Published: | 2018-03-22 06:09:32 (6 years ago) |
Latest Published: | 2018-03-22 06:09:32 (6 years ago) |
Status: | Worm.Ramnit (on last analysis) | |
Analysis Date: | 2018-03-22 06:09:32 (6 years ago) |
Common Places:
%programfiles%\freetime |
Geography:
100.0% |
OS Version:
Windows 7 | 100.0% |
Analysis
Subsystem: | Windows GUI |
PE Type: | pe |
OS Bitness: | 32 |
Image Base: | 0x00400000 |
Entry Address: | 0x00015000 |
PE Sections:
Name | Size of data | MD5 |
.text | 29184 | 30162aac7dd26547c6b8eccdb6f6934b |
.rdata | 8704 | 3fb2cdfd735e9020d1a9f41998f1176a |
.data | 1024 | ad1a6f73a8f4e0dd6b57c0e1767d29da |
.rsrc | 27136 | e1bccf6de2c0b5c738b04efc87a44477 |
.reloc | 2560 | 023497e467adacb3da57ff358424e468 |
.text | 92672 | 163611195c3df72f2650dd92a74e45c6 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for FFInst.exe