home

SOFT-MEDIA LTD

Publisher Information

SOFT-MEDIA LTD is a software publisher located in Irkutsk, Irkutskaya Oblast in Russia*.
Authority:
COMODO CA Limited

Valid from:
10/8/2014 3:00:00 AM

Valid to:
10/9/2015 2:59:59 AM

Subject:
CN=SOFT-MEDIA LTD, O=SOFT-MEDIA LTD, STREET=142 ul.Sovetskaya, L=Irkutsk, S=Irkutskaya oblast, PostalCode=664009, C=RU

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
291991731bfa3e6452779010b97c2a41

Scanner detections:
Malware distribution  (77% detected)

Scan engine
Details
Detections

Reason Heuristics
Threat.Win.Reputation.IMP
85.00%

avast!
Win32:Adware-gen [Adw]
20.00%

AVG
Could be an adware AdLoad
20.00%

F-Prot
W32/A-43d29137, W32/InstallCore.G.gen
15.00%

Dr.Web
Trojan.LoadMoney.362, Adware.Webalta.699, Adware.Webalta.702
15.00%

McAfee
PUP-FAX, Program.PUP-FAX
15.00%

ESET NOD32
Win32/AdWare.Toolbar.Webalta.GZ (variant)
10.00%

Vba32 AntiVirus
Downware.iDatix.gen
10.00%

Avira AntiVirus
TR/Strictor.64839, ADWARE/Adware.Gen
10.00%

Emsisoft Anti-Malware
Gen:Variant.Zusy.108226, Gen:Variant.Adware.Strictor.99205
10.00%

1 / 68      (Malware)
hp softpaq download manager utility 3.0.0.0 rev-a.exe  (37058f00a465177111bac8c9451bc417)

1 / 68      (Malware)
hp softpaq download manager utility 3.0.0.0 rev-a.exe  (00af598b5e7b2f5eea9b451c76ca4c72)

1 / 68      (Malware)
не подтвержден 285908.crdownload  (f4a5f33200004ba7ecd1c013ea8374a2)

0 / 68
pogoda.exe  (6acb33754bea7bb058aa81f03374a680)

1 / 68      (Malware)
samsung - over the horizon (galaxy siii).exe  (d6e981d3ea36701597ca863d2f78b6af)

1 / 68      (Malware)
aimp_setup.exe  (3197c9234b246a108650ff822d4b4ab8)

0 / 68
autocad_2014_crack.exe  (899f32d47e160476fadc9ea04bae58e6)

1 / 68      (Malware)
fristayl - kapel_koy dozhdya tebe v okno postuchu.exe  (89f65458a61e5ba972f2a48bd8b0c6bd)

1 / 68      (Malware)
cubaselements.iso.softtorrent.ru.torrent.exe  (d77ebb55e0a3ba2f1836433b2f024891)

6 / 68      (PUP)
servis pak 4 na vindovs 7.exe  (1247c84b6c9d845eecd278cdbf6bf182)

9 / 68      (PUP)
vera brezhneva - devochka moya ( novinka 2014 - skachat_ musicnewst.exe  (c574a7ad2f5ef3e870171e43745c6f08)

1 / 68      (Malware)
hp_deskjet_f4172_drayvera_skachat'.exe  (0e1e2459c59cd69191c26ad2f8b9eee2)

1 / 68      (Malware)
hp_deskjet_f4172_drayvera_skachat'.exe  (1cab08c8014c899386e08a56f4eddad9)

1 / 68      (Malware)
hp_deskjet_f4172_drayvera_skachat'.exe  (fedf015e47869ce3ed3321fcf6ff0eaf)

1 / 68      (Malware)
skkachat'_drayvery_dlya_interneta.exe  (7f1b12e28f27671d16dd8e99e17df221)

1 / 68      (Malware)
skkachat'_drayvery_dlya_interneta.exe  (100854331489c1ee71749f2b502824ba)

1 / 68      (Malware)
jovesmodpack.exe  (b06ed6913757980f957193920fab84a5)

1 / 68      (Malware)
jovesmodpack.exe  (3f7b7dcb44cf4f8f069ec867918a5480)

1 / 68      (Malware)
jovesmodpack.exe  (0625b6f40c5b5d47619209ff35d39acd)

