home

Biznes IT, TOV

Publisher Information

Biznes IT, TOV is a software publisher located in Poltava, Poltavska in Ukraine*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. There is one additional code signing certificate issued to this publisher.
Authority:
COMODO CA Limited

Valid from:
3/22/2016 5:00:00 AM

Valid to:
3/23/2017 4:59:59 AM

Subject:
CN="Biznes IT, TOV", OU=IT, O="Biznes IT, TOV", STREET="vul. Grebinky, 27", L=Poltava, S=Poltavska, PostalCode=36000, C=UA

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00f91dc07e437058165d2c57f1bec9d1ea

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Artex.BiznesIT.Installer.Meta (M), PUP.ContentProtector.BiznesIT.Installer.Meta (M), PUP.ContentProtector.BiznesIT.Meta (M), PUP.Artex.BiznesIT.Meta (M), PUP.ContentProtector (M), PUP.Artex (M)
100.00%

1 / 68      (PUP)
ContentProtector.exe (Content Protector by "Artex Management S. A.")  (98116d2446dba4f54b3c92700b917941)

1 / 68      (PUP)
ContentProtector.exe (Content Protector by "Artex Management S. A.")  (1e36e3804b607fde4aa08a719361c2a6)

1 / 68      (PUP)
ContentProtector.exe (Content Protector by "Artex Management S. A.")  (dd0137e47869de35a514a7224bbc235f)

1 / 68      (PUP)
ContentProtector.exe (Content Protector by "Artex Management S. A.")  (dd0137e47869de35a514a7224bbc235f)

1 / 68      (PUP)
ContentProtector.exe (Content Protector by "Artex Management S. A.")  (dd0137e47869de35a514a7224bbc235f)

1 / 68      (PUP)
import_root_cert.exe  (959000d43907f33cc2d60a8c2ac9dff9)

1 / 68      (PUP)
tmp00000003329d6590618ee8ee (The OpenSSL Toolkit by The OpenSSL Project, http://www.openssl.org/)  (2286d90bb74d19d8702f2e4dc5bc8654)

1 / 68      (PUP)
tmp0000000247b3beca132dc4ef (Network Security Services by Netscape Communications)  (a5c4fad37a25f0a3eb17247830e243d3)

1 / 68      (PUP)
ContentProtector.exe (Content Protector by "Artex Management S. A.")  (4b15b6d76a8edc30453087e5530e1e6c)

1 / 68      (PUP)
ContentProtector.exe (Content Protector by "Artex Management S. A.")  (dd0137e47869de35a514a7224bbc235f)

1 / 68      (PUP)
contentprotectorupdate.exe (Content Protector by "Artex Management S. A.")  (06913446bd0e2e26e681633ea731ade9)

1 / 68      (PUP)
import_root_cert.exe  (a98323d05ab01de3e0848efb32f4722c)

1 / 68      (PUP)
contentprotectorupdate.exe (Content Protector by "Artex Management S. A.")  (9b898803076835aaf9fa91031f8e8589)

1 / 68      (PUP)
condefclean.exe  (22d4b89230edd627903bf20711c76e03)

1 / 68      (PUP)
nfregdrv.exe  (dc3794879b0bdda645884ed52ab90bae)

1 / 68      (PUP)
contentprotectorconrol.exe (Content Protector by "Artex Management S. A.")  (9e5db0feb76954f601e96fac66116d0e)

1 / 68      (PUP)
conprotsetup.exe (Content Protector by "Artex Management S. A.")  (f8324ea6a0a992e273d881a44153a23d)

1 / 68      (PUP)
condefclean.exe  (eb61af22ef11451bbe7af5de81e83860)

1 / 68      (PUP)
conprotsetup.exe (Content Protector by "Artex Management S. A.")  (35cb085689afa0405641a54f5e6f11aa)

1 / 68      (PUP)
nfregdrv.exe  (57778a77b58ba6dbd16c98930f388d45)

1 / 68      (PUP)
conprotsetup.exe (Content Protector by "Artex Management S. A.")  (fe0a76d3cbe5051cee969de66e26bbaa)

1 / 68      (PUP)
condefclean.exe  (8166ed32e2d456a767de1d2749a35749)

1 / 68      (PUP)
nfregdrv.exe  (6e9bc8e5995983c6cde66536d8d1eec4)

1 / 68      (PUP)
contentprotectorconrol.exe (Content Protector by "Artex Management S. A.")  (726820f790b2d9978ab618e24e85b094)

1 / 68      (PUP)
conprotsetup.exe (Content Protector by "Artex Management S. A.")  (d0925a91886ebbc1e36483d2da197ec3)

1 / 68      (PUP)
condefclean.exe  (85f52233d96c31d7c8721ef63351dcf9)

1 / 68      (PUP)
import_root_cert.exe  (2b079fdb55a6711193a9c2b1507612c2)

1 / 68      (PUP)
condefclean.exe  (091f79c68e8c1249877ade51ad96836f)

1 / 68      (PUP)
import_root_cert.exe  (d2890078659ae719904aa801299b560b)

1 / 68      (PUP)
tmp00000002e315924d025eb9a8 (Network Security Services by Netscape Communications)  (80e204ac4686f74d3e2ae2c8a034f53f)

 
Latest 30 of 447 files

The following certificate is also signed by Biznes IT, TOV.

00A07E5994D51E3F5E8915CB5D34EFF638  (Feb 09, 2017 to Mar 23, 2017)

* Note, the details and description above are based on the code signing digital signature issued to Biznes IT, TOV by COMODO CA Limited on March 22, 2016 with the serial number '00f91dc07e437058165d2c57f1bec9d1ea'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.