Should I block it?

60%
60% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

1, 0, 1, 35 6.00%
1, 0, 1, 35 4.00%
1, 0, 1, 35 10.00%
1, 0, 1, 34 22.00%
1, 0, 1, 34 2.00%
1, 0, 1, 33 2.00%
1, 0, 1, 32 2.00%
1, 0, 1, 30 6.00%
1, 0, 1, 30 38.00%
1, 0, 1, 15 8.00%

Relationships

Child process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
GetSecurityDescriptorSacl, RegQueryValueExA, RegCloseKey, RegOpenKeyA, SetSecurityInfo, ConvertStringSecurityDescriptorToSecurityDescriptorW, RegDeleteValueA, RegOpenKeyExA, RegCreateKeyExA, RegSetValueExA
kernel32.dll
GetTickCount, WriteFile, InitializeCriticalSection, Sleep, CreateDirectoryA, FindFirstFileA, GetProcAddress, RemoveDirectoryA, CopyFileA, FindClose, LoadLibraryA, CreateFileMappingA, MoveFileA, FindNextFileA, DeleteCriticalSection, CloseHandle, DeleteFileA, GlobalAlloc, GetLastError, GlobalFree, OpenMutexA, GetModuleFileNameA, CreateMutexA, GetVersionExA, LocalFree, SetFilePointer, SystemTimeToFileTime, SetFileTime, FreeLibrary, ReadFile, GetCurrentDirectoryA, LocalFileTimeToFileTime, GetStringTypeW, GetStringTypeA, FlushFileBuffers, SetStdHandle, GetLocaleInfoA, GetCurrentProcessId, QueryPerformanceCounter, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsA, GetTimeZoneInformation, GetConsoleMode, GetConsoleCP, LCMapStringW, MultiByteToWideChar, WideCharToMultiByte, LCMapStringA, IsValidCodePage, GetOEMCP, UnmapViewOfFile, MapViewOfFile, CreateFileA, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEnvironmentVariableA, SetEndOfFile, GetProcessHeap, CompareStringA, GetACP, GetCPInfo, HeapReAlloc, CompareStringW, GetFileAttributesA, GetModuleHandleW, ExitProcess, TerminateProcess, GetCurrentProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, HeapFree, HeapAlloc, GetSystemTimeAsFileTime, GetCommandLineA, GetStartupInfoA, RaiseException, RtlUnwind, TlsGetValue, TlsAlloc, TlsSetValue, TlsFree, InterlockedIncrement, SetLastError, GetCurrentThreadId, InterlockedDecrement, GetStdHandle, LeaveCriticalSection, EnterCriticalSection, InitializeCriticalSectionAndSpinCount, HeapSize, SetHandleCount, GetFileType, HeapCreate, VirtualFree, VirtualAlloc, GetModuleHandleA
shell32.dll
SHGetFolderPathA, ShellExecuteA
user32.dll
wsprintfA, DestroyWindow, SetTimer, CreateDialogParamA, KillTimer, LoadIconA, SendMessageA, IsDialogMessageA, TranslateMessage, MessageBoxA, PeekMessageA, SetClassLongA, GetDlgItem, CheckDlgButton, GetLastInputInfo, ShowWindow, IsDlgButtonChecked, DispatchMessageA, SetWindowTextA, MessageBoxIndirectA, GetDesktopWindow
version.dll
VerQueryValueA, GetFileVersionInfoA, GetFileVersionInfoSizeA
wininet.dll
HttpSendRequestA, InternetConnectA, HttpQueryInfoA, InternetOpenA, InternetCloseHandle, InternetReadFile, HttpOpenRequestA

visicom_antiphishing.exe

Anti-phishing Domain Advisor by Visicom Media Inc. (Signed)

Remove visicom_antiphishing.exe
Version:   1, 0, 1, 35
MD5:   e72cce52044a7bed8ec654ae9afbaa20
SHA1:   f8d40f0c4fe3df632a4d45043377b19c1099b8bc

What is visicom_antiphishing.exe?

The Visicom Anti-phishing Domain Advisor Toolbar, powered by Panda Security, will analyze the current web sites you are visiting against a URL database and determine if the site is a potential phishing threat. The toolbar is also included in both Panda Cloud Antivirus free and paid version.

About visicom_antiphishing.exe (from Visicom Media Inc.)

The Anti-phishing Domain Advisor ensures you navigate the Web safely by protecting you from "phishing sites" (copycats of legitimate sites that steal your personal info) or "malware sites" designed to

DetailsDetails

File name:visicom_antiphishing.exe
Publisher:Visicom Media Inc. (Powered by Panda Security)
Product name:Anti-phishing Domain Advisor
Description:Visicom Media Anti-phishing Domain Advisor (Powered by Panda Security)
Typical file path:C:\ProgramData\anti-phishing domain advisor\visicom_antiphishing.exe
File version:1, 0, 1, 35
Product version:1.0
Size:216.13 KB (221,320 bytes)
Certificate
Issued to:Visicom Media Inc.
Authority (CA):Thawte
Expiration date:Saturday, June 21, 2014
Digital DNA
PE subsystem:Windows GUI
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'Anti-phishing Domain Advisor' → "C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe"
Network connections
  • [TCP] visicom-104.nationalnet.com (69.50.130.69:80)

  • ResourcesResource utilization

    (Note: statistics below are averages based on a minimum sample size of 200 unique participants)
    Averages
     
    CPU
    Total CPU:0.02605511%
    0.028634%
    Kernel CPU:0.00923925%
    0.013761%
    User CPU:0.01681586%
    0.014873%
    Kernel CPU time:396 ms/min
    100,923,805ms/min
    Context switches:4/sec
    284/sec
    Memory
    Private memory:3.44 MB
    21.59 MB
    Private (maximum):5.67 MB
    Private (minimum):4.19 MB
    Non-paged memory:3.44 MB
    21.59 MB
    Virtual memory:122.79 MB
    140.96 MB
    Virtual memory (peak):172 MB
    169.69 MB
    Working set:3.4 MB
    18.61 MB
    Working set (peak):100.29 MB
    37.95 MB
    Resource allocations
    Threads:6
    12
    Handles:316
    600
    GUI GDI count:9
    103
    GUI GDI peak:9
    142
    GUI USER count:2
    49
    GUI USER peak:2
    71

    BehaviorsProcess properties

    Integrety level:High
    Platform:32-bit
    Command line:"C:\ProgramData\anti-phishing domain advisor\visicom_antiphishing.exe"
    Owner:User

    Windows OS versionsDistribution by Windows OS

    OS versiondistribution
    Windows 7 Home Premium 36.00%
    Windows 7 Ultimate N 24.00%
    Microsoft Windows XP 14.00%
    Windows 7 Ultimate 12.00%
    Windows 7 Professional 8.00%
    Windows Vista Ultimate 2.00%
    Windows Vista Home Premium 2.00%
    Windows 8 Pro 2.00%

    Distribution by countryDistribution by country

    United States installs about 69.57% of Anti-phishing Domain Advisor.

    OEM distributionDistribution by PC manufacturer

    PC Manufacturerdistribution
    Dell 34.78%
    Hewlett-Packard 21.74%
    Toshiba 17.39%
    Acer 13.04%
    Lenovo 8.70%
    Samsung 4.35%
    Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

    Download it for FREE