TG Soft Cyber Security Specialist - Vir.IT eXplorer: AntiVirus, AntiSpyware, AntiMalware, AntiRansomware and Crypto-Malware protection
Detects viruses and malwareIdentifies polymorphic viruses thanks to DEEP SCANMacro Virus AnalyzerINTRUSION DETECTION TechnologyVirus/malware removal toolsInstallation on Active Directory16/32/64 bit Real-Time ProtectionVir.IT Scan MailVir.IT Console Client/ServerVir.IT WebFilter ProtectionAutomatic Live-UpdateVir.IT Personal FirewallItalian Tech SupportAntiMalware Reserch Center


Submit suspicious file
fb rss linkedin twitter

ICSA Lab

Vir.IT eXplorer PRO pass the test VB100 2019-06

AMTSO

OpsWat

EICAR Membro SERIT - SEcurity Research in ITaly

MALWARE WATCH

Last 10 pages of virus/malware analyzed from the TG Soft’s C.R.A.M. team.

  1. 18/08/2020 - Adware.Win32.CloudPrinter.AAdware
  2. 26/06/2020 - Trojan.Win32.GootKit.DCTrojan
  3. 23/04/2020 - Trojan.JS.Dropper.CDNTrojan
  4. 13/03/2020 - Adware.Win32.MyPCBackup.BAdware
  5. 05/08/2019 - Trojan.Win32.Gootkit.CZTrojan
  6. 05/08/2019 - Trojan.Win32.Gootkit.CYTrojan
  7. 31/07/2019 - Trojan.Win32.Gootkit.BPRTrojan
  8. 30/07/2019 - Trojan.Win32.Gootkit.BPPTrojan
  9. 29/07/2019 - Trojan.Win32.Cutwail.BPOTrojan
  10. 29/07/2019 - Trojan.Win32.Cutwail.BPNTrojan


To see all the last generation type of virus/malware discovered and analyzed from the TG Soft's C.R.A.M. team, it is possible to access to the Windows Startup Application Malware.


Card malware: Backdoor.Win32.Tequila.CA

  • Nome: Backdoor.Win32.Tequila.CA
  • Tipologia: Backdoor
  • Data: 18/05/2018
  • Nome file: BACKWINDOW632.EXE
  • Esecuzione Automatica: backwindow632
  • Dimensioni: 141824 byte
  • MD5: 7ef4c52d16f64d9a71f241cb7352cc6d
  • Descrizione:
    La Backdoor.Win32.Tequila.CA si copia in C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1968138750\BACKWINDOW632.EXE
    Modifica la seguente chiave di registro:
    HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    [backwindow632] = C:\RECYCLER\S-1-5-21-0243556031-888888379-781862338-1968138750\BACKWINDOW632.EXE
  • Descrizione file: Madison Media Software, Inc.
  • Società: Madison Media Software, Inc.
  • Nome prodotto: Madison Media Software, Inc.
  • Nome file originale: Madison Media Software, Inc.
  • Copyright: Madison Media Software, Inc.
  • Note aggiuntive: Rimosso da VirIT 8.6.80 e successivi.
Download Vir.IT eXplorer Lite: the AntiVirus free and freely usable

Copyright© 2004-2024 Windows Startup Applications Malware. All rights reserved TG Soft.




Legal & Eula | Privacy | Uninstall

TG Soft S.r.l. - via Pitagora 11/B, 35030 Rubàno (PD), ITALY - C.F. e P.IVA 03296130283