» IT CONSULT LLC
Digital Signature
Analysis
Files (78)
Downloads (4)
Distribution (1)
Related (3)

IT CONSULT LLC

Publisher Information

IT CONSULT LLC is a software publisher located in Kyyiv, Ukraine*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs.

Authority:

COMODO CA Limited

Valid from:

12/7/2015 2:00:00 AM

Valid to:

12/7/2016 1:59:59 AM

Subject:

CN=IT CONSULT LLC, OU=IT, O=IT CONSULT LLC, STREET="prov. Okhtyrskyy, 7", L=Kyyiv, S=Kyyiv, PostalCode=03022, C=UA

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00d5d544d7b91fa5fc0ed6fc17a58e809e

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.ITCONSULT.Installer (M), PUP.ITCONSULT (M), PUP.ITCONSUL (M), PUP.ITCONSUL.Installer (M), PUP (M)

100.00%

ESET NOD32

Win32/Toolbar.Neobar.BA potentially unwanted application, Win32/Toolbar.Neobar.BC potentially unwanted application, Win32/Toolbar.Neobar.BB potentially unwanted application

12.00%

Dr.Web

Trojan.StartPage1.25564

10.00%

AVG

Adware Toolbar.ATW

4.00%

Emsisoft Anti-Malware

Gen:Variant.Graftor.290337

4.00%

F-Prot

W32/Conduit.B.gen

2.00%

Kaspersky

not-a-virus:WebToolbar.Win32.Neobar

2.00%

1 / 68 (Malware)

TextEditor.exe (TextEditor) (7705585fb6728ef7fcd502a2165f68a7)

1 / 68 (Malware)

texteditor.exe (ff90820e024f040967e05dfa05927317)

1 / 68 (Malware)

searchis-cors.ru_ru.exe (ddb2ee98c31904f2841d0fa817b58b7d)

1 / 68 (Malware)

texteditor.exe (e66ef3134c67e6019366b30fc288dd4a)

1 / 68 (Malware)

TextEditor.exe (TextEditor) (7705585fb6728ef7fcd502a2165f68a7)

4 / 68 (PUP)

daemon2.exe (Daemon) (26894b2eac1b570f8c95a5849c4dfd3d)

1 / 68 (PUP)

daemon2.exe (Daemon) (016a6ae58436c9e486a56d0d39c980aa)

6 / 68 (PUP)

tmp000000092668490024b2d5b7 (0c172e966040a68ec83ba5c17be789c0)

4 / 68 (PUP)

TextEditor.exe (TextEditor) (3e924538e06a2b71e95447ccaec43bc7)

3 / 68 (PUP)

TextEditor.exe (TextEditor) (6a3f92c795592e6953c82aac39da2d58)

1 / 68 (PUP)

TextEditor.exe (TextEditor) (480a05f270726c42e3b5410eac99f6f8)

1 / 68 (PUP)

TextEditor.exe (TextEditor) (7705585fb6728ef7fcd502a2165f68a7)

3 / 68 (PUP)

TextEditor.exe (TextEditor) (791a5c58f51fbd20f4135e2bfc4cd0e2)

1 / 68 (PUP)

daemon2.exe (Daemon) (b069428d68f9cada70784bb829061367)

1 / 68 (PUP)

searchis-cors.ru_ru.exe (46ca5f1b772275966f5e513a05b6497a)

1 / 68 (PUP)

ka99pxfrikfm.exe (42f30fcca799a410fa67b85b66fc1905)

1 / 68 (PUP)

gizm9cjf86h8.exe (226e6739fa7a43bfde8d5ae67a2beff4)

1 / 68 (PUP)

9rdj8o5fanei.exe (1a82a1b187d262f1cca20ea4fa9ee0e6)

1 / 68 (PUP)

3l9f6iknwwle.exe (2875c00a9f27494d16f8b849d057464e)

1 / 68 (PUP)

searche-clip.ru_cis.exe (74f80f2abea5ab3c05526500debee9cc)

1 / 68 (PUP)

searchesi-cors.ru_ru.exe (f50bbb8373d5863a11e6f13e8aacd0b3)

1 / 68 (PUP)

20fcyplt7hev.exe (fc00b0864f80052bd3fec3138840db1d)

1 / 68 (PUP)

h2977wclt5wn.exe (29b6a274a82ee484f421e3ce3bfbb7dd)

1 / 68 (PUP)

searchis-cors.ru_ru.exe (a7e26fc8edb9cfb81f10d738aea33bfb)

1 / 68 (PUP)

searhesi-clip.ru_cis.exe (42c73248c0984370d89a47a9cacd01bb)

1 / 68 (PUP)

TextEditor.exe (TextEditor) (7705585fb6728ef7fcd502a2165f68a7)

1 / 68 (PUP)

ftyyyfh5wnqt.exe (21ff8ac995056dd830847d9993b2503c)

1 / 68 (PUP)

oi4qusidoghv.exe (11c11638f2fa4268bc00c233a5a057b0)

1 / 68 (PUP)

qjsd0fzwvigc.exe (fee87c3f1f8974fa3fd3521967a38373)

1 / 68 (PUP)

n2yqqrxhvevk.exe (97a4e73b22888e94cbaf74881d5a98bc)

Latest 30 of 78 files

Downloads URLs for files signed by IT CONSULT LLC.

1 / 68 (PUP)

http://dysy.storial.ru/installs/.../af4cdd44.exe (f50bbb8373d5863a11e6f13e8aacd0b3)

1 / 68 (PUP)

http://dysy.storial.ru/installs/.../9510a245.exe (a7e26fc8edb9cfb81f10d738aea33bfb)

1 / 68 (PUP)

http://dysy.storial.ru/installs/.../40dba1fd.exe (42c73248c0984370d89a47a9cacd01bb)

1 / 68 (PUP)

http://dysy.storial.ru/installs/.../cf897f87.exe (45427b7bb366880f1222b452e8a0ad7d)

Distribution

The following websites host and distribute files published by IT CONSULT LLC.

dysy.storial.ru

The following publishers (by Authenticode signature organization name) are related.

LLC

ITEA LLC

ZAXAR LTD

* Note, the details and description above are based on the code signing digital signature issued to IT CONSULT LLC by COMODO CA Limited on December 07, 2015 with the serial number '00d5d544d7b91fa5fc0ed6fc17a58e809e'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.