home

IT River

Publisher Information

IT River is a software publisher located in Moscow, Moscow Oblast in Russia*. The company is a primary distributor of unwanted software.
Authority:
COMODO CA Limited

Valid from:
2/25/2014 3:00:00 AM

Valid to:
2/26/2015 2:59:59 AM

Subject:
CN=IT River, O=IT River, STREET="Obolenskiy, 9", L=Moscow, S=Moscow oblast, PostalCode=119021, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
0f02e0c593a3b9a15b22f5853c90d66b

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP (M), PUP.ITRiver, PUP.ITRiver.Installer
100.00%

1 / 68      (Adware)
the last federation 2014 repack eng.exe (CCleaner by Piriform)  (b1a49862d3aa46a2c73ad9d023e336b2)

1 / 68      (Adware)
geroi - poka my molody - mail ru.exe (Explorer by Sysinnals - www.sysinternals.com)  (80faaa1102a0bcaf41e2e54ce329bd15)

1 / 68      (Adware)
minecraft-1-4-7-rus-redpower-buildcraft-industrialcraft-forestry- torrentino.exe (Explorer by Sysinnals - www.sysinternals.com)  (1c86236a540d90f114d9689fc8d931b6)

1 / 68      (Adware)
haddaway - i miss you zaycev net.exe (Windows NetMeeting by Windows)  (bd7e330a097b7e47c1aa3acb589cb98e)

1 / 68      (Adware)
zateryannaya-koloniya-wraiths-of-roanoke- torrentino.exe (Windows NetMeeting by Windows)  (f41bd8f87165ad2ce7ff34889ad6fa16)

1 / 68      (Adware)
gta-vice-city- torrentino.exe (Windows NetMeeting by Windows)  (fca469f0e92261af7511a44ff55c177d)

1 / 68      (Adware)
2015_editor_extream87.exe (Bunndle Stand-Alone Offer Manager, OM 2.4.0.0, 2013-09-18 11:24 by Bunndle)  (dada720ff11bdbe759a6338da3af4d19)

1 / 68      (Adware)
creativecloudset-up.exe (Windows NetMeeting by Windows)  (a41d309a817c4da45d720f034f414e2f)

1 / 68      (Adware)
mokhito - slezy solntsa zaycev net.exe (Windows NetMeeting by Windows)  (17b9ffa90c53133e0fd85efe928c3b31)

1 / 68      (Adware)
chris brown feat lil wayne and tyga - loyal zaycev net.exe  (feaa93242c705769ab9ddffe586cb66d)

1 / 68      (Adware)
zheleznoe-pokolenie- torrentino.exe (Explorer by Sysinnals - www.sysinternals.com)  (4132279c392db64b248f5c74700812c4)

1 / 68      (Adware)
stalker tfile ru.exe (Thunderbird Portable)  (e88afd722fc976ee9788739fb1a0ad23)

1 / 68      (Adware)
popsdravtancdicka tfile ru.exe (Bunndle Stand-Alone Offer Manager, OM 2.4.0.0, 2013-09-18 11:24 by Bunndle)  (6b826f3ab52a812322cd28d494c71138)

1 / 68      (Adware)
fenziqqs.exe (Windows NetMeeting by Windows)  (7baa44a0338743fe7dd927442c150c56)

1 / 68      (Adware)
the hardkiss feat kazaky - strange moves m s iplayer fm.exe (Downloader default)  (350edfd11355582d7a148ad2af0d3d69)

1 / 68      (Adware)
oana radu ft dr mako ft eli - tu original radio edit bassboosted iplayer fm.exe (Downloader default)  (37842814c1705984fa81565ff2abd616)

1 / 68      (Adware)
the sims 2 bon voyage tfile ru.exe (Thunderbird Portable)  (da2c6e5ab454fe013e059ec6369ef3e1)

1 / 68      (Adware)
zil mesut.exe  (c054128b1b05ef301562111cbe8f9960)

1 / 68      (Adware)
skachat thomas gratzer thomas rabitsch alfred schierer - sprechen sie osterreichisch ein sprachfuhre  (75054766aa15ff790d7db7503e63236e)

1 / 68      (Adware)
operaciya_y_i_drugie_priklyucheniya_shurika_1965_bdrip.exe  (2c8734302dea968855a0ad92df9ef1bf)

1 / 68      (Adware)
stas pekha - devochka na share zaycev net.exe (Windows NetMeeting by Windows)  (a6a4534a6e86ccd109f33724d4e2e450)

1 / 68      (Adware)
priklyucheniya timona i pumby - timon and pumbaa 1-8 sezon 1995-1998 tvrip.exe (NetMeeting by Piriform)  (de4b68e5825a44dddadea6e76b5b587a)

1 / 68      (Adware)
gta-vice-city-deluxe- torrentino.exe (NetMeeting by Piriform)  (c15731509da4682d4000a0ed6ad80c22)

1 / 68      (Adware)
atlantis word processor ver 1 6 6 0 final rus portable.exe (Total Commander by C. Ghisler & Co)  (943966a201d79934664ef917f3c57a42)

1 / 68      (Adware)
setup.exe  (2f46a9b8713e93415d0dceafe916e20f)

1 / 68      (Adware)
urban-freestyle-soccer- torrentino.exe (Explorer by Sysinnals - www.sysinternals.com)  (42f8d3a1985c3700230c2064dfc7d9f0)

1 / 68      (Adware)
dxwebsetup.exe (Explorer by Sysinnals - www.sysinternals.com)  (8610e5ce009d9639dbbd0bca6cce8264)

1 / 68      (Adware)
medlenno.exe (Windows NetMeeting by Windows)  (76f12d9a75fa9c75341f65c2b568e892)

1 / 68      (Adware)
eto byl dojd.exe (Windows NetMeeting by Windows)  (7f6c71ceadc1fed31ce3c04638bd9671)

1 / 68      (Adware)
good time.exe (Windows NetMeeting by Windows)  (c6efc992b57ea6e82190d1cea6a5cd66)

 
Latest 30 of 1,570 files

Downloads URLs for files signed by IT River.

