How to remove fwproc.exe
fwproc.exe
The module fwproc.exe has been detected as Risk.RemoteAdmin
File Details
| Product Name: | Virtual Printer Driver |
| Company Name: | Two Pilots |
| MD5: | 1d47bb4c9fa9bd2dbab3c38cacf46da3 |
| Size: | 17 KB |
| First Published: | 2017-10-13 11:09:47 (7 years ago) |
| Latest Published: | 2019-10-17 06:58:15 (5 years ago) |
| Status: | Risk.RemoteAdmin (on last analysis) | |
| Analysis Date: | 2019-10-17 06:58:15 (5 years ago) |
Overview
| Signed By: | Aleksei Ter-Osipov |
| Status: | Valid |
Common Places:
| %programfiles%\remote manipulator system - host\printer\x64 |
| %programfiles%\remote manipulator system - host\printer |
| %windir%\rsm\printer |
| %desktop%\rms_6.3.0.6ru\printer |
| %desktop%\класс4\чистый сервер\printer |
| %desktop%\чищенная рмс\printer |
| %programfiles%\remote manipulator system - host\printer |
Geography:
| 71.4% | ||
| 14.3% | ||
| 9.5% | ||
| 4.8% |
OS Version:
| Windows 10 | 65.0% | |
| Windows 7 | 15.0% | |
| Windows 8.1 | 10.0% | |
| Windows XP | 10.0% |
Analysis
| Subsystem: | Windows CUI |
| PE Type: | pe |
| OS Bitness: | 64 |
| Image Base: | 0x0000000000400000 |
| Entry Address: | 0x00001d00 |
PE Sections:
| Name | Size of data | MD5 |
| .text | 5120 | 50fc4f002f69e8c033d8d05eb43f52d1 |
| .rdata | 3584 | 37540f76b6c36b99d518ccdd53eb8ddf |
| .data | 512 | bb93bb6e58eeb310f9c846f73ced10f2 |
| .pdata | 512 | 9d536e9e6efab6ece5df75c664281a39 |
| .rsrc | 1536 | a72991179a32b61ab1b35775fed147f8 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for fwproc.exe
