Onekit Internet S,L

Publisher Information

Onekit Internet S,L is a software developer located in Cerdanyola Del Valles, Barcelona in Spain*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.
Remove Onekit Internet S,L Malware - Powered by Reason Core Security
Authority:
GlobalSign nv-sa

Valid from:
4/15/2013 7:25:37 PM

Valid to:
5/18/2016 1:11:52 PM

Subject:
E=info@onekit.com, CN="Onekit Internet S,L", O="Onekit Internet S,L", L=Cerdanyola Del Valles, S=Barcelona, C=ES

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11216c6b688869b7980323d94c3965bbb528

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OnekitInternet.OnekitInternetSL.Bundler (M), PUP.OnekitInternet.OnekitInternetSL (M), PUP.OnekitInternet.Bundler
100.00%

Dr.Web
Trojan.Vittalia.140, Trojan.Vittalia.8125
4.00%

VIPRE Antivirus
Threat.4786531, Threat.4791953
4.00%

Sophos
PUA 'Lollipop' (of type Adware)
4.00%

ESET NOD32
multiple threats
2.00%

Kaspersky
not-a-virus:RiskTool.Win32.Agent
2.00%

1 / 68      (Adware)
installer_flv_media_player__french.exe  (88cab041780b10352308240947a38ab0)

1 / 68      (Adware)
installer_java_dutch.exe  (17616cae8eab837fd87084bf671386c1)

1 / 68      (Adware)
installer_emule_plus_english.exe  (60c23109c0b66e2df6cc91dd17ee956d)

1 / 68      (Adware)
installer_winrar_portuguese.exe  (7bb1293655bed48e42a9bbd583b8a75a)

1 / 68      (Adware)
installer_adobe_flash_player_portuguese.exe  (d5e907e9a3209cc3a9f57aee16533cfd)

6 / 68      (Adware)
aresplus_2.7.0_setup.exe  (bea0677bea20378cd464ba6f2544c642)

1 / 68      (Adware)
aresplus_2.7.0_setup.exe  (42340c17d58128665c8b8036a2942121)

1 / 68      (Adware)
installer_adobe_flash_player_portuguese.exe  (762c6fb2ec53954938c5d28f700e6dac)

1 / 68      (Adware)

1 / 68      (Adware)
aresplus_ml.exe  (ff0e9f57b0ac96c77e82ea43f8fbede8)

4 / 68      (Adware)
137252b03