» AnVir.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

AnVir.exe

AnVir Task Manager Free

Ilya Kheifets

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘AnVir Task Manager Free’. This is installed with AnVir Task Manager Free.

File name:

AnVir.exe

Publisher:

AnVir Software (signed by Ilya Kheifets)

Product:

AnVir Task Manager Free

Version:

6.2.0.0

MD5:

90f11bb9157c2088ffd700fdf454cce3

SHA-1:

dbbc10096b8a720c9f82979b7b6b528e9a274e94

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 4:58:19 AM UTC (today)

File size:

1.7 MB (1,730,784 bytes)

Product version:

6.2.0.0

Trademarks:

AnVir Task Manager Free

Original file name:

AnVir.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\anvir task manager free\anvir.exe

Digital Signature

Signed by:

Ilya Kheifets

Authority:

The USERTRUST Network

Valid from:

9/11/2008 2:00:00 AM

Valid to:

9/12/2011 1:59:59 AM

Subject:

CN=Ilya Kheifets, O=Ilya Kheifets, STREET="Altayskaya, 29", L=Moscow, S=-, PostalCode=107589, C=RU

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

00C2E4DD6035D0C7DCAE689D0526EFF2C7

File PE Metadata

Compilation timestamp:

12/17/2009 4:50:46 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

49152:npxhuvyFpVZwWqbQaG993BYs+sYW+2P4iBP4AkAp:pxhuuVz27G993BYs+sYW+2P4iBwKp

Entry address:

0x1000

Entry point:

68, 01, C0, 69, 00, E8, 01, 00, 00, 00, C3, C3, BA, 64, F0, 66, 95, 41, 51, D1, AB, B1, 3C, 71, DF, 73, B0, C3, A1, 14, 73, 50, 38, B1, CB, 72, 52, 64, 25, 32, 68, 8A, FF, A1, 4A, 23, 97, 6A, C5, 8B, D4, 84, 6D, 98, A6, 92, 43, 8B, 4A, 5F, C3, 60, 94, D4, 30, 7B, 0F, 2F, 23, 97, 25, D8, 71, EF, E5, 46, 9F, 49, B4, 20, A9, 7F, 68, 5F, 0B, 9F, 87, A9, 2F, 54, F2, 2C, 25, 11, 4B, 12, 6A, C1, A4, 3D, 44, F2, FC, 3B, F5, 14, 8D, 41, D1, 3B, F8, 0C, 46, 08, 1E, B4, AB, D1, 3B, 90, 6E, 1E, 1A, 71, 42, 0B, 47, 23... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

764 KB (782,336 bytes)

Startup File (User Run)

Registry location:

HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

AnVir Task Manager Free

Command:

"C:\Program Files\anvir task manager free\anvir.exe" minimized

The file AnVir.exe has been discovered within the following program.

AnVir Task Manager Free by AnVir Software

Publisher's description - “AnVir Task Manager Free provides convenience by offering all of its features in a single interface. It saves money because users won't have to buy multiple packages to perform a family of related tasks.”

www.anvir.com

20% remove it

Scan AnVir.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.