» ITVA OOO
Digital Signature
Analysis
Files (37)
Downloads (4)
Distribution (4)
Related (3)

ITVA OOO

Publisher Information

ITVA OOO is a software publisher located in Saint-Petersburg, Ru in Russia*. The publisher primarily developes software that can be classified as adware. There is one additional code signing certificate issued to this publisher.

Authority:

COMODO CA Limited

Valid from:

4/27/2015 3:00:00 AM

Valid to:

4/27/2016 2:59:59 AM

Subject:

CN=ITVA OOO, OU=Software Distribution, O=ITVA OOO, STREET=Koryakova ul. 18, L=Saint-Petersburg, S=RU, PostalCode=194356, C=RU

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

0081bec7171af62f3ba4384b4965b7282c

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.ITVAOOO, PUP.Installer.ITVAOOO, PUP.ITVAOOO.Installer (M), PUP.iTVA.Installer (M), PUP.iTVA (M)

81.08%

Agnitum Outpost

Riskware.Agent

37.84%

ESET NOD32

Win32/Itva.C potentially unwanted (variant), Win32/Itva.D potentially unwanted

32.43%

Trend Micro House Call

Suspicious_GEN.F47V0507, Suspicious_GEN.F47V0515, Suspicious_GEN.F47V0519, Suspicious_GEN.F47V0506, Suspicious_GEN.F47V0510

32.43%

Bkav FE

W32.HfsAdware

29.73%

Fortinet FortiGate

Riskware/Itva

29.73%

McAfee

Artemis!8AA5054BF527, Artemis!54F57CF6D9FF, Trojan.Artemis!DB15A5D30685, Trojan.Artemis!B05FE445D0CB, Artemis!1BDFBD425C4E

27.03%

Avira AntiVirus

TR/Avti.15018592, TR/Avti.27868736, TR/Avti.14675152, TR/Avti.9529184, TR/Avti.1879888, TR/Avti.175568, TR/Avti.12633728

27.03%

IKARUS anti.virus

PUA.Itva

24.32%

K7 AntiVirus

Adware

21.62%

1 / 68 (PUP)

hideguardvpnsetupru.exe (Product Installer by !TVA) (40e5d1f4faed0331d33caf30cd109a56)

1 / 68 (PUP)

doplayersetupru.exe (Product Installer by !TVA) (d5ddc3a4fa65744835c46f3b0717e7f6)

1 / 68 (PUP)

winplayer_2.11.0.0_ru.exe (Product Installer by !TVA) (f5c555b13921a61e269eb69f4771d89e)

1 / 68 (PUP)

loviotvetsetupru.exe (Product Installer by !TVA) (fdde754c87605407e577660668692b77)

1 / 68 (PUP)

atlasplayersetupru.exe (Product Installer by !TVA) (7c972f5086eb2bb122be388006f3bad3)

1 / 68 (PUP)

WinPlayerSetup.exe (Windows Player Setup by ITVA) (224ea418e4dc0d468ac589a5a416b4b1)

1 / 68 (PUP)

windowsdefragsetupru.exe (Product Installer by !TVA) (ed4a38cd4374d403d42606b107ae90ba)

1 / 68 (PUP)

lovimusicsetupru.exe (Product Installer by !TVA) (91f2d8cf382bd1cdbf00ad2953a546e3)

1 / 68 (PUP)

windowsdefragsetupru.exe (Product Installer by !TVA) (d140076608bffc7e79540371e358535c)

1 / 68 (PUP)

lovimusicsetupru.exe (Product Installer by !TVA) (497336d0aa9b5e5cdcda143b4dfe65cc)

1 / 68 (PUP)

winarcsetupru.exe (Product Installer by !TVA) (caa039c470a2dd15eaa4a15e7766e446)

1 / 68 (PUP)

MusicVKSetupRU.exe (Product Installer by !TVA) (4fadd7800f4bd85efaf4192e9e2cea45)

1 / 68 (PUP)

atlasplayersetupru.exe (Product Installer by !TVA) (3ea116deb182e9a82e8e480d7627953c)

