TG Soft Cyber Security Specialist - Vir.IT eXplorer: AntiVirus, AntiSpyware, AntiMalware, AntiRansomware and Crypto-Malware protection
Detects viruses and malwareIdentifies polymorphic viruses thanks to DEEP SCANMacro Virus AnalyzerINTRUSION DETECTION TechnologyVirus/malware removal toolsInstallation on Active Directory16/32/64 bit Real-Time ProtectionVir.IT Scan MailVir.IT Console Client/ServerVir.IT WebFilter ProtectionAutomatic Live-UpdateVir.IT Personal FirewallItalian Tech SupportAntiMalware Reserch Center


Submit suspicious file
fb rss linkedin twitter

ICSA Lab

Vir.IT eXplorer PRO pass the test VB100 2019-06

AMTSO

OpsWat

EICAR Membro SERIT - SEcurity Research in ITaly

MALWARE WATCH

Last 10 pages of virus/malware analyzed from the TG Soft’s C.R.A.M. team.

  1. 18/08/2020 - Adware.Win32.CloudPrinter.AAdware
  2. 26/06/2020 - Trojan.Win32.GootKit.DCTrojan
  3. 23/04/2020 - Trojan.JS.Dropper.CDNTrojan
  4. 13/03/2020 - Adware.Win32.MyPCBackup.BAdware
  5. 05/08/2019 - Trojan.Win32.Gootkit.CZTrojan
  6. 05/08/2019 - Trojan.Win32.Gootkit.CYTrojan
  7. 31/07/2019 - Trojan.Win32.Gootkit.BPRTrojan
  8. 30/07/2019 - Trojan.Win32.Gootkit.BPPTrojan
  9. 29/07/2019 - Trojan.Win32.Cutwail.BPOTrojan
  10. 29/07/2019 - Trojan.Win32.Cutwail.BPNTrojan


To see all the last generation type of virus/malware discovered and analyzed from the TG Soft's C.R.A.M. team, it is possible to access to the Windows Startup Application Malware.


Card malware: Trojan.Win32.Agent.EMZ

  • Nome: Trojan.Win32.Agent.EMZ
  • Tipologia: Trojan
  • Data: 31/01/2015
  • Nome file: KAOLPE.EXE
  • Esecuzione Automatica: %SYSTEMROOT%\Tasks\Security Center Update - 397616842.job
  • Dimensioni: 505019 byte
  • MD5: 8b2e4f1218ab5eb3a8764c00a96b715b
  • Descrizione:
    Il Trojan.Win32.Agent.EMZ si copia in %USERPROFILE%\APPDATA\ROAMING\OCXUUNHA\KAOLPE.EXE
    Modifica la seguente chiave di registro:
    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SchedulingAgent -> TasksFolder
    [%SYSTEMROOT%\Tasks\Security Center Update - 397616842.job] = %USERPROFILE%\APPDATA\ROAMING\OCXUUNHA\KAOLPE.EXE
  • Descrizione file: Eraem Vire Studaa 2021
  • Società: Eraem Corniratu
  • Nome file originale: lbale.exe
  • Note aggiuntive: Rimosso da VirIT 7.8.44 e successivi.
Download Vir.IT eXplorer Lite: the AntiVirus free and freely usable

Copyright© 2004-2024 Windows Startup Applications Malware. All rights reserved TG Soft.




Legal & Eula | Privacy | Uninstall

TG Soft S.r.l. - via Pitagora 11/B, 35030 Rubàno (PD), ITALY - C.F. e P.IVA 03296130283