» TR.dll
Overview
Analysis
File Details
Programs (1)

TR.dll

MeMedia TR.dll

MeMedia

The module TR.dll by MeMedia has been detected as a potentially unwanted program by 18 anti-malware scanners. This file is typically installed with the program AdVantage (Powering DAEMON Tools) by AdVantage.

File name:

TR.dll

Publisher:

MeMedia (signed and verified)

Product:

MeMedia TR.dll

Version:

1, 0, 6, 0

MD5:

c3d98dac60f6f8a6ae60bafa9e6745e6

SHA-1:

ca366f3d14e1b6dc9658ec5fe8a34899e59d6f4f

Scanner detections:

18 / 68

Status:

Potentially unwanted

Analysis date:

4/27/2024 12:15:39 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Adware.WhenU

7.1.1

AhnLab V3 Security

Win-Adware/WhenU.517856

2014.10.28

Avira AntiVirus

Adware/Advantage.A.177

7.11.181.218

Bkav FE

W32.Clodba3.Trojan

1.3.0.6185

Clam AntiVirus

Adware.WhenU-10

0.98/21411

Comodo Security

ApplicUnwnt.Win32.WebToolbar.WhenU.r

19923

Dr.Web

Adware.Whenu.6

9.0.1.057

G Data

Win32.Trojan.Agent.W2RUNF

15.2.24

IKARUS anti.virus

not-a-virus:WebToolbar.Win32.WhenU

t3scan.1.7.8.0

Kaspersky

not-a-virus:WebToolbar.Win32.WhenU

14.0.0.2427

Malwarebytes

Adware.WhenU

v2015.02.26.02

McAfee

MeMedia

5600.6842

NANO AntiVirus

Riskware.Win32.WhenU.zypn

0.28.2.62841

Quick Heal

WebToolbar.WhenU.r.n5 (Not a Virus)

2.15.14.00

Trend Micro

Adware_MediaAdvantage

10.465.26

VIPRE Antivirus

WhenU

34302

ViRobot

AdTool.WhenU.517856

2011.4.7.4223

Zillya! Antivirus

Adware.Win32.ABFF2249

2.0.0.1969

File size:

505.7 KB (517,856 bytes)

Product version:

1, 0, 6, 0

Original file name:

TR.dll

File type:

Dynamic link library (Win32 DLL)

Language:

French (Belgium)

Common path:

C:\Program Files\advantage\tr.dll

Digital Signature

Signed by:

MeMedia

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

10/26/2006 2:00:00 AM

Valid to:

10/27/2007 1:59:59 AM

Subject:

CN=MeMedia, OU=Secure Application Development, O=MeMedia, L=New York City, S=New York, C=US

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

704B07D999F4373BF8B0ED4DB5F53BC8

Registration

CLSID:

{602D9049-B4AC-4A25-BF75-A9B54D747CBA}

ProgID:

TR.TRFactory.1

COM registered:

Yes

File PE Metadata

Compilation timestamp:

11/1/2006 7:51:05 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

7.10

CTPH (ssdeep):

12288:q33iu4F1fceQrITl7c2iF4vqt5vRzTggdP2:qnkFe6i2vqt5ZzTggd2

Entry address:

0x464AF

Entry point:

6A, 0C, 68, 00, B8, 05, 10, E8, 39, 0C, 00, 00, 33, C0, 40, 89, 45, E4, 8B, 75, 0C, 33, FF, 3B, F7, 75, 0C, 39, 3D, 34, F8, 06, 10, 0F, 84, B3, 00, 00, 00, 89, 7D, FC, 3B, F0, 74, 05, 83, FE, 02, 75, 31, A1, 54, 5B, 07, 10, 3B, C7, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D0, 89, 45, E4, 39, 7D, E4, 0F, 84, 85, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 22, FE, FF, FF, 89, 45, E4, 3B, C7, 74, 72, 8B, 5D, 10, 53, 56, FF, 75, 08, E8, 17, 1D, FC, FF, 89, 45, E4, 83, FE, 01, 75, 0E, 3B, C7, 75, 0A, 53, 57, FF... 
[+]

Developed / compiled with:

Microsoft Visual C++ v7.1

Code size:

360 KB (368,640 bytes)

The file TR.dll has been discovered within the following program.

AdVantage (Powering DAEMON Tools) by AdVantage

www.memedia.com/advantage/moreinfo.html

About 1% of users remove it

Remove TR.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.