1 / 68 (PUP)

doplayersetupru.exe (Product Installer by !TVA) (ae00497991e37cb5dce0851eaaf95b5d)

1 / 68 (PUP)

lovivkontakteinternetsetup.exe (Product Installer by !TVA) (4baadbd5d0c3e4894c3ae270659210a3)

1 / 68 (PUP)

DicterSetup.exe (Dicter Setup by ITVA) (f31eaf5aaa6467fd250371427230e1f2)

1 / 68 (PUP)

WinPlayerSetup.exe (Windows Player Setup by ITVA) (715ce6d77043418dc5fb1ddf2eea3815)

1 / 68 (PUP)

lovivkontakteinternetsetup.exe (Product Installer by !TVA) (d041aa51c7e7abc4b9d964ab6cba49e3)

1 / 68 (PUP)

kilotorrentsetupru.exe (Product Installer by !TVA) (1aa0340491e3e95e52e60b9a155bf99c)

7 / 68 (PUP)

torrentplayersetupru.exe (Product Installer by !TVA) (2357d3b7ad358efd55b3ea360970bfbc)

13 / 68 (PUP)

winplayer_3.0.0.0_ru.exe (Product Installer by !TVA) (05b5dcd973ac242d3da53a7224ef85b4)

5 / 68 (PUP)

coolvertersetupru.exe (Product Installer by !TVA) (d913ddbba2610f9ce0958ad7bf1c2211)

8 / 68 (PUP)

lovivideo_setup.exe (Product Installer by !TVA) (08269418f398e8e3cf6500803f0475cb)

10 / 68 (PUP)

lovivideosetupru.exe (Product Installer by !TVA) (bc487f623383e51034490436f452ece1)

7 / 68 (PUP)

kilotorrentsetupru.exe (Product Installer by !TVA) (05b41b4850c70549cc130051b172712b)

12 / 68 (PUP)

winplayer_3.0.0.0_ru.exe (Product Installer by !TVA) (359d2b96e11c5e0d7a2df6474af1f763)

12 / 68 (PUP)

dicterupdater.exe (Product Installer by !TVA) (d23c8921aa1a7161a33b72bdd48efabc)

11 / 68 (PUP)

dictersetupru.exe (Product Installer by !TVA) (1bdfbd425c4e18a303ff8b4286b563e2)

9 / 68 (PUP)

winplayersetupru.exe (Product Installer by !TVA) (b05fe445d0cb0a4e9609e5fe4d627c73)

11 / 68 (PUP)

wincleanersetupru.exe (Product Installer by !TVA) (db15a5d306851e6cd05311b00d0e912e)

Latest 30 of 37 files

Downloads URLs for files signed by ITVA OOO.

1 / 68 (PUP)

http://download.lovivk.com/lovivk_setup.exe (d041aa51c7e7abc4b9d964ab6cba49e3)

1 / 68 (PUP)

https://cloclo227.datacloudmail.ru/weblink/get/.../MusicVKSetupRU.exe (4fadd7800f4bd85efaf4192e9e2cea45)

1 / 68 (PUP)

http://files.windowsplayer.ru/WinPlayerSetup.exe (715ce6d77043418dc5fb1ddf2eea3815)

13 / 68 (PUP)

http://download.windowsplayer.ru/WinPlayer_3.0.0.0_RU.exe (05b5dcd973ac242d3da53a7224ef85b4)

Distribution

The following websites host and distribute files published by ITVA OOO.

cloclo227.datacloudmail.ru

files.windowsplayer.ru

download.lovivk.com

download.windowsplayer.ru

The following certificate is also signed by ITVA OOO.

7F3EBBC3A0970348263AADDFFB39E887 (Apr 17, 2015 to Apr 17, 2016)

The following publishers (by Authenticode signature organization name) are related.

ITVA

iTVA LLC

ITVA LLC

* Note, the details and description above are based on the code signing digital signature issued to ITVA OOO by COMODO CA Limited on April 27, 2015 with the serial number '0081bec7171af62f3ba4384b4965b7282c'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.