home

CWI SOFTWARE LTDA

Publisher Information

CWI SOFTWARE LTDA is a software developer located in SAO PAULO, Brazil*.
Authority:
COMODO CA Limited

Valid from:
9/11/2013 9:00:00 PM

Valid to:
9/12/2014 8:59:59 PM

Subject:
CN=CWI SOFTWARE LTDA, O=CWI SOFTWARE LTDA, STREET=RUA PEDROSO ALVARENGA 58, STREET=NUMERO 58 ANDAR 5, STREET=ITAIM BIBI, L=SAO PAULO, S=SAO PAULO, PostalCode=04531-000, C=BR

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00f385e765acfb95605c9b35ca4c32f80e

Scanner detections:
Malware distribution  (78% detected)

Scan engine
Details
Detections

Emsisoft Anti-Malware
Trojan.Generic.10161165, Generic.Banker.Delf.B9074756, Gen:Variant.Strictor.48421, Trojan.Generic.10208318, Generic.Banker.Delf.CD0438D1
77.27%

avast!
Win32:Banker-KLO [Trj], Win32:Banker-KMC [Trj], Win32:Bancos-CGY [Trj], Win32:Banker-KMO [Trj], Win32:Delf-TNX [Trj], Win32:Delf-TNS [Trj]
75.00%

MicroWorld eScan
Trojan.Generic.10161165, Generic.Banker.Delf.B9074756, Trojan.Generic.10140902, Trojan.Generic.10208318, Generic.Banker.Delf.CD0438D1, Generic.Banker.Delf.A6F70E6D, Gen:Variant.Strictor.48421, Generic.Banker.Delf.E69FA76D, Trojan.Generic.10133535, Generic.Banker.Delf.B6FF3C83, Gen:Variant.Strictor.47099, Generic.Banker.Delf.CAC4D547, Generic.Banker.Delf.5AB8BCDE, Generic.Banker.Delf.91BB2FD0, Gen:Variant.Symmi.57005, Generic.Banker.Delf.C214DBE9, Generic.Banker.Delf.BF775EEA, Generic.Banker.Delf.52F47E3A, Trojan.GenericKD.1454721, Trojan.Generic.10055181, Trojan.Generic.10143460, Generic.Banker.Delf.2A69551D, Generic.Banker.Delf.768DCC9D, Generic.Banker.Delf.066B39B7, Trojan.Generic.10235303, Generic.Banker.Delf.85BBB567
72.73%

Bitdefender
Trojan.Generic.10161165, Generic.Banker.Delf.B9074756, Trojan.Generic.10140902, Trojan.Generic.10208318, Generic.Banker.Delf.CD0438D1
72.73%

G Data
Trojan.Generic.10161165, Generic.Banker.Delf.B9074756, Trojan.Generic.10140902, Trojan.Generic.10208318, Generic.Banker.Delf.CD0438D1
72.73%

F-Secure
Trojan.Generic.10161165, Generic.Banker.Delf.B9074756, Trojan.Generic.10208318, Generic.Banker.Delf.CD0438D1, Generic.Banker.Delf.A6F70E6D
68.18%

IKARUS anti.virus
Trojan-PWS.Banker6, Trojan-Downloader, Win32.SuspectCrc, Trojan-Banker.Win32.Banbra
63.64%

McAfee
RDN/PWS-Banker!cw, GenericR-DGU!61B727812BE3, Trojan.GenericR-CEX!1ED2294FC173, Artemis!74DCA37076CF, Artemis!D3FDE995B16F
59.09%

Lavasoft Ad-Aware
Trojan.Generic.10161165, Generic.Banker.Delf.B9074756, Trojan.Generic.10208318, Generic.Banker.Delf.A6F70E6D, Gen:Variant.Strictor.48421
54.55%

nProtect
Trojan.Generic.10161165, Generic.Banker.Delf.B9074756, Trojan.Generic.10140902, Trojan.Generic.10208318, Generic.Banker.Delf.CD0438D1
52.27%

