Should I block it?

45%

45% of PCs block this file from running.

Possible reason:

Performance resource utilization

Additional versions

4.0	9.09%
4.0	27.27%
4.0	4.55%
4.0	40.91%
4.0	13.64%
4.0	4.55%

(Note, Koyote-Lab Inc. publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process

explorer.exe (Windows Explorer by Microsoft Corporation)

Related files

fTalk.exe

fTalk by Koyote-Lab Inc. (Signed)

Remove fTalk.exe

Version:	4.0
MD5:	bd67f309ba673534c6048557ebc6b7a4
SHA1:	00f683a8e6175140b0751ab10e485359ace84982

What is fTalk.exe?

fTalk features an interface similar to Windows Live Messenger, with the basic chat functionalities. It displays all your Facebook contacts in a list, lets you access their profile and photos and also includes a few emoticons, though their design is a bit weird. You can also change your Facebook status from within the program.

Overview

ftalk.exe executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It is installed with a couple of know programs including fTalk published by Koyote-Lab Inc, fTalk from Koyote-Lab Inc and fTalk by Koyote-Lab Inc. The file is digitally signed by Koyote-Lab Inc. which was issued by the Thawte certificate authority (CA).

Details

File name:	ftalk.exe
Publisher:	Koyote-Lab Inc.
Product name:	fTalk
Typical file path:	C:\Documents and Settings\user\Application data\ftalk\ftalk.exe
File version:	4.0
Product version:	4.0.0.4401
Size:	8.99 MB (9,427,504 bytes)
Build date:	10/29/2013 8:04 AM
Certificate
Issued to:	Koyote-Lab Inc.
Authority (CA):	Thawte
Expiration date:	Friday, February 21, 2014
Digital DNA
PE subsystem:	Windows GUI
File packed:	Yes
.NET CLR:	No

More details

Programs

The following programs will install this file

fTalk

Koyote-Lab Inc

37% remove

“fTalk is a free Instant Messenger that lets you chat with all of your Facebook friends right from your desktop. The friends list displays friends that are online on Facebook at any given moment, and a tray notification is displayed whenever a friend comes online. You can both send and receive messages on Facebook without ever opening Facebook in a browser. When a message is received, fTalk plays a sound, and the message window opens up,...”

Behaviors

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'fTalk' → "C:\Documents and Settings\user\Application Data\fTalk\ftalk.exe" -autorun

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00062969%	0.028634%
Kernel CPU:	0.00037062%	0.013761%
User CPU:	0.00025907%	0.014873%
Kernel CPU time:	11,840 ms/min	100,923,805ms/min
CPU cycles:	9,976,555/sec	17,470,203/sec
Memory
Private memory:	58.45 MB	21.59 MB
Private (maximum):	60.15 MB
Private (minimum):	4.16 MB
Non-paged memory:	58.45 MB	21.59 MB
Virtual memory:	189.97 MB	140.96 MB
Virtual memory (peak):	229.73 MB	169.69 MB
Working set:	9.69 MB	18.61 MB
Working set (peak):	60.86 MB	37.95 MB
Page faults:	62,309/min	2,039/min
I/O
I/O read transfer:	49 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	31 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	8 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	6	12
Handles:	330	600
GUI GDI count:	31	103
GUI GDI peak:	31	142
GUI USER count:	19	49
GUI USER peak:	26	71

Process properties

Integrety level:	Medium
Platform:	64-bit
Command line:	"C:\users\user\appdata\local\ftalk\ftalk.exe" -autorun
Owner:	User
Parent process:	explorer.exe (Windows Explorer by Microsoft Corporation)

Threads