How to remove ROMFUSClient.exe

ROMFUSClient.exe

The module ROMFUSClient.exe has been detected as PUP.RemoteAdmin

ROMFUSClient.exe
MD5: f7a1f1ee12072b5ec46999efb8944dfc
Size: 4 MB
First Published: 2017-07-10 18:00:59 (6 years ago)
Latest Published: 2019-09-30 16:46:57 (4 years ago)
Status: PUP.RemoteAdmin (on last analysis)
Analysis Date: 2019-09-30 16:46:57 (4 years ago)
Signed By: Yakhnovets Denis Aleksandrovich IP
Status: Valid
%programfiles%\litemanager pro - viewer\server
%programfiles%\litemanager pro - server
%programfiles%
%programfiles%\litemanager pro - viewer
16.7%
14.8%
13.0%
7.4%
7.4%
7.4%
5.6%
5.6%
3.7%
3.7%
3.7%
1.9%
1.9%
1.9%
1.9%
1.9%
1.9%
Windows 10 50.0%
Windows 7 40.7%
Windows 8.1 7.4%
Windows Server 2008 R2 1.9%
Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x00382c28

PE Sections:

Name Size of data MD5
.text 3663872 08f04662f0be3c034aef2d780ae77ad4
.itext 11776 fd05628fb2bf635d1a9208f0a9b26ea9
.data 74240 e12d17ede290371dbf9cf3ead50cd9e3
.bss 0 00000000000000000000000000000000
.idata 18432 ff8c70e2028676231e99cda494ea6b87
.didata 3072 ec0401ab31f7ea64d1e24402742508ee
.edata 512 a0177e0148ce58731aae9b97cefdec98
.tls 0 00000000000000000000000000000000
.rdata 512 c5958e7698296409aed861b8ce0dcdf2
.reloc 326656 8b54ffe5cd6e5377bca0de36c602bc82
.rsrc 844800 0a737907fba0e07e4f3d280bb55a4efc

More information:

Download GridinSoft Anti-Malware - Removal tool for ROMFUSClient.exe