How to remove imfforcedelete.sys

imfforcedelete.sys

The module imfforcedelete.sys has been detected as PUP.Gen

imfforcedelete.sys
Remove imfforcedelete.sys

File Details

Product Name:

IObit Malware Fighter
Company Name:

IObit.com
MD5: 26b67245f1969eb30a75709ed6b967e8
Size: 13 KB
First Published: 2017-07-25 20:22:37 (7 years ago)
Latest Published: 2018-07-01 08:06:28 (6 years ago)
Status: PUP.Gen (on last analysis)
Analysis Date: 2018-07-01 08:06:28 (6 years ago)

Overview

Signed By: IObit Information Technology
Status: Valid

Common Places:

%programfiles%\iobit\iobit malware fighter\drivers\win7_x86
%programfiles%\iobit\iobit malware fighter\ndrivers\win7_x86
%programfiles%\malware fighter iobit\drivers\win7_x86
%sysdrive%\$recycle.bin\s-1-5-21-1193344123-126876445-3011301652-1001\$ryldxtm
%sysdrive%\$recycle.bin\s-1-5-21-885393021-2665845469-1294952416-1000\$ryx5c6z\win7_x86
%programfiles%\iobit\iobit malware fighter\drivers

File Names:

IMFForceDelete.sys
imfforcedelete.sys

Geography:

19.0%
9.0%
8.1%
6.1%
5.9%
3.6%
3.1%
2.4%
2.2%
2.2%
2.0%
1.9%
1.9%
1.8%
1.6%
1.6%
1.5%
1.5%
1.4%
1.4%
1.4%
1.3%
1.3%
1.2%
1.2%
1.1%
1.1%
1.0%
0.8%
0.7%
0.7%
0.6%
0.6%
0.6%
0.6%
0.6%
0.5%
0.5%
0.5%
0.5%
0.4%
0.4%
0.4%
0.4%
0.4%
0.3%
0.3%
0.3%
0.3%
0.3%
0.2%
0.2%
0.2%
0.2%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%

OS Version:

Windows 10 65.3%
Windows 7 24.7%
Windows 8.1 8.1%
Windows XP 1.5%
Windows 8 0.4%
Windows Server 2008 R2 0.1%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 32
Image Base: 0x00010000
Entry Address: 0x0000503e

PE Sections:

Name Size of data MD5
.text 1536 012884c3593d3d513eefcd8dc9f12540
.rdata 512 a54ab866d3bdcce0a642373883192e69
.data 512 0b2e7741e0c0fc65af1542e370d89f53
INIT 1024 307e4d4fc7b6638524aff25caefc4e33
.rsrc 1024 7d39548442396c8c26acd6474502a11c
.reloc 512 ec6c056ddb21b97a2daf80d6d9b1fffa

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for imfforcedelete.sys
copyright for information about imfforcedelete.sys