Should I block it?

45%

45% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

4.0	9.09%
4.0	27.27%
4.0	4.55%
4.0	40.91%
4.0	13.64%
4.0	4.55%

(Note, Koyote-Lab Inc. publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process

explorer.exe (Windows Explorer by Microsoft Corporation)

Related files

fTalk.exe

fTalk by Koyote-Lab Inc. (Signed)

Remove fTalk.exe

Version:	4.0
MD5:	67f7a6f8b45a5f1b7a93862a66c7847f
SHA1:	ec194626aa0f2802412712dde39c67a7b2f9b697
SHA256:	aa6b9aa43fd0fcadcf161e565b83157a3269f0c110240e838175125975341b0e

What is fTalk.exe?

fTalk features an interface similar to Windows Live Messenger, with the basic chat functionalities. It displays all your Facebook contacts in a list, lets you access their profile and photos and also includes a few emoticons, though their design is a bit weird. You can also change your Facebook status from within the program.

Overview

ftalk.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). This is typically installed with the program fTalk published by Koyote-Lab Inc. The file is digitally signed by Koyote-Lab Inc. which was issued by the Thawte certificate authority (CA).

Details

File name:	ftalk.exe
Publisher:	Koyote-Lab Inc.
Product name:	fTalk
Typical file path:	C:\Documents and Settings\user\Application data\ftalk\ftalk.exe
File version:	4.0
Product version:	4.0.0.3965
Size:	8.99 MB (9,426,544 bytes)
Certificate
Issued to:	Koyote-Lab Inc.
Authority (CA):	Thawte
Expiration date:	Friday, February 21, 2014
Digital DNA
PE subsystem:	Windows GUI
File packed:	Yes
.NET CLR:	No

More details

Programs

The following program will install this file

fTalk

Koyote-Lab Inc

28% remove

“fTalk is a free Instant Messenger that lets you chat with all of your Facebook friends right from your desktop. The friends list displays friends that are online on Facebook at any given moment, and a tray notification is displayed whenever a friend comes online. You can both send and receive messages on Facebook without ever opening Facebook in a browser. When a message is received, fTalk plays a sound, and the message window opens up,...”

Behaviors

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'fTalk' → "C:\Documents and Settings\user\Application Data\fTalk\ftalk.exe" -autorun

Network connections

[TCP] jabber-03-01-snc6.tfbnw.net (66.220.151.99:5222)

[UDP] listens on port 49725

[UDP] listens on port 56776

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00689472%	0.028634%
Kernel CPU:	0.00174158%	0.013761%
User CPU:	0.00515314%	0.014873%
Kernel CPU time:	4,756 ms/min	100,923,805ms/min
CPU cycles:	2,964,813/sec	17,470,203/sec
Context switches:	68/sec	284/sec
Memory
Private memory:	57.08 MB	21.59 MB
Private (maximum):	47.15 MB
Private (minimum):	27.39 MB
Non-paged memory:	57.08 MB	21.59 MB
Virtual memory:	230.09 MB	140.96 MB
Virtual memory (peak):	271.76 MB	169.69 MB
Working set:	34.3 MB	18.61 MB
Working set (peak):	59.18 MB	37.95 MB
Page faults:	49,327/min	2,039/min
I/O
I/O read transfer:	1.45 KB/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	66 Bytes/sec	274.99 KB/min
I/O write operations:	2/sec	227/min
I/O other transfer:	435 Bytes/sec	448.09 KB/min
I/O other operations:	28/sec	1,671/min
Resource allocations
Threads:	10	12
Handles:	472	600
GUI GDI count:	45	103
GUI GDI peak:	49	142
GUI USER count:	33	49
GUI USER peak:	43	71

Process properties

Integrety level:	High
Platform:	32-bit
Command line:	"C:\users\user\appdata\local\ftalk\ftalk.exe" -autorun
Owner:	User
Parent process:	explorer.exe (Windows Explorer by Microsoft Corporation)

Threads