» IT VIL BI PRODUCTION, TOV
Digital Signature
Analysis
Files (151)
Downloads (4)
Distribution (2)
Related (25)

IT VIL BI PRODUCTION, TOV

Publisher Information

IT VIL BI PRODUCTION, TOV is a software developer located in Kiev, Ukraine*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs.

Authority:

COMODO CA Limited

Valid from:

3/16/2016 1:00:00 AM

Valid to:

3/17/2017 12:59:59 AM

Subject:

CN="IT VIL BI PRODUCTION, TOV", OU=IT, O="IT VIL BI PRODUCTION, TOV", STREET="Dniprovsky Raion, Vulytsya Kurnatovskogo, Budynok 26-A, Kvarty", L=Kiev, S=Kiev, PostalCode=02139, C=UA

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00bb8a5471c0f60d3625581ab7111e53a5

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Amonetize.ITVILBIP.Installer (M), Adware.Amonetize.Bundle.Installer.Meta (M), PUP.Amonetize.ITVILBIP (M), Adware.Amonetize.Bundle.Meta (M), PUP.Amonetize (M)

96.00%

ESET NOD32

Win32/Amonetize.MB potentially unwanted application, Win32/Slugin.A virus, Win32/Amonetize.QM potentially unwanted application

48.00%

Dr.Web

Detection.Undefined, Trojan.Amonetize.12746

38.00%

VIPRE Antivirus

Threat.4150696, Threat.4314870

26.00%

Kaspersky

not-a-virus:HEUR:AdWare.Win32.Amonetize, Virus.Win32.Slugin

22.00%

avast!

Win32:Adware-gen [Adw], Win32:Patched-JI

16.00%

Microsoft Security Essentials

Threat.Undefined

14.00%

F-Secure

Win32.SlugIn.A, Variant.Graftor.275573, Application.Imonetize.2

8.00%

Norman

Win32.SlugIn.A, Gen:Variant.Graftor.275573, Gen:Application.Imonetize.2

6.00%

F-Prot

W32/Slugin.B

4.00%

1 / 68 (PUP)

hackherozero__7934_il34011.exe (ChecleaFC Stadium by StamfordBrige) (5a7918eaa9e70ba7dc9143af5f85b729)

1 / 68 (PUP)

ligaultrasgenerator__7934_il23626.exe (ChecleaFC Stadium by StamfordBrige) (2fe68d4987318b5fab3eb1e2b5f96c37)

1 / 68 (PUP)

doulciv3patch__7934_il3496.exe (ChecleaFC Stadium by StamfordBrige) (4076d904ecc5aca3ee43311b99fbc9fc)

1 / 68 (PUP)

kohack__7934_il147140.exe (Converation Performer v.2 by GeneralTechnologies) (d5f5c5725be3752abea14efe001a424d)

1 / 68 (PUP)

hackherozero__7934_il81295.exe (ChecleaFC Stadium by StamfordBrige) (5267e0cb2e1d9b6e58be42305a808daa)

1 / 68 (PUP)

1mch9fvkq.exe (Setup) (603759ec115cfee5a83b5acf40921254)

1 / 68 (PUP)

hackherozero__7934_il34011.exe (Converation Performer v.2 by GeneralTechnologies) (b01bc71db4e2d9b489b7b5e6cdacf3de)

1 / 68 (PUP)

ybhwvuvyf.exe (Setup) (db69fd5634ba592f879ab128a637d68d)

4 / 68 (PUP)

6lhn6dy12.exe (Setup) (ed768b5e51e086e977a8cfac009be02a)

6 / 68 (PUP)

windowsupdatekb12695__7428_il125675.exe (ChecleaFC Stadium by StamfordBrige) (75b61fa94a6f4d7c13bd8faa88192546)

13 / 68 (PUP)

download motogp 13 pc games downloader__3687_i1900463171_il2583898.exe (ChecleaFC Stadium by StamfordBrige) (e521ba467bca53e411021b48ec4cf416)

4 / 68 (PUP)

theforrest__7934_il304238.exe (ChecleaFC Stadium by StamfordBrige) (bd10500e6175dae904a44bbf0e95d60f)

7 / 68 (PUP)

epsonl130resetterfreedownload__7934_il41042.exe (ChecleaFC Stadium by StamfordBrige) (6f992a95d7ebd5a8c20334eae9438811)

