GoforFiles.exe
GoforFiles Application by Righway Technologies (Signed)
Warning 6 antivirus scanners has detected malware in various versions of GoforFiles.exe.
Overview
There are 5 versions of goforfiles.exe in the wild, the latest version being 2, 0, 0, 171. goforfiles.exe is run as a standard windows process with the logged in user's account privileges. The average file size is about 879.9 KB. The file is a digitally signed and issued to Righway Technologies by COMODO CA Limited. Some variations of the file have been seen to be installed with the program GoforFiles from Righway Technologies, Inc. During the process's lifecycle, the typical CPU resource utilization is about 0.0022% including both foreground and background operations, the average private memory consumption is about 20.35 MB with the maximum memory reaching around 26.9 MB. Addionally, typically read and write I/O disk operations is about 2.14 MB per minute for reads and 492.08 KB per minute for writes.
 Details
|
| File name: | goforfiles.exe |
| Publisher: | http://goforfiles.com/ |
| Product name: | GoforFiles Application |
| Typical file path: | C:\Program Files\goforfiles\goforfiles.exe |
| Certificate |
| Issued to: | Righway Technologies |
| Authority (CA): | COMODO CA Limited |
| Effective date: | Tuesday, August 21, 2012 |
| Expiration date: | Saturday, August 22, 2015 |
Programs installed in
(Note, the programs listed below are for all versions of GoforFiles Application.)
|
Righway Technologies, Inc |
|
GoforFiles bundles various adware toolbars including the Delta Search Toolbar (an adware toolbar that modifies the user's web browser home page, search settings and other settings).
Behaviors
(Note, the behaviors below are for all versions of goforfiles.exe, select a unique version for details.)
Windows firewall allowed program
Exceptions allow programs to access to the Internet through an outbound connections
- Firewall exception for 'C:\Program Files\GoforFiles\GoforFiles.exe'
Malware detections
Based on 40+ industry antivirus scanners, 6 of them detected the following malware.
| Antivirus engine | Engine version | Detection | File version |
| Bkav Security |
1.3.0.4246 |
W32.HfsAuto.Fef5 |
2, 0, 0, 23 |
| Dr.Web |
7.0.4.09250 |
Tool.DownLoader.52 |
2, 0, 0, 69 |
| ESET NOD32 |
7.8501 |
a variant of Win32/YourFileDownloader.B |
2, 0, 0, 171 |
| ESET NOD32 |
7.8813 |
a variant of Win32/YourFileDownloader.B |
2, 0, 0, 23 |
| Kingsoft |
2013.4.9.267 |
Win32.Troj.Generic.a.(kcloud) |
2, 0, 0, 23 |
| VIPRE Antivirus |
21568 |
ExpressFiles Installer (fs) |
2, 0, 0, 23 |
All file variations of goforfiles.exe
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
25.00% |
|
| Windows 8.1 Pro Preview |
12.50% |
|
| Windows Vista Home Premium |
12.50% |
|
| Windows 7 Enterprise |
12.50% |
|
| Windows 7 Ultimate N |
12.50% |
|
| Windows 7 Ultimate |
12.50% |
|
| Microsoft Windows XP |
12.50% |
|
Distribution by country
United States installs about 50.00% of GoforFiles Application.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Acer |
33.33% |
|
| Sony |
33.33% |
|
| Hewlett-Packard |
33.33% |
|
