How to remove fwproc.exe
fwproc.exe
The module fwproc.exe has been detected as Risk.RemoteAdmin
File Details
Product Name: | Virtual Printer Driver |
Company Name: | Two Pilots |
MD5: | b33858b5a832aa761ad7711e6182ece2 |
Size: | 19 KB |
First Published: | 2017-12-20 10:10:44 (6 years ago) |
Latest Published: | 2018-09-05 16:07:15 (6 years ago) |
Status: | Risk.RemoteAdmin (on last analysis) | |
Analysis Date: | 2018-09-05 16:07:15 (6 years ago) |
Overview
Signed By: | Aleksei Ter-Osipov |
Status: | Valid |
Common Places:
%programfiles%\remote manipulator system - host\printer |
Geography:
33.3% | ||
33.3% | ||
33.3% |
OS Version:
Windows 7 | 66.7% | |
Windows Server 2012 | 33.3% |
Analysis
Subsystem: | Windows CUI |
PE Type: | pe |
OS Bitness: | 64 |
Image Base: | 0x0000000000400000 |
Entry Address: | 0x00001d00 |
PE Sections:
Name | Size of data | MD5 |
.text | 5120 | 50fc4f002f69e8c033d8d05eb43f52d1 |
.rdata | 3584 | 37540f76b6c36b99d518ccdd53eb8ddf |
.data | 512 | bb93bb6e58eeb310f9c846f73ced10f2 |
.pdata | 512 | 9d536e9e6efab6ece5df75c664281a39 |
.rsrc | 1536 | a72991179a32b61ab1b35775fed147f8 |
More information:
Download GridinSoft
Anti-Malware - Removal tool for fwproc.exe