Should I block it?

98%

Yes, 98% block recommendation.

Possible reasons:

Multiple malware detections

Performance resource utilization

Additional versions

6, 20, 3, 2	0.57%
6, 20, 2, 3	0.57%
6, 20, 2, 3	0.57%
6, 20, 2, 2	0.57%
6, 20, 1, 3	0.57%
6, 19, 9, 3	0.57%
6, 19, 9, 2	0.57%
6, 19, 3, 3	0.57%
6, 19, 2, 2	0.57%
6, 19, 2, 2	0.57%
6, 19, 1, 2	0.57%
6, 18, 11, 2	0.57%
6, 18, 11, 2	0.57%
6, 18, 5, 3	0.57%
6, 18, 5, 3	0.57%
6, 18, 5, 2	2.84%
6, 18, 5, 2	0.57%
6, 18, 4, 3	0.57%
6, 18, 4, 2	0.57%
6, 18, 3, 3	0.57%
6, 18, 2, 3	0.57%
6, 18, 2, 2	1.70%
6, 18, 2, 2	0.57%
6, 18, 1, 2	0.57%
6, 17, 10, 2	3.98%
View more
6, 17, 10, 2	0.57%
6, 17, 7, 3	0.57%
6, 17, 7, 3	0.57%
6, 17, 7, 3	0.57%
6, 17, 7, 2	1.70%
6, 17, 7, 2	0.57%
6, 17, 7, 2	0.57%
6, 17, 6, 2	0.57%
6, 17, 2, 3	0.57%
6, 17, 2, 3	1.70%
6, 17, 1, 3	0.57%
6, 17, 1, 3	0.57%
6, 17, 1, 3	0.57%
6, 17, 1, 2	0.57%
6, 17, 1, 2	1.70%
6, 16, 3, 3	0.57%
6, 16, 3, 3	0.57%
6, 16, 3, 3	0.57%
6, 16, 3, 2	2.27%
6, 16, 3, 2	0.57%
6, 16, 3, 2	0.57%
6, 16, 2, 2	0.57%
6, 16, 1, 3	0.57%
6, 16, 1, 3	0.57%
6, 16, 1, 2	0.57%
6, 15, 15, 3	0.57%
70 other versions

Relationships

Child processes

Related files

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExA, RegOpenKeyExA, RegCreateKeyExA, RegSetValueExA, RegEnumKeyA, RegQueryInfoKeyA, RegDeleteValueA, RegDeleteKeyA, RegEnumKeyExA, AdjustTokenPrivileges, LookupPrivilegeValueA, OpenProcessToken, RegFlushKey, GetUserNameA, RegLoadKeyA, RegRestoreKeyA, RegSaveKeyA, RegEnumValueA, GetSidSubAuthority, GetSidSubAuthorityCount, GetTokenInformation, RegCloseKey, RegSetValueExW, RegQueryValueExW, RegDeleteValueW, RegCreateKeyExW, GetUserNameW, OpenSCManagerA, RegNotifyChangeKeyValue, OpenServiceA, CloseServiceHandle, DuplicateTokenEx, GetLengthSid, SetTokenInformation, CreateProcessAsUserW

comctl32.dll

ImageList_AddMasked, ImageList_Add, ImageList_Remove, ImageList_BeginDrag, ImageList_DragShowNolock, ImageList_DragMove, ImageList_EndDrag, ImageList_DragLeave, ImageList_Draw, ImageList_DragEnter, ImageList_GetIcon, ImageList_Destroy, ImageList_Create, PropertySheetA, DestroyPropertySheetPage, CreatePropertySheetPageA