0 / 68
seagateportable.exe  (956b5c2b97ddd0576293d938ea602139)

16 / 68    (Malware)
doc.exe  (61724a3e0bdae97b1c6ddd2b0f2fbdec)

21 / 68    (Malware)
seagateportable.exe  (1947d939f8d91d24b37707cdb5a147d5)

17 / 68    (Malware)
java.exe  (7551075eb4ee77401b0b1e03a89f3000)

9 / 68      (Malware)
psecurity.exe  (f786b162715dd622110758257ca93e01)

8 / 68      (Malware)
seagateportable.exe  (164858549e19a6887afef3b5e6e5db25)

21 / 68    (Malware)
psecurity.exe  (9a9af3f08193b22a42dd9aac6981f01e)

0 / 68
trz1adf.tmp  (3aa7bd08b31e0e84ff42fe64a2e23a3c)

12 / 68    (Malware)
doc.exe  (fce3c40b5b29fa5a07ce9a005c252f4e)

21 / 68    (Malware)
adobe-flash-player.exe (Adobe Reader)  (4ddc48b272b20de8d7d5baf060e46f30)

2 / 68      (inconclusive)
seagateportable.exe  (5615c3b5951c1b8a19f46d069bd01cef)

23 / 68    (Malware)
adobe-flash-player.exe (Adobe Reader)  (897cd84e6ae87461113c6c2119c7187b)

22 / 68    (Malware)
adobe-flash-player.exe (Adobe Reader)  (75009fb69be5c3b8e713177e4d9b5c36)

2 / 68      (inconclusive)
seagateportable.exe  (ed9a43a668bbd6adf49832974ed350cd)

8 / 68      (Malware)
seagateportable.exe  (0e306d2e2035509416f08717cf5654ce)

12 / 68    (Malware)
seagateportable.exe  (27551e5737a24b42ef6b7334565351b0)

17 / 68    (Malware)
adobe-flash-player.exe (Adobe Reader)  (28128f78c64564849e5c2c06cf304278)

2 / 68      (inconclusive)
adobe-flash-player.exe (Adobe Reader)  (540f3042666a34ea8bc16194b3256116)

11 / 68    (Malware)
seagateportable.exe  (ebb43a0ee281df0ed44ea146f2811a66)

11 / 68    (Malware)
doc.exe  (4765cf1d8af1363fdcd5080301fed5bf)

2 / 68      (inconclusive)
seagateportable.exe  (fc563cea5abb27a8a6bc119e8374d74b)

2 / 68      (inconclusive)
seagateportable.exe  (1ceb1f511e484ceb8be50aaf4ed345c9)

4 / 68      (Malware)
seagateportable.exe  (53db70ff2868b2d5c8de63684b56231a)

24 / 68    (Malware)
doc.exe  (e76af11026c42a0fd403cc863f84a5ed)

2 / 68      (inconclusive)
seagateportable.exe  (55f03914e79a6e4f5e059f5d3e9be005)

3 / 68      (Malware)
psecurity.exe  (a02c50b4f89e3448ea4bb6ad5d70a7c3)

3 / 68      (Malware)
psecurity.exe  (9bbb9759298fcc584e483e5c547cdbb9)

1 / 68
doc.exe  (a8323fd4fa89b31403e387b72a947de0)

17 / 68    (Malware)
psecurity.exe  (904d19bf89bde3eca0b75edfba5a5c93)

22 / 68    (Malware)
seagateportable.exe  (5a06570464949b5b90f0baa43c9d1bc2)

 
Latest 30 of 46 files

* Note, the details and description above are based on the code signing digital signature issued to CWI SOFTWARE LTDA by COMODO CA Limited on September 11, 2013 with the serial number '00f385e765acfb95605c9b35ca4c32f80e'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.