» trojankiller.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

trojankiller.exe

Trojan Killer (64-bit)

Gridinsoft, LLC

It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This is installed with Trojan Killer.

File name:

trojankiller.exe

Publisher:

GridinSoft LLC. (signed by Gridinsoft, LLC)

Product:

Trojan Killer (64-bit)

Description:

Trojan Killer

Version:

2.2.0.7

MD5:

dd93a11bb647220b9cfcf9451c90755f

SHA-1:

d611b121966d4d1c4808ea372c2a179b30bda197

SHA-256:

b74b9726124f76fd3f1a16a6fda897bd0602da611c271b049d014a1ddc681256

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/23/2024 10:20:46 AM UTC (today)

File size:

12.5 MB (13,127,456 bytes)

Product version:

2.2.0.7

Original file name:

trojankiller.exe

File type:

Executable application (Win64 EXE)

Common path:

C:\Program Files\gridinsoft trojan killer\trojankiller.exe

Digital Signature

Signed by:

Gridinsoft, LLC

Authority:

VeriSign, Inc.

Valid from:

12/12/2011 2:00:00 AM

Valid to:

1/13/2015 1:59:59 AM

Subject:

CN="Gridinsoft, LLC", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Gridinsoft, LLC", L=Kiev, S=Kiev, C=UA

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

065DF919B8A90A37DEB26750CBB3BBD3

File PE Metadata

Compilation timestamp:

1/9/2014 6:49:39 PM

OS version:

5.2

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

98304:0J9n+5bvx0keZoeoas2q5jDhJy9M6QVC06AQBBdPm7QvE3B8vuD5zzcYOKvoxYC:0tevbcoeoayfQx9vioCC

Entry address:

0x801210

Entry point:

55, 53, 48, 81, EC, C8, 00, 00, 00, 48, 8B, EC, 48, C7, 45, 58, 00, 00, 00, 00, 48, C7, 45, 50, 00, 00, 00, 00, 48, C7, 45, 48, 00, 00, 00, 00, 48, C7, 85, 80, 00, 00, 00, 00, 00, 00, 00, 48, C7, 45, 78, 00, 00, 00, 00, 48, C7, 45, 70, 00, 00, 00, 00, 48, C7, 45, 68, 00, 00, 00, 00, 48, C7, 45, 60, 00, 00, 00, 00, 48, C7, 85, 88, 00, 00, 00, 00, 00, 00, 00, 48, C7, 85, 90, 00, 00, 00, 00, 00, 00, 00, 48, C7, 85, 98, 00, 00, 00, 00, 00, 00, 00, 48, C7, 85, A0, 00, 00, 00, 00, 00, 00, 00, 48, C7, 85, B0, 00... 
[+]

Code size:

8 MB (8,392,192 bytes)

Scheduled Task

Task name:

Trojan Killer

Trigger:

Logon (Runs on logon)

The file trojankiller.exe has been discovered within the following program.

Trojan Killer by Gridinsoft LLC

Publisher's description - “Developed specifically for automatic removal of viruses, bots, spyware, keyloggers, trojans, scareware and rootkits without the need to manually edit system files or registry, Trojan Killer additionally fixes system modifications that were introduced by malware and which, regretfully, are often ignored by some popular antivirus scanners.”

trojan-killer.com

3% remove it

Scan trojankiller.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.