LLC Mail.Ru

Publisher Information

LLC Mail.Ru is a software developer located in Moscow, Moscow Region in Russia*. Thre are 10 additional code signing certificates issued to this publisher.
Remove LLC Mail.Ru Malware - Powered by Reason Core Security
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/11/2010 3:00:00 AM

Valid to:
1/12/2012 2:59:59 AM

Subject:
CN=LLC Mail.Ru, OU=Secure Application Development, O=LLC Mail.Ru, L=Moscow, S=Moscow region, C=RU

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
18187bcc2daf1edd44a2f454900ec5dc

Scanner detections:
Malware distribution  (94% detected)

Scan engine
Details
Detections

Reason Heuristics
Win32.Generic, Win64.Generic
100.00%

Rising Antivirus
PE:Trojan.RuMail!1.6574
23.40%

IKARUS anti.virus
AdWare.Win32.HotDownloads
17.02%

Bkav FE
W32.Clod400.Trojan, W32.HfsAdware
10.64%

McAfee
Artemis!4AF266EE83E8
8.51%

McAfee Web Gateway
Artemis!4AF266EE83E8
8.51%

Fortinet FortiGate
Riskware/HotDownloads.AB
8.51%

Trend Micro House Call
TROJ_GEN.F47V1103
8.51%

Baidu Antivirus
Trojan.Win32.RuMail
8.51%

Avira AntiVirus
APPL/LoadMoney.G.4
8.51%

1 / 68      (Malware)

3 / 68      (PUP)
SputnikHelper.exe (Mail.Ru Sputnik Helper by Mail.Ru)  (5d42e57925f45ce97e36139f2fd30190)

12 / 68    (PUP)
SputnikFlashPlayer.exe (SputnikFlashPlayer Module)  (6fc34540acb986b8bccbaab1851a9fc5)

4 / 68      (PUP)
magentsetup.exe (by Mail.Ru)  (51159a61bd42b0faf8eb0065a9fce0fc)

1 / 68      (Malware)

1 / 68      (Malware)
MRATag.dll (MRATag by Mail.Ru)  (4e7652d408b9fb5e63b977cefce35f2c)

1 / 68      (Malware)

1 / 68      (Malware)
mramenu.dll  (c3fa798bef3c3c02acfaa734043ed22b)

1 / 68      (Malware)
magentsetup_rfrdrp.exe (by Mail.Ru)  (76e3f6aa5fc6f30f8dd7762f4b58401a)

1 / 68      (Malware)
pwloaderm.exe (by LLC Mail.Ru)  (6ad3754caad5fc8a09bf2dcb09ecad8c)

1 / 68      (Malware)
connectifyinstaller.exe (SoftContainer Module)  (3d3fea0e48c536edbf454aeb75601d5e)

1 / 68      (Malware)
unins000.exe  (042f3056ad6556eef3a2f1abcc1971c5)

1 / 68      (Malware)
_iu14d2n.tmp  (29c4f8b2cc020f66a5053c55e079de6b)

1 / 68      (Malware)
wdm_a406.exe (SoftContainer Module)  (8116e3bf08fb80fd026ae70f42a510dd)

1 / 68      (Malware)
sputnikinstaller.exe (MailRuSputnik Installer Module)  (ded84b843fa5876f507be9e7f3036f15)

3 / 68      (PUP)
SputnikHelper.exe (Mail.Ru Sputnik Helper by Mail.Ru)  (6dc88652f1d53f4d040fd48b9bb97053)

12 / 68    (PUP)
SputnikFlashPlayer.exe (SputnikFlashPlayer Module)  (b58325650010e474c1981f711020bcab)

1 / 68      (Malware)
magent.exe (by Mail.Ru)  (546e515e311e46acbee1e447089340cf)

3 / 68      (PUP)
MailRuSputnik.DLL (MailRuSputnik Module by @Mail.Ru)  (3dfdc9ab5b342a944c2ae5e88275fe5c)

1 / 68      (Malware)
gamecenter_2_2817771a.exe (by LLC Mail.Ru)  (0fd887355898a2cae247d4283cdbca85)

3 / 68      (PUP)
SputnikHelper.exe (Mail.Ru Sputnik Helper by Mail.Ru)  (da3417eb1156fc0eb21b1a9d1e2ed59c)

12 / 68    (PUP)
SputnikFlashPlayer.exe (SputnikFlashPlayer Module)  (a7880a2938a25f3f3b11e80605785196)

3 / 68      (PUP)
MailRuSputnik.DLL (MailRuSputnik Module by @Mail.Ru)  (e5d6d87fdd239fa0c53fd85bd6297b3c)

1 / 68      (Malware)
unins000.exe  (c46be04eb23e178bb50e35a2d95dea07)

1 / 68      (Malware)
dwarsuperstrikefr.dll (Super-blows by LLC Mail.Ru)  (169e6023d28ea7e96d81f12838b7d7ad)

1 / 68      (Malware)
dwarscreenshotmakerfr.dll (Screenshots by LLC Mail.Ru)  (b9412cb20480c23871514f97e14a872b)

1 / 68      (Malware)
dwarnotepadfr.dll (Notepad by LLC Mail.Ru)  (c4fed188315ae7e793b30855a5e350c2)

1 / 68      (Malware)
dwarloginfr.dll (Login by LLC Mail.Ru)  (077cd035be830664316ccf3fe23d74b2)

1 / 68      (Malware)
dwarfavoritesfr.dll (Favorites by LLC Mail.Ru)  (db788aa5900f913023aaa36588cf88c4)

1 / 68      (Malware)

 
Latest 30 of 697 files

Downloads URLs for files signed by LLC Mail.Ru.

1 / 68      (Malware)

The certificates below are also signed by LLC Mail.Ru.

A1AC1F0525FC5E904E0C263610190BDA  (Oct 14, 2015 to Jan 01, 2040)

2019877A933D8E2E71548EA4AB4827F1  (Aug 06, 2015 to Oct 05, 2017)

10F4D809B7AA340870993C0042347814  (Aug 06, 2015 to Oct 05, 2017)

07D04895757AB4AD4797D7585C09F8EE  (Aug 13, 2014 to Aug 13, 2016)

3C484F9655CF5CDDA51678E773A55BF3  (Aug 19, 2014 to Aug 13, 2016)

4064B704BBD70C3D1B5A2DDA4F5ECB66  (Jan 28, 2015 to Apr 29, 2016)

391BE08AD60C2810187D12419BF289D9  (Jan 14, 2014 to Mar 15, 2016)

169A089D186F350CBB6B5EC62D8A59AB  (Aug 20, 2014 to Aug 21, 2015)

7BB5DEC99F34595AADEB59E1E5A0BD73  (Mar 19, 2014 to Mar 20, 2015)

1C09DBBC732D4B58F7A88EBACF323417  (Dec 08, 2011 to Feb 06, 2014)

10 of 10 code signing certificates issued

Remove LLC Mail.Ru Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to LLC Mail.Ru by Thawte Consulting (Pty) Ltd. on January 11, 2010 with the serial number '18187bcc2daf1edd44a2f454900ec5dc'.