home

OOO Port.Ru

Publisher Information

OOO Port.Ru is a software developer located in Moscow, Russia*. Thre are 4 additional code signing certificates issued to this publisher.
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
11/3/2006 11:52:45 AM

Valid to:
11/22/2007 4:32:39 PM

Subject:
CN=OOO Port.Ru, OU=Secure Application Development, O=OOO Port.Ru, L=Moscow, S=Moscow, C=RU

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
265c6fd11c0f3924531d50653dd4c2db

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

F-Prot
W32/Backdoor2.ABKJ, W32/Trojan.BPOL
66.67%

VIPRE Antivirus
Trojan.Win32.Generic, Trojan-PSW.Win32.LdPinch.syo
50.00%

Clam AntiVirus
Trojan.PWS.LdPinch.DQY
50.00%

AVG
Generic_c
50.00%

McAfee
Artemis!02128FD92746, Artemis!671F53CCE90A
33.33%

Trend Micro House Call
PAK_Generic.005, TSPY_MAGENT.A
33.33%

Trend Micro
PAK_Generic.005, TSPY_MAGENT.A
33.33%

Rising Antivirus
Trojan.Win32.Generic.1275E09D, PE:Trojan.PSW.Win32.LdPinch.rat!100035401 [F]
33.33%

IKARUS anti.virus
Trojan.SuspectCRC
33.33%

nProtect
Trojan/W32.Agent.4523776
16.67%

0 / 68
magent.exe (Mail.Ru Agent by Mail.Ru)  (eba004d51d4ae64b8bb968b3f46d1c64)

4 / 68      (inconclusive)
magentsetup.exe (by Mail.Ru)  (671f53cce90a8e79a84e2d9fcafb4a44)

11 / 68    (Malware)
magent.exe (by Mail.Ru)  (d3e5b242f3380d6d88fc125e46aea703)

0 / 68
mrasearch.dll  (e06ce2c45f3203fdfc533eb2803d3438)

4 / 68
magent.exe (Mail.Ru Agent by Mail.Ru)  (a2fb3a71c2808e30e720f05984466bae)

0 / 68
SputnikInstaller.exe (MailRuSputnik Installer Module by @Mail.Ru)  (864c45c95d1b53d94b97ffd96740dd8b)

1 / 68      (inconclusive)
magentsetup.exe (by Mail.Ru)  (8abcac49039f9586a8ae433833672fc5)

2 / 68
menu.dll  (fe39e5487ac19660a22fdd2068b4bf88)

0 / 68
games.dll  (0bee740e6943619c7ca6607b60803e1b)

5 / 68      (Malware)
magent.exe (by Mail.Ru)  (02128fd92746fdcdc6dc965342d2d9fe)

0 / 68
MailRuSputnik.DLL (MailRuSputnik Module by @Mail.Ru)  (55d00f934516b45c22f1934ffe4cf95b)

The certificates below are also signed by OOO Port.Ru.

5D5BA1F66AD0D98E254857BA2EB2E238  (Nov 12, 2008 to Nov 13, 2010)

34DE0BE3E12121BBBB32726ABB870631  (Oct 22, 2007 to Nov 21, 2008)

21F8DF  (Oct 20, 2005 to Nov 22, 2006)

2081E6  (Oct 08, 2004 to Nov 22, 2005)

* Note, the details and description above are based on the code signing digital signature issued to OOO Port.Ru by Thawte Consulting (Pty) Ltd. on November 03, 2006 with the serial number '265c6fd11c0f3924531d50653dd4c2db'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.