home

ITVA OOO

Publisher Information

ITVA OOO is a software publisher located in Saint-Petersburg, Ru in Russia*. The publisher primarily developes software that can be classified as adware. There is one additional code signing certificate issued to this publisher.
Authority:
COMODO CA Limited

Valid from:
4/17/2015 3:00:00 AM

Valid to:
4/17/2016 2:59:59 AM

Subject:
CN=ITVA OOO, O=ITVA OOO, STREET=18 Koryakova ul, L=Saint-Petersburg, S=RU, PostalCode=194356, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
7f3ebbc3a0970348263aaddffb39e887

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.ITVAOOO, PUP.ITVAOOO, PUP.ITVAOOO.Installer (M), PUP.ITVAOOO (M), PUP.iTVA.ITVAOOO (M), PUP.iTVA (M), PUP.iTVA.MusicVK (M), PUP.iTVA.Installer (M), PUP.iTVA.iTVACo.Installer (M)
97.96%

Bkav FE
W32.HfsAdware, W64.HfsAdware
36.73%

Dr.Web
Adware.Downware.11301
34.69%

Trend Micro House Call
Suspicious_GEN.F47V0519, TROJ_GEN.R03FC0OEN15, Suspicious_GEN.F47V0522
8.16%

Avira AntiVirus
ADWARE/Downware.3882320, TR/Crypt.XPACK.Gen, TR/Avti.338160
6.12%

Qihoo 360 Security
HEUR/QVM42.1.Malware.Gen
2.04%

MicroWorld eScan
Adware.Generic.1242135
2.04%

McAfee
Artemis!CA97FF57D2F7
2.04%

K7 AntiVirus
Adware
2.04%

ESET NOD32
Win32/Itva.C potentially unwanted (variant)
2.04%

1 / 68      (PUP)
traytorrent.tmp (TrayTorrent by iTVA)  (c751cd84d3da6c2f231135e69679dc65)

1 / 68      (PUP)
windowsdefrag.tmp (WindowsDefrag by iTVA)  (994446bbd80528907f5f5a53a8ad132e)

1 / 68      (PUP)
SDL2.dll (Simple DirectMedia Layer)  (b8cb284aed6eed751e562b19dbb0aaef)

1 / 68      (PUP)
loviotvet.exe (LoviOtvet School Calculator by iTVA)  (c12582433974430063f000d6690a902a)

1 / 68      (PUP)
musicvk.tmp (MusicVK by iTVA)  (cb39d0876f61d9d7ee3f9d8911859538)

1 / 68      (PUP)
coolverter.tmp (CoolVerter by iTVA)  (8fabaa5507715af543a789d9ed5dede0)

1 / 68      (PUP)
lovivkontakte.tmp (LoviVkontakte by iTVA)  (f1ffbaea696034d016f231a60e866465)

1 / 68      (PUP)
lovimusic.exe (by iTVA)  (4cace79d9900a98ec99501640cf233da)

1 / 68      (PUP)
vscanner.exe (AV File Scanner by iTVA)  (81c6de8d2dda84697b9fdd659b3dc474)

1 / 68      (PUP)
lovivideo.tmp (by iTVA, Co)  (6fe1ead585068fe2cf2ceb9fd13a6dd5)

1 / 68      (PUP)
winremover.tmp (WinRemover by iTVA)  (b56953204045cbe4fa1efcc2a919fe90)

3 / 68      (PUP)
Coolverter.exe (Coolverter by iTVA www.itva.ru)  (f6cda1de8d252e40ace95b4c49b9b893)

5 / 68      (PUP)
musicvk.exe (MusicVK)  (53681b0d0debb9437f4e00965c9a5444)

1 / 68      (PUP)
AtlasPlayer.exe (AtlasPlayer by iTVA)  (339d48a4b0b1ea84120741930eae6a0d)

3 / 68      (PUP)
pdfwriter.exe (by ITVA)  (d237587637f4cc3f6736935922b60f26)

4 / 68      (PUP)
avsvc64.exe  (c84af2393515c6e6f12e3f1eb9f5c47f)

1 / 68      (PUP)
LVK.exe (LoviVkontakte by iTVA)  (89368398e263276ed809fa0ebfc54fdc)

19 / 68    (PUP)
dicter.exe (DICTER by iTVA)  (ca97ff57d2f774912b44b9f0e7a616a8)

3 / 68      (PUP)
PDFMaster.exe (PDFMaster by ITVA)  (083c44611c671417665da7f67eba8a85)

2 / 68      (PUP)
WinRemover.exe (Windows Remover by ITVA www.itva.ru)  (10186868d5b8a20dc1cee803daff6921)

3 / 68      (PUP)
windowsdefrag.exe (Windows Defrag by iTVA www.itva.ru)  (d76fa969b9a82b504e8af258606c8fbe)

3 / 68      (PUP)
wincleaner.exe  (f4c925f4841292b30d07df5e7c136acd)

3 / 68      (PUP)
TrayTorrent.exe (Tray Torrent by iTVA www.itva.ru)  (59d33aa9b5ecdb9989b50f5ec677ddf9)

4 / 68      (PUP)
wincleaner.exe  (0ee92a8c26ab91298468e0d1ac57848f)

1 / 68      (PUP)
avitva.exe (AVitva Antivirus by iTVA)  (2c2d7ac382d9b6bdc182d11b61460c15)

4 / 68      (PUP)
PDFMaster.exe (PDFMaster by ITVA)  (d49be7065c99a10f78e192f28df91d65)

1 / 68      (PUP)
winarc.exe (WinArc Internet setup by iTVA)  (f6c864249c50b81cdb444d8355602b50)

4 / 68      (PUP)
dicter.exe (DICTER by iTVA)  (fa24796f60710e65a6fdb56d5a7fe19e)

1 / 68      (PUP)
virusscanner.exe (AV File Scanner Internet setup by iTVA)  (616e4af3dfa6358be2e5ab9bfd5e31f4)

3 / 68      (PUP)
vscanner.exe (AV File Scanner by iTVA)  (d5f0f1dce5b0505977fd9aa64b930cc4)

 
Latest 30 of 49 files

The following certificate is also signed by ITVA OOO.

0081BEC7171AF62F3BA4384B4965B7282C  (Apr 27, 2015 to Apr 27, 2016)

* Note, the details and description above are based on the code signing digital signature issued to ITVA OOO by COMODO CA Limited on April 17, 2015 with the serial number '7f3ebbc3a0970348263aaddffb39e887'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.