IObit Malware Fighter
What is IObit Malware Fighter? (from IObit)
IObit Malware Fighter is an advanced malware & spyware removal utility that detects, removes the deepest infections, and protects your PC from various potential spyware, adware, trojans, keyloggers, bots, worms, and hijackers. With the unique "Dual-Core" engine and the heuristic malware detection, IObit Malware Fighter... Read more
Overview
IObit Malware Fighter is a program developed by IObit. The most used version is 2.1, with over 98% of all installations currently using this version. Upon installation and setup, it defines an auto-start registry entry which makes this program run on each Windows boot for all user logins. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. When installed, it will add a context menu handler to the Windows shell in order to provide quick access to the program. The programs's main executable is imf.exe and has been seen to consume an average CPU of less than one percent, and utilizes about 77.1 MB of memory. It also adds an icon to the Windows notifications area in order to provide access to the program. The software installer includes 93 files and is usually about 35.17 MB (36,880,870 bytes). IMFUpdater.exe is the automatic update component of the software designed to download and apply new updates should new versions be released. In comparison to the total number of users, most PCs are running the OS Windows 7 (SP1) as well as Windows 10. While about 49% of users of IObit Malware Fighter come from the United States, it is also popular in United Kingdom and Germany.
Program details
URL: www.iobit.com/malware-fighter.html
Help link: www.IObit.com
Installation folder: C:\Program Files\IObit\IObit Malware Fighter\
Uninstaller: "C:\Program Files\IObit\IObit Malware Fighter\unins000.exe"
Estimated size: 35.17 MB
Files installed by IObit Malware Fighter
Program executable: | imf.exe |
Name: | IObit Malware Fighter |
Signed by: | IObit Information Technology |
Path: | C:\Program Files\iobit\iobit malware fighter\imf.exe |
MD5: | 59726901c436c19ca51a6b008239cd9d |
Taskbar: | Displays an icon in the notification area |
| This is the core process of IObit Malware Fighter. Capabilities include cleaning up malware, spyware, adware, bots, trojans, etc. It detects, cleans and blocks unwanted applications on the PC. It includes a "Startup Guard", "Browser Guard",... |
Additional files:
-
ActionCenterDownloader.exe - Advanced SystemCare Action Center Downlaoder (Action Center Downlaoder)
-
taskmgr.dll - IObit TaskSchedule Dynamic Link Library
-
SendBugReport.exe - Advanced SystemCare with Antivirus (SendBugReport)
-
OFCommon.dll - Advanced SystemCare Ultimate (IObit Library)
-
bak.IMFShellExt.dll - BlueBirdShellExt Module
-
IMFShellExt.dll
-
bak.IMF.exe - IObit Malware Fighter
-
bak.IMFsrv.exe - IObit Malware Fighter Service
-
FileMonitor.dll
-
IMF_ActionCenterDownloader.exe - Advanced SystemCare 7 (Action Center Downloader)
-
imf-setup.exe
-
IMFsrv.exe
-
IMFUpdater.exe - IObit Malware Fighter Updater
-
imfv2-setup.exe
-
IObit-Malware-Figher-Setup.exe
-
iobit-malware-fighter-setup.exe
-
IObitMalwareFighterSetup.exe
-
Promote.exe - Reminder
-
Scan.dll
-
UninstallPromote.exe - Advanced SystemCare
-
IObitUninstal.exe - IObit Uninstaller (Uninstall Programs)
-
bak.datastate.dll - datastate.dll (Runtime Library)
-
datastate.dll
-
IObitCommunities.exe - Like it (IObit like it)
-
FixPlugin.exe
-
StartMenu.exe - IObit StartMenu Program
-
TaskSchedule.exe - Task Schedule
-
WebUI.dll - WebUI Dynamic Link Library
-
unrar.dll (by Alexander Roshal) - RAR decompression library
-
IntegrateFilter.dll
-
RegFilter.dll
-
Reinforce.exe - Security Reinforce
-
URLFilter.dll
-
adsemovalsetup02251.exe (by ADSRemoval) - ADSRemoval
-
ADSRemovalSetup.exe (by ADSRemoval)
-
adsremovalsetup-imf0819.exe
-
zlibwapi.dll - ZLib.DLL (zlib data compression and ZIP file I/O library)
-
BlueBirdInit.exe
-
IWsIMF.exe
-
libcurl-4.dll
-
unins000.exe - Setup/Uninstall
-
unins001.exe
Behaviors exhibited
2 Context Menu Handlers
- IMFShellExt.dll added to Windows Explorer under the name 'IObit Malware Fighter' with a class of {0BB81440-5F42-4480-A5F7-770A6F439FC8}.
- bak.IMFShellExt.dll added to Windows Explorer under the name 'IObit Malware Fighter' with a class of {0BB81440-5F42-4480-A5F7-770A6F439FC8}.
4 Scheduled Tasks
- unins000.exe is scheduled as a task with the class '{085DCC41-DB68-4E14-BF50-206AB0D08C48}' (runs on registration).
- IMF.exe is scheduled as a task named 'IO' (runs on boot).
- IMFsrv.exe is scheduled as a task with the class '{D7653DD2-2CED-49FE-883A-E0B5B50699AA}' (runs on registration).
- IMFUpdater.exe is scheduled as a task named 'IMF_AutoUpdate' (runs weekly on Mondays at 7:00).
Scheduled Task (Boot/Login)
- IMF.exe is automatically launched at startup through a scheduled task named IO.
