home

Alexander Avdonin

Publisher Information

Alexander Avdonin is a software developer located in Saint Petersburg, Russia*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
COMODO CA Limited

Valid from:
3/21/2012 7:00:00 AM

Valid to:
3/22/2015 6:59:59 AM

Subject:
CN=Alexander Avdonin, O=Alexander Avdonin, STREET=Menshikovsky pr. 3-25, L=Saint Petersburg, S=Saint Petersburg, PostalCode=195067, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0cf1f3dd67017040c6c52f66a828fccc

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Reason Heuristics
Win.HiddenStart
71.43%

Dr.Web
Tool.HideApp.53, hacktool program Tool.HideApp.53
57.14%

avast!
Win32:Evo-gen [Susp]
57.14%

ESET NOD32
Win64/HiddenStart.A potentially unsafe application, Win32/HiddenStart.B potentially unsafe application
42.86%

Kaspersky
not-a-virus:RiskTool.Win64.HideExec, not-a-virus:RiskTool.Win32.HideExec
28.57%

0 / 68
winsnap64.exe (WinSnap by NTWind Software)  (f0238d3ae72550580b102087df4021d1)

0 / 68
winsnap.exe  (f8225b1b1c4310f5e6157269cbce03ef)

0 / 68
wspace.exe (WindowSpace by NTWind Software)  (16cae9e28184e5568f35630a512d131d)

1 / 68      (Malware)
hstart.exe (Hidden Start by NTWind Software)  (a6acb613b5fd112718165913b084a964)

0 / 68
wspace.dll (WindowSpace by NTWind Software)  (4a0f8c94ee1f4c130ddd57f2195b5586)

0 / 68
wspace.exe (WindowSpace by NTWind Software)  (9d70a3cf2e516e9d18f2f0a1120c33b2)

0 / 68
WinSnap.exe (WinSnap by NTWind Software)  (57c929a02193da09ab8fafc0964b16ff)

0 / 68
winsnap64.exe (WinSnap by NTWind Software)  (1537e0e4f15020f8dd48e713bb6a3122)

0 / 68
winsnap64.exe (WinSnap by NTWind Software)  (a71688f1ac2c4bec2025fcf63904c806)

1 / 68      (Malware)
hstart.exe (Hidden Start by NTWind Software)  (be7cf3712513a19c6143d1e64413dd8f)

0 / 68
12712b1bddcae80a316692b701d56518ac8cd9db (CloseAll by NTWind Software)  (508484ffcd2ac96de210c9aab4cbfe30)

0 / 68
closeall_2.0-setup.exe (CloseAll by NTWind Software)  (66b038c91db7192439caffbc1f0d8c34)

0 / 68
WinSnap.exe (WinSnap by NTWind Software)  (af4d3f879826396487b0f62be2f3b1ab)

0 / 68
windowspace_2.5.8-setup.exe (WindowSpace by NTWind Software)  (ed89bd31b032a376aa032dafaa611525)

1 / 68      (Malware)
hstart.exe (Hidden Start by NTWind Software)  (242bc18499b3187525edf639941dfceb)

0 / 68
WinSnap.exe (WinSnap by NTWind Software)  (40b7684c3eeea60194b878a32d60c297)

4 / 68      (Malware)
hstart.exe (Hidden Start by NTWind Software)  (f5d783ba9020eaa13004d468f9a99ea9)

0 / 68
winsnap64.exe (WinSnap by NTWind Software)  (b0b7f57f0fa035bac793b08ce60cbf58)

0 / 68
WinSnap.exe (WinSnap by NTWind Software)  (0422e32cd376ced7b284970edd0027ed)

0 / 68
WinSnap.exe (WinSnap by NTWind Software)  (97b29103e313a217f23ab3cedfb9bc80)

0 / 68
winsnap64.exe (WinSnap by NTWind Software)  (a7690231e5dc32a23edffb6260af5bd9)

0 / 68
WinSnap.exe (WinSnap by NTWind Software)  (0c5048bba1fcbb5af8d321dc22faf73d)

0 / 68
winsnap64.exe (WinSnap by NTWind Software)  (dd471ab8a2c89a236dc110d743815a08)

0 / 68
WinSnap.exe  (99a86292f49bb9ff2e236debcf084eac)

0 / 68
winsnap64.exe (WinSnap by NTWind Software)  (a0eb8d871b3b064b637444a143f4e42d)

0 / 68
uninst.exe (Sticky Previews by NTWind Software)  (fdcc632a5e84b681211a5c5c7da7caab)

0 / 68
WinSnap.exe (WinSnap by NTWind Software)  (b9f33c26a533cc0fdee0370206d23743)

0 / 68
WinSnap.exe (WinSnap by NTWind Software)  (16c499d5a6dbfd10c3577b533ef113e6)

0 / 68
WinSnap.exe (WinSnap by NTWind Software)  (0e39a680fd7d225fc3b0bbb1b44b7545)

0 / 68
winsnap64.exe (WinSnap by NTWind Software)  (9c845e4f37161347d92d373a0579863f)

 
Latest 30 of 141 files

The certificates below are also signed by Alexander Avdonin.

00892D471E307BE639C0891510EAC91570  (Mar 12, 2009 to Mar 12, 2012)

5148165B2DFBC91C7B9BA114A45F7CF2  (Mar 05, 2008 to Mar 06, 2009)

3E5ABF29BA6BBDFBC0CB1793FE97875A  (Feb 27, 2007 to Feb 28, 2008)

* Note, the details and description above are based on the code signing digital signature issued to Alexander Avdonin by COMODO CA Limited on March 21, 2012 with the serial number '0cf1f3dd67017040c6c52f66a828fccc'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.