1 / 68      (Adware)
http://forces.fast-file.ru/MjU1NTtodHRwJTNBJTJGJTJGZGwuemF5Y2V2Lm5ldCUyRjZiNTVhMTBlLTk0NjEtNDBjNC04MjEyLTYyZGVkYjlhNWExZSUyRjEzMCUyRjEzMDAxJTJGaGFkZGF3YXlfLV9pX21pc3NfeW91XyUyOHpheWNldi5uZXQlMjkubXAzO25hbWU9aGFkZGF3YXlfLV9pX21pc3NfeW91Xyh6YXljZXYubmV0KS5tcDM7c2l6ZT03Mjc3MTE4O3R5cGU9YXVkaW8=  (haddaway - i miss you zaycev net.exe)

1 / 68      (Adware)
http://www.torrentino.com/torrents/.../download_part  (gta-vice-city- torrentino.exe)

1 / 68      (Adware)
http://softget.net/.../go.php?url=aHR0cDovL2ZvcmNlcy5qdXN0bW9iaWxlc2lkZXMucnUvTnpnek1EdG9kSFJ3SlROQkpUSkdKVEpHYzI5bWRHZGxkQzV1WlhRbE1rWWxNMFprYnlVelJHZGxkR1pwYkdVbE1qWm1hV1FsTTBReU5EQTVPMjVoYldVOVFYUnNZVzUwYVhNclYyOXlaQ3RRY205alpYTnpiM0lyZG1WeUt6RXVOaTQyTGpBclptbHVZV3dySlRKQ0sxSlZVeXNsTWtJclVHOXlkR0ZpYkdVdWRIaDA=  (atlantis word processor ver 1 6 6 0 final rus portable.exe)

1 / 68      (Adware)
http://forces.moi-chromeloader.ru/NTM2NTtodHRwJTNBJTJGJTJGenZ1a29mZi5ydSUyRmRvd25sb2FkJTJGMjc0ODgyMjtuYW1lPSVEMCU5QyVEMCVCNSVEMCVCNCVEMCVCQiVEMCVCNSVEMCVCRCVEMCVCRCVEMCVCRTtzaXplPTkyODU4NTI7dHlwZT1hdWRpbw==  (medlenno.exe)

1 / 68      (Adware)
http://forces.fast-file.ru/NTM2NTtodHRwJTNBJTJGJTJGenZ1a29mZi5ydSUyRmRvd25sb2FkJTJGMTg5MzQ4O25hbWU9JUQwJUFEJUQxJTgyJUQwJUJFKyVEMCU5MSVEMSU4QiVEMCVCQislRDAlOTQlRDAlQkUlRDAlQjYlRDAlQjQlRDElOEMuLi47c2l6ZT00NDY2OTM0O3R5cGU9YXVkaW8=  (eto byl dojd.exe)

1 / 68      (Adware)
http://forces.fastcircle.ru/NTM2NTtodHRwJTNBJTJGJTJGenZ1a29mZi5ydSUyRmRvd25sb2FkJTJGMTUwMjA5NjtuYW1lPUdvb2QrVGltZTtzaXplPTMzMDg2NTM7dHlwZT1hdWRpbw==  (good time.exe)

1 / 68      (Adware)
http://forces.search-traff.ru/NTM2NTtodHRwJTNBJTJGJTJGenZ1a29mZi5ydSUyRmRvd25sb2FkJTJGMjcyMjMyOTtuYW1lPSVEMCU5MyVEMCVCRSVEMSU4MCVEMCVCRSVEMCVCNCslRDAlOUYlRDAlQkUlRDAlQjQrJUQwJTk3JUQwJUIwJUQwJUJGJUQxJTgwJUQwJUI1JUQxJTgyJUQwJUJFJUQwJUJDO3NpemU9NDIwNTQ2Njt0eXBlPWF1ZGlv  (gorod pod zapretom.exe)

1 / 68      (Adware)
http://forces.new-traff.ru/NTM2NTtodHRwJTNBJTJGJTJGenZ1a29mZi5ydSUyRmRvd25sb2FkJTJGMjc0NjY1OTtuYW1lPSVEMCU5MSVEMCVCRSVEMCVCQiVEMCVCNSVEMCVCRCslRDAlQTIlRDAlQkUlRDAlQjElRDAlQkUlRDAlQjk7c2l6ZT04ODYyODY4O3R5cGU9YXVkaW8=  (bolen toboy.exe)

1 / 68      (Adware)
http://forces.magazinpromonix.ru/NTM2NTtodHRwJTNBJTJGJTJGenZ1a29mZi5ydSUyRmRvd25sb2FkJTJGMjI3NjcyO25hbWU9TW9zY293K0NhbGxpbmc7c2l6ZT00OTM4NzkzO3R5cGU9YXVkaW8=  (moscow calling.exe)

* Note, the details and description above are based on the code signing digital signature issued to IT River by COMODO CA Limited on February 25, 2014 with the serial number '0f02e0c593a3b9a15b22f5853c90d66b'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.