comdlg32.dll

GetSaveFileNameA, GetOpenFileNameA, GetFileTitleA, GetSaveFileNameW

gdi32.dll

CreateRectRgn, GetViewportExtEx, GetWindowExtEx, CreatePen, CreatePatternBrush, PtVisible, TextOutA, ExtTextOutA, Escape, PatBlt, GetMapMode, SetRectRgn, CombineRgn, DPtoLP, StretchDIBits, GetCharWidthA, GetTextMetricsA, CopyMetaFileA, GetTextColor, GetBkColor, LPtoDP, EnumFontFamiliesExA, LineTo, MoveToEx, IntersectClipRect, ExcludeClipRect, SelectClipRgn, ScaleWindowExtEx, SetWindowExtEx, ScaleViewportExtEx, SetViewportExtEx, OffsetViewportOrgEx, SetViewportOrgEx, SetMapMode, RestoreDC, SaveDC, CreateBitmap, GetClipBox, SetBkMode, SetBkColor, CreateFontIndirectW, DeleteDC, CreateCompatibleBitmap, GetStockObject, SelectObject, BitBlt, CreateRectRgnIndirect, DeleteObject, SetTextColor, CreateCompatibleDC, GetDIBits, CreateDIBSection, CreateSolidBrush, GetObjectA, CreateFontIndirectA, GetDeviceCaps, GetTextExtentPointA, RectVisible, CreateDIBitmap, CreateFontA, SetStretchBltMode, StretchBlt

kernel32.dll

DllMain

ole32.dll

OleInitialize, CoRegisterClassObject, OleIsCurrentClipboard, OleUninitialize, StringFromGUID2, ReleaseStgMedium, OleGetClipboard, CoUninitialize, CoInitialize, CoTaskMemFree, CoGetObject, CoRevokeClassObject, OleFlushClipboard, CreateILockBytesOnHGlobal, StgCreateDocfileOnILockBytes, StgOpenStorageOnILockBytes, CoGetClassObject, CoRegisterMessageFilter, CoTaskMemAlloc, OleDuplicateData, CreateStreamOnHGlobal, CoDisconnectObject, RevokeDragDrop, CoLockObjectExternal, RegisterDragDrop, CLSIDFromString, CLSIDFromProgID, CoFreeUnusedLibraries, DoDragDrop, CoCreateInstance

shell32.dll

SHGetMalloc, SHGetDesktopFolder, Shell_NotifyIconA, ShellExecuteExW, SHFileOperationW, SHFileOperationA, SHGetFileInfoW, ShellExecuteW, FindExecutableA, ShellExecuteExA, SHGetFileInfoA, SHBrowseForFolderW, SHGetPathFromIDListW, SHBrowseForFolderA, SHGetPathFromIDListA, ShellExecuteA, FindExecutableW

user32.dll

DllMain

wininet.dll

InternetGetCookieA, InternetCanonicalizeUrlA, GetUrlCacheEntryInfoA, InternetCanonicalizeUrlW, InternetCombineUrlA, InternetSetCookieA, InternetCrackUrlA, GetUrlCacheEntryInfoW, HttpSendRequestA, HttpAddRequestHeadersA, HttpOpenRequestA, InternetCloseHandle, InternetOpenA, InternetConnectA, InternetReadFile

winspool.drv

ClosePrinter, DocumentPropertiesA, OpenPrinterA

IDMan.exe

Internet Download Manager (IDM) by Tonec Inc. (Signed)

Remove IDMan.exe

Version:	6, 12, 21, 2
MD5:	310c1739b7716b057998dc38bd06afd4
SHA1:	1d49611f8faf011f562b004e7ec0756c5eda4df2
SHA256:	e7a38c03a93b0de9e5a7afcf8c32d37c518a210b8241a91f4c5b21093b2cb8f6

Warning 4 antivirus scanners has detected malware.

What is IDMan.exe?

Internet Download Manager (also called IDM) is a shareware download manager that supports batch downloads. IDM supports Internet Explorer, Opera, Apple Safari, Google Chrome and Mozilla Firefox.

About IDMan.exe (from Tonec Inc.)

