home

asfilterdrv.sys

Windows Win 7 DDK driver

NINJASOFT LLC

The file asfilterdrv.sys, “NetFilter SDK WFP Driver (WPP)” by NINJASOFT has been detected as adware by 10 anti-malware scanners.
Publisher:
Windows (R) Win 7 DDK provider  (signed by NINJASOFT LLC)

Product:
Windows (R) Win 7 DDK driver

Description:
NetFilter SDK WFP Driver (WPP)

Version:
1.4.4.6

MD5:
764507001619145262167d1f4220addd

SHA-1:
1fd4703e9a0667057cb1f8e16a899cbee5ba125a

SHA-256:
2caafa0adc1398b1409510e34387e8d3fc1b78f6d1eda67e20518b629c254aa7

Scanner detections:
10 / 68

Status:
Adware

Analysis date:
11/16/2024 6:36:42 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic
2016.0.3113

ESET NOD32
Win32/NetFilter.A potentially unsafe (variant)
9.11311

G Data
Win32.Riskware.NJax
15.5.25

herdProtect (fuzzy)
variant of pofilterdrv.sys (Adware)
2015.8.8.3

IKARUS anti.virus
Riskware.Win32.NJax
t3scan.1.8.6.0

K7 AntiVirus
Trojan
13.200.15249

McAfee
Artemis!764507001619
5600.6769

Reason Heuristics
Threat.BR Software.NINJASOFT
15.5.10.14

Trend Micro House Call
Suspicious_GEN.F47V0226
7.2.130

VIPRE Antivirus
Trojan.Win32.Generic
38368

File size:
53.8 KB (55,096 bytes)

Product version:
6.2.9200.16384

Copyright:
Copyright © NetFilterSDK.com

Original file name:
netfilter2.sys

File type:
Driver (Win32 SYS)

Language:
English (United States)

Common path:
C:\Program Files\njax\asfilterdrv.sys

Digital Signature
Signed by:
NINJASOFT LLC

Authority:
GoDaddy.com, Inc.

Valid from:
10/3/2014 2:42:06 AM

Valid to:
10/2/2015 8:10:32 PM

Subject:
CN=NINJASOFT LLC, O=NINJASOFT LLC, L=Lewes, S=Delaware, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
27E8AB8EF7EC03

File PE Metadata
Compilation timestamp:
7/23/2014 6:46:36 PM

OS version:
6.2

OS bitness:
Win32

Subsystem:
Native (none required)

Linker version:
11.0

CTPH (ssdeep):
768:NYl0QTwtwh609MUC2ONT8PxaCIkGqmYv/wdsOxHccznGNTkTZPZV+NfPNV1/GTDC:mQW68LONT8UkGqmM2sOxHdYkkRPN66

Entry address:
0x906C

Entry point:
8B, FF, 55, 8B, EC, E8, 90, 3F, 00, 00, 5D, E9, 0A, E0, FF, FF, CC, CC, CC, CC, CC, CC, 3B, 0D, 14, B0, 40, 00, 75, 03, C2, 00, 00, E9, 06, 00, 00, 00, CC, CC, CC, CC, CC, CC, 8B, FF, 55, 8B, EC, 51, 89, 4D, FC, 6A, 02, 59, CD, 29, CC, CC, CC, CC, CC, CC, 6A, 08, 59, CD, 29, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, B8, 01, 00, 00, 00, C2, 10, 00, 4E, 00, 46, 00, 53, 00, 44, 00, 4B, 00, 20, 00, 46, 00, 6C, 00, 6F, 00, 77, 00, 20, 00, 45, 00, 73, 00, 74, 00, 61, 00, 62, 00, 6C, 00, 69, 00, 73, 00, 68, 00...
 
[+]

Code size:
38 KB (38,912 bytes)

Remove asfilterdrv.sys - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.