0 / 68
weather.exe (Wheather)  (597a5971607c22633d49b997eef65559)

1 / 68      (Malware)
vinahodi-lyudstva.doc.exe  (319d6c40cbdb3c1a88730e5d03c39584)

0 / 68
pogoda.exe  (e98fae0306c3ec38a8401c469a82a67a)

0 / 68
nero_brom_12.560.exe  (fe993a04b1dab7be1d9833e11512941a)

0 / 68
nero-8-installer.exe  (1625cc341906afa3b5bf3a8a077d02f0)

10 / 68    (PUP)
bandicamcrack.exe  (a6cb54b2f802cc10700e8a4379b9e40a)

21 / 68    (PUP)
dzerzhinskiy_f._ya__vasilev_b._d__malahov_v._v._-_zoologiya_pozvonochnyh__vysshee_professionalnoe_ob  (70164e07a7aa84256270df8958e6e93d)

Downloads URLs for files signed by SOFT-MEDIA LTD.

1 / 68      (Malware)
http://gmload.net/install.php?rid=1302&name=Y3ViYXNlbGVtZW50cy5pc28uc29mdHRvcnJlbnQucnUudG9ycmVudA==&url=aHR0cDovL2Z0cDMuc29mdHRvcnJlbnQucnUvdG9ycmVudC9jdWJhc2VsZW1lbnRzLmlzby5zb2Z0dG9ycmVudC5ydS50b3JyZW50  (cubaselements.iso.softtorrent.ru.torrent.exe)

6 / 68      (PUP)
http://gmload3.net/install.php?rid=697&url=L2dvP2h0dHA6Ly9yZ2hvc3QucnUvNDUyNTgxNjA=&name=U2VydmlzIHBhayA0IG5hIHZpbmRvdnMgNw==  (servis pak 4 na vindovs 7.exe)

1 / 68      (Malware)
http://gmload.net/install.php?rid=1330&url=aHR0cDovL3JvenVtYWthLmNvbS93cC1jb250ZW50L3VwbG9hZHMvMjAxNC8xMC9WaW5haG9kaS1seXVkc3R2YS5kb2M=&name=VmluYWhvZGktbHl1ZHN0dmEuZG9j  (vinahodi-lyudstva.doc.exe)

10 / 68    (PUP)
http://www.bandicams.ru/download.php?id=4  (bandicamcrack.exe)

21 / 68    (PUP)
http://gmload.net/install.php?rid=592&url=aHR0cDovL3MyLmZpbGUtc3BhY2Uub3JnL2Rvd24va05TRU8ySUVaei8xNDE0MDk2MzE1L2lMUllPcWJFdWZZMW9DYjVOQXVqc3cvMjkwNS8wLzI5MDUvRHplcnpoaW5za2l5X0YuX1lhX19WYXNpbGV2X0IuX0RfX01hbGFob3ZfVi5fVi5fLV9ab29sb2dpeWFfcG96dm9ub2NobnloX19WeXNzaGVlX3Byb2Zlc3Npb25hbG5vZV9vYnJhem92YW5pZS5fQmFrYWxhdnJpYXRfXy1fMjAxMy5yYXI=&name=RHplcnpoaW5za2l5X0YuX1lhX19WYXNpbGV2X0IuX0RfX01hbGFob3ZfVi5fVi5fLV9ab29sb2dpeWFfcG96dm9ub2NobnloX19WeXNzaGVlX3Byb2Zlc3Npb25hbG5vZV9vYnJhem92YW5pZS5fQmFrYWxhdnJpYXRfXy1fMjAxMw==  (dzerzhinskiy_f._ya__vasilev_b._d__malahov_v._v._-_zoologiya_pozvonochnyh__vysshee_professionalnoe_ob)

The following websites host and distribute files published by SOFT-MEDIA LTD.

gmload3.net

www.bandicams.ru

gmload.net

The following publishers (by Authenticode signature organization name) are related.

OOO Soft-Media

iDatix Corporation

* Note, the details and description above are based on the code signing digital signature issued to SOFT-MEDIA LTD by COMODO CA Limited on October 08, 2014 with the serial number '291991731bfa3e6452779010b97c2a41'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.