“Internet Download Manager (IDM) is a tool to increase download speeds by up to 5 times, resume and schedule downloads. Comprehensive error recovery and resume capability will restart broken or interru”

Details

File name:	idman.exe
Publisher:	Tonec Inc.
Product name:	Internet Download Manager (IDM)
Typical file path:	C:\Program Files\internet download manager\idman.exe
File version:	6, 12, 21, 2
Size:	3.37 MB (3,534,080 bytes)
Certificate
Issued to:	Tonec Inc.
Authority (CA):	VeriSign
Expiration date:	Saturday, June 1, 2013
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following program will install this file

Internet Download Manager

Tonec Inc.

30% remove

Internet Download Manager (also called IDM) is a shareware download manager. It is only available for the Microsoft Windows operating system.

Behaviors

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'IDMan' → C:\Program Files\Internet Download Manager\IDMan.exe /onboot

Windows firewall allowed programs

Exceptions allow programs to access to the Internet through an outbound connections

Firewall exception for 'C:\Program Files\Internet Download Manager\IDMan.exe'

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'IDMan' → C:\Program Files\Internet Download Manager\IDMan.exe /onboot

Malware detections

Based on 40+ industry antivirus scanners, 4 of them detected the following malware.

Antivirus engine	Engine version	Detection
Avira AntiVir	7.11.44.242	HEUR/Malware
ByteHero	1.0.0.1	Trojan.Win32.Heur.Gen
Comodo Internet Security	13728	Heur.Suspicious
McAfee Gateway Anti-Malware	v2012.1-dat	Heuristic.LooksLike.Win32.SuspiciousPE.N

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.02356301%	0.028634%
Kernel CPU:	0.01530459%	0.013761%
User CPU:	0.00825842%	0.014873%
Kernel CPU time:	203 ms/min	100,923,805ms/min
Context switches:	2/sec	284/sec
Memory
Private memory:	7.69 MB	21.59 MB
Private (maximum):	14.75 MB
Private (minimum):	13.38 MB
Non-paged memory:	7.69 MB	21.59 MB
Virtual memory:	101.36 MB	140.96 MB
Virtual memory (peak):	111.11 MB	169.69 MB
Working set:	13.43 MB	18.61 MB
Working set (peak):	14.86 MB	37.95 MB
Resource allocations
Threads:	2	12
Handles:	232	600
GUI GDI count:	89	103
GUI GDI peak:	92	142
GUI USER count:	64	49
GUI USER peak:	69	71

Process properties

Integrety level:	Undefined
Platform:	64-bit
Command line:	"C:\Program Files\internet download manager\idman.exe" /onboot
Owner:	User
Parent process:	explorer.exe (Windows Explorer by Microsoft Corporation)

Distribution by Windows OS

OS version	distribution
Windows 7 Ultimate	35.43%
Microsoft Windows XP	14.29%
Windows 8 Pro	12.00%
Windows 7 Home Premium	5.71%
Windows 8 Pro with Media Center	5.14%
Windows 7 Professional	4.57%
Windows 8.1 Pro	3.43%
Windows 8	3.43%
Windows 7 Home Basic	2.29%
Windows 7 Starter	2.29%
Windows Developer Preview	1.14%
Windows 8.1 Pro Preview	1.14%
Windows 8.1 Single Language Preview	1.14%
Windows 8 Enterprise	1.14%
Windows 7 Ultimate N	1.14%
Windows 8.1 N	0.57%
Windows 8.1 Single Language	0.57%
Windows 8.1 Pro with Media Center	0.57%
Windows 8.1	0.57%
Windows 8 Enterprise N	0.57%
Windows 8.1 Enterprise	0.57%
25 other Windows OS version

Distribution by country

Ireland installs about 15.03% of Internet Download Manager (IDM).

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	29.91%
ASUS	12.82%
Hewlett-Packard	10.26%
Acer	10.26%
Toshiba	9.40%
GIGABYTE	6.84%
Sony	5.98%
Lenovo	5.98%
American Megatrends	3.85%
Intel	3.42%
Compaq	0.85%
Samsung	0.43%

Remove Adware and Spyware Programs, FREE Download!