Service
- IMFsrv.exe runs as a service named 'IMF Service' (IMFservice) "IObit Malware Fighter Service".
2 Startup Files (User Run)
- IMF.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'IMF' and executes as C:\Program Files\IObit\IObit Malware Fighter\IMF.exe.
- IMFsrv.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'IMFsrv.exe' and executes as C:\Program Files\IObit\IObit Malware Fighter\IMFsrv.exe.
2 Startup Files (All Users Run)
- IMF.exe is loaded in the all users (HKLM) registry as a startup file name 'IObit Malware Fighter' which loads as "C:\Program Files\IObit\IObit Malware Fighter\IMF.exe" /autostart.
- bak.IMF.exe is loaded in the all users (HKLM) registry as a startup file name 'IObit Malware Fighter' which loads as "C:\Program Files\IObit\IObit Malware Fighter\IMF.exe" /autostart.
Windows Firewall Allowed Program
- IMF.exe is added as a firewall exception for 'C:\Program Files\IObit\IObit Malware Fighter\IMF.exe'.
Network connections
- IMF.exe connects to s3-1-w.amazonaws.com (205.251.243.217 port 80).
- IMF.exe connects to s3-1-w.amazonaws.com (176.32.100.248 port 80).
- IMF.exe connects to s3-1-w.amazonaws.com (176.32.98.226 port 80).
- IMF.exe connects to s3-1-w.amazonaws.com (176.32.99.47 port 80).
- IMF.exe connects to s3-1-w.amazonaws.com (205.251.242.248 port 80).
- IMF.exe connects to s3-1-w.amazonaws.com (207.171.163.132 port 80).
- IMF.exe connects to s3-1-w.amazonaws.com (207.171.163.216 port 80).
- IMF.exe connects to s3-1-w.amazonaws.com (176.32.99.47 port 80).
- IMF.exe connects to s3-1-w.amazonaws.com (72.21.195.161 port 80).
- IMF.exe connects to s3-1-w.amazonaws.com (207.171.163.132 port 80).
Plus 5 more
Resource utilization averages
Show technical details
imf.exe |
Memory: | 77.1 MB | |
Total CPU: | 0.0336975702% | |
Kernel CPU: | 0.01507978% | |
User CPU: | 0.01861779% | |
CPU cycles/sec: | 1,311,311 | |
Switches/sec: | 13 | |
I/O reads/min: | 470.21 KB | |
I/O writes/min: | 495 Bytes | |
bak.IMF.exe |
Memory: | 114.34 MB | |
Total CPU: | 0.0001381176% | |
Kernel CPU: | 0.00007718% | |
User CPU: | 0.00006093% | |
bak.IMFsrv.exe |
Memory: | 3.61 MB | |
Total CPU: | 0.0007758190% | |
Kernel CPU: | 0.00027371% | |
User CPU: | 0.00050211% | |
CPU cycles/sec: | 6,321,785 | |
Switches/sec: | 49 | |
I/O writes/min: | 0 Bytes | |
How do I remove IObit Malware Fighter?
You can uninstall IObit Malware Fighter from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program IObit Malware Fighter, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove IObit Malware Fighter.
OS VERSIONS
Win 7 (SP1) 59%
Win 8 0%
|
|
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
|
|
USER ACTIONS
|
Uninstall it 22%
Keep it 78%
|
|
Windows
Which Windows OS versions does it run on?
Windows 7 |
63.02% |
|
Windows 10 |
21.19% |
|
Windows XP |
9.08% |
|
Windows Vista |
6.69% |
|
Windows Server 2003 |
0.02% |
|
Which OS releases does it run on? |
Windows 7 Home Premium |
36.19% |
|
Windows 7 Ultimate |
15.22% |
|
Microsoft Windows XP |
8.95% |
|
Windows 7 Professional |
8.62% |
|
Windows 8.1 |
8.10% |
|
Windows Vista Home Premiu... |
5.03% |
|
Geography
49.12% of installs come from the United States
Which countries install it?
United States |
49.12% |
United Kingdom |
5.12% |
Germany |
4.90% |
Canada |
3.33% |
Brazil |
2.86% |
Italy |
2.65% |
Australia |
1.88% |
France |
1.62% |
Netherlands |
1.57% |
Sweden |
1.48% |
Belgium |
1.15% |
Spain |
1.10% |
Israel |
1.08% |
Czech Republic |
1.06% |
PC manufacturers
What PC manufacturers (OEMs) have it installed?
Hewlett-Packard |
28.11% |
|
Dell |
20.87% |
|
Acer |
19.18% |
|
ASUS |
8.31% |
|
Toshiba |
7.59% |
|
GIGABYTE |
6.21% |
|
Samsung |
3.35% |
|
Lenovo |
2.46% |
|
Intel |
1.53% |
|
American Megatrends |
1.53% |
|
Sahara |
0.86% |
|
Common models |
HP Pavilion dv6 Notebook ... |
6.27% |
|
HP Pavilion dv7 Notebook ... |
6.10% |
|
HP Pavilion g6 Notebook P... |
5.38% |
|
HP Pavilion g7 Notebook P... |
3.83% |
|
HP 2000 Notebook PC |
2.55% |
|
Dell Inspiron 1545 |
2.11% |
|
About (from IObit)
Founded in 2004 by two creative and enthusiastic programmers, IObit is focused on providing consumers with innovative and comprehensive system utilities and security software for superior PC performance and security.
Publisher URL: www.iobit.com