6 / 68 (PUP)

epsonl130resetterfreedownload__7934_il41042.exe (ChecleaFC Stadium by StamfordBrige) (9c17a79c26d8115749dea8ad68c61ebc)

3 / 68 (PUP)

5cw78u36e.exe (Setup) (a24f2bfa27db7705334b786ff46eb034)

4 / 68 (PUP)

sbviewer.exe (ChecleaFC Stadium by StamfordBrige) (12cd0629d3d83888c58b3142a3bde66e)

2 / 68 (PUP)

setup__2140_il122546.exe (ChecleaFC Stadium by StamfordBrige) (80324697bce99ae8e19c828142f93bb2)

1 / 68 (PUP)

bundle_flowsurfcb.exe (Setup) (87ee4e7781b1ebc42adeb6fd5c19c93a)

2 / 68 (PUP)

7934ro0ba.exe (Setup) (9104d5778ffdd1d8ac4e4bd9e8d1b9e2)

2 / 68 (PUP)

ltmjmq0ck.exe (Setup) (279b636197f5f7f5cd5fa2601f9eed97)

3 / 68 (PUP)

yktyu85vi.exe (Setup) (ed5e73f7a458459f26b86d081947166f)

1 / 68 (PUP)

download counter strike extrem downloader__3687_i1901086066_il128184.exe (ChecleaFC Stadium by StamfordBrige) (f344b489ab5898f8301d97f22b94a04c)

4 / 68 (PUP)

9yk1zhudk.exe (Setup) (e7359d9f0a759467ef1785c13a297afd)

1 / 68 (PUP)

cs81qqkna.exe (Setup) (261640fad1da369bb56aae127505bdd6)

11 / 68 (PUP)

setup__2140_il56260.exe (ChecleaFC Stadium by StamfordBrige) (32242185fe072f311681d113366e092f)

3 / 68 (PUP)

brothers.in.arms.road.to.hill.30.ntsc.ps2__18857_il92709.exe (ChecleaFC Stadium by StamfordBrige) (9109ef0f611727e4d143be805ecbb24a)

3 / 68 (PUP)

0wf8fgp6k.exe (Setup) (002de04c6bf97c73fda946942b8db268)

1 / 68 (PUP)

kiwnkk3qh.exe (Setup) (45864866a51e93506d1836105898fa4b)

3 / 68 (PUP)

format factory full 3.8.0.0 final 2015 free download__6338_il798.exe (ChecleaFC Stadium by StamfordBrige) (0a3a64d1eabfdc0ce53efd3b7ae2826e)

4 / 68 (PUP)

download counter strike extreme v6 game full version pc__3225_il9026.exe (ChecleaFC Stadium by StamfordBrige) (7ece6b0f4504d5b6c9df5d089d523738)

Latest 30 of 151 files

Downloads URLs for files signed by IT VIL BI PRODUCTION, TOV.

3 / 68 (PUP)

http://www.power-ful.xyz/.../Bundle_SnapDoNew.exe (2b5493e88262694af5ff204ff5854e9c)

3 / 68 (PUP)

http://91.194.162.11/s3-us-west-2.amazonaws.com/.../WindowsUpdateKB12695__7428_il125675.exe (9109ef0f611727e4d143be805ecbb24a)

1 / 68 (PUP)

http://s3-us-west-2.amazonaws.com/.../WindowsUpdateKB12695__7428_il64377.exe (9f2ef860ccdea5ef8f69acf247e8c1d6)

3 / 68 (PUP)

http://s3-us-west-2.amazonaws.com/.../WindowsUpdateKB12695__7428_il125675.exe (9109ef0f611727e4d143be805ecbb24a)

Distribution

The following websites host and distribute files published by IT VIL BI PRODUCTION, TOV.

www.power-ful.xyz

s3-us-west-2.amazonaws.com

The following publishers (by Authenticode signature organization name) are related.

PR Agentstvo IT PRO, TOV

Develop Invest GROUP, TOV

STK Develop, TOV

Develop Proekt, TOV

Smart Marketyng Solyushynz, TOV

Smart Kapital Invest, TOV

* Note, the details and description above are based on the code signing digital signature issued to IT VIL BI PRODUCTION, TOV by COMODO CA Limited on March 16, 2016 with the serial number '00bb8a5471c0f60d3625581ab7111e53a5'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.