How to remove imfforcedelete.sys

imfforcedelete.sys

The module imfforcedelete.sys has been detected as PUP.Gen

imfforcedelete.sys
Remove imfforcedelete.sys

File Details

Product Name:

IObit Malware Fighter
Company Name:

IObit.com
MD5: e63cb438dcdfcf0c017f7f290840d410
Size: 15 KB
First Published: 2017-07-21 17:08:40 (7 years ago)
Latest Published: 2018-07-03 07:09:34 (6 years ago)
Status: PUP.Gen (on last analysis)
Analysis Date: 2018-07-03 07:09:34 (6 years ago)

Overview

Signed By: IObit Information Technology
Status: Valid

Common Places:

%programfiles%\iobit\iobit malware fighter\drivers\win7_amd64
%programfiles%\iobit\iobit malware fighter\ndrivers\win7_amd64
%programfiles%\iobit malware fighter\drivers\win7_amd64
%programfiles%\malware fighter iobit\drivers\win7_amd64
%sysdrive%\$recycle.bin\s-1-5-21-1193344123-126876445-3011301652-1001\$rvenj0z
%mydoc%\iobit malware fighter\drivers\win7_amd64
%programfiles%\iobit\iobit malware fighter\drivers

File Names:

IMFForceDelete.sys
imfforcedelete.sys
A0020559.sys

Geography:

21.0%
8.4%
7.4%
5.3%
5.0%
3.5%
3.2%
3.1%
2.8%
2.6%
2.6%
2.5%
2.4%
2.0%
2.0%
1.6%
1.5%
1.5%
1.5%
1.3%
1.1%
1.1%
1.0%
0.9%
0.9%
0.8%
0.8%
0.8%
0.8%
0.7%
0.7%
0.6%
0.6%
0.6%
0.6%
0.5%
0.5%
0.5%
0.5%
0.4%
0.4%
0.4%
0.4%
0.3%
0.3%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.2%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%
0.1%

OS Version:

Windows 10 51.7%
Windows 7 30.2%
Windows 8.1 16.2%
Windows XP 1.0%
Windows 8 0.8%
Windows Vista 0.2%

Analysis

Subsystem: Native
PE Type: pe
OS Bitness: 64
Image Base: 0x0000000000010000
Entry Address: 0x00006064

PE Sections:

Name Size of data MD5
.text 3584 7a3ebcf831dc3462e4d65b9c0139c235
.rdata 512 357992958ea665f5f5a434ba682af026
.data 512 043c46095689123e1f5be96c109c2f46
.pdata 512 08deb94797509973200eed7735dbf508
INIT 1024 30a6a08d932e6a5279c127d826ad1a86
.rsrc 1024 48457287d735f91024af7298d071291b

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for imfforcedelete.sys
copyright for information about imfforcedelete.sys