How to remove WFini.exe
WFini.exe
The module WFini.exe has been detected as Adware.ELEX
File Details
| Product Name: | WFini |
| Company Name: | WFini LIMITED |
| MD5: | 06feddf89836e72e937815ebfa4d781f |
| Size: | 528 KB |
| First Published: | 2017-05-28 04:14:08 (7 years ago) |
| Latest Published: | 2018-06-30 21:04:08 (6 years ago) |
| Status: | Adware.ELEX (on last analysis) | |
| Analysis Date: | 2018-06-30 21:04:08 (6 years ago) |
Overview
| Signed By: | Junyan Li |
| Status: | Valid |
Common Places:
| %programfiles%\yesbnd |
| %windir%\temp\ist7078.tmp\tools |
| %programfiles%\_sspm |
| %programfiles%\searchestoyesbnd |
| %commonappdata%\twinpt |
| %commonappdata%\uwinpu |
| %programfiles%\wiurybwase |
| %commonappdata%\rwinpr |
| %windir%\temp\ist903e.tmp |
| %commonappdata% |
File Names:
| wpm.exe |
| WFini.exe |
Geography:
| 40.0% | ||
| 26.7% | ||
| 6.7% | ||
| 6.7% | ||
| 6.7% | ||
| 6.7% | ||
| 6.7% |
OS Version:
| Windows 7 | 43.8% | |
| Windows 10 | 31.3% | |
| Windows 8 | 12.5% | |
| Windows 8.1 | 6.3% | |
| Windows XP | 6.3% |
Analysis
| Subsystem: | Windows GUI |
| PE Type: | pe |
| OS Bitness: | 32 |
| Image Base: | 0x00400000 |
| Entry Address: | 0x0004893d |
PE Sections:
| Name | Size of data | MD5 |
| .text | 417280 | b717d47a13d5b08d4e71464a4f2b891b |
| .rdata | 92672 | 1a1264cb2adaba432a09988639cbf95a |
| .data | 13312 | 2ed0fe0ae3fd775fc4d8d2a147e2d86e |
| .rsrc | 11264 | 3bd8a25d9e7f9be0526083a102edd9f5 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for WFini.exe
