New IT Limited

Publisher Information

New IT Limited is a software publisher located in Nicosia, CY*. The company is a primary distributor of unwanted software. Thre are 9 additional code signing certificates issued to this publisher.
Remove New IT Limited Malware - Powered by Reason Core Security
Authority:
GoDaddy.com, Inc.

Valid from:
10/28/2010 10:33:24 AM

Valid to:
10/27/2011 9:30:06 AM

Subject:
CN=New IT Limited, O=New IT Limited, L=Nicosia, S=Nicosia, C=CY

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
27dde55d2f337f

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Startup.NewITLimited.L, PUP.Optional.Startup.NewITLimited.H, PUP.NewITLimited.H, PUP.Startup.NewITLimited.E, PUP.Installer.NewITLimited.T, PUP.NewITLimited.E, PUP.NewITLimited.L, PUP.New IT Limited.NewIT.Bundler (M), PUP.New IT Limited.NewIT (M)
100.00%

Malwarebytes
PUP.Optional.4Shared, PUP.Optional.4Squared
66.67%

VIPRE Antivirus
Conduit, Threat.4786236
25.93%

Comodo Security
Application.Win32.NewIT.B
22.22%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
18.52%

ESET NOD32
Win32/Toolbar.Conduit (variant), Win32/Toolbar.Zugo
14.81%

Trend Micro House Call
TROJ_GEN.F47V0815, ADW_KRADARE, WORM_BAGLE.BMH, Suspici.3DDF1A39
14.81%

Dr.Web
Adware.Searcher.73, Threat.Undefined, Adware.Conduit.35
11.11%

Kingsoft AntiVirus
Win32.Troj.Searchbar.re.(kcloud), Win32.Troj.Generic.(kcloud)
11.11%

Panda Antivirus
Adware/Conduit, PUP/Conduit.A
11.11%

3 / 68      (Adware)
desktop.exe (4shared Desktop by New IT Solutions)  (7632c7da04b9f0145ab2530fc90ebe6f)

3 / 68      (Adware)
checkupdate.exe (4shared checkUpdate by New IT Solutions)  (699828ad23feabb65015cbfcfef47807)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
a0021551.exe (4shared Desktop Setup by New IT Solutions)  (46dd4d66c5d09dbb2d387441708c5c24)

2 / 68      (Adware)
4sync_1.0.2.exe (4Sync Setup by New IT Solutions)  (67592fe02b1bba467f4df0ce3f28c251)

3 / 68      (Adware)
desktop.exe (4shared Desktop by New IT Solutions)  (a47bebc62bd8cbd9cc640eef0dc887eb)

3 / 68      (Adware)
checkupdate.exe (4shared checkUpdate by New IT Solutions)  (141c5701a96330b4eed2a77e2596d6c8)

3 / 68      (Adware)
desktop.exe (4shared Desktop by New IT Solutions)  (48351852f5651a7b5132ff358801b255)

3 / 68      (Adware)
checkupdate.exe (4shared checkUpdate by New IT Solutions)  (62f6e3715aa348676853688057de185c)

12 / 68    (Adware)

12 / 68    (Adware)

3 / 68      (Adware)
gmeuuttq.exe (4shared Desktop Setup by New IT Solutions)  (cd688e03deb4c2ec5f30699517cc9964)

1 / 68      (Adware)
desktop.exe (4shared Desktop by New IT Solutions)  (a697ecbcf170ddab4e0512c0a7b26a33)

2 / 68      (Adware)
checkupdate.exe (4shared checkUpdate by New IT Solutions)  (738bc0eefc9f6ca0775a8b9f2c310bfa)

3 / 68      (Adware)

6 / 68      (Adware)

8 / 68      (Adware)

1 / 68      (Adware)
Sync.exe (4shared Sync by New IT Solutions)  (cddc5b42ef2388c22b9912a6bed7339f)

2 / 68      (Adware)

3 / 68      (Adware)

4 / 68      (Adware)

5 / 68      (Adware)

1 / 68      (Adware)
Sync.exe (4shared Sync by New IT Solutions)  (c26bba735f138ee91929e73e02758a43)

2 / 68      (Adware)
desktop.exe  (b3b66f96eb52b5f2eb2883d651e68d32)

2 / 68      (Adware)
desktop.exe (4shared Desktop by New IT Solutions)  (34da77d1c235ed23ad053d8c722b0110)

2 / 68      (Adware)
checkupdate.exe (4shared checkUpdate by New IT Solutions)  (bf989692b9847eaf95e2a459c2ce3731)

Downloads URLs for files signed by New IT Limited.

3 / 68      (Adware)

2 / 68      (Adware)
http://dc306.4shared.com/download/.../4Sync_102.exe  (67592fe02b1bba467f4df0ce3f28c251)

6 / 68      (Adware)

3 / 68      (Adware)

4 / 68      (Adware)

2 / 68      (Adware)

5 / 68      (Adware)

4 / 68      (Adware)

The following websites host and distribute files published by New IT Limited.

The certificates below are also signed by New IT Limited.

041989DB48EFF2  (Dec 11, 2014 to Dec 30, 2016)

2B90BA60B54B37  (Apr 10, 2014 to Dec 30, 2016)

049768F7F19C91  (May 14, 2014 to Dec 30, 2016)

04225A281DFF69  (Dec 30, 2013 to Dec 30, 2016)

045E846BB931D8  (Nov 10, 2014 to Dec 30, 2016)

0E65FF1CA366ECF94666819342163027  (Feb 03, 2015 to Feb 04, 2016)

2775184265BF42  (Nov 04, 2013 to Nov 16, 2013)

2B2A165690BBAA  (Nov 16, 2012 to Nov 16, 2013)

0434DD1A1F0904  (Nov 04, 2011 to Nov 03, 2012)

The following publishers (by Authenticode signature organization name) are related.

Remove New IT Limited Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to New IT Limited by GoDaddy.com, Inc. on October 28, 2010 with the serial number '27dde55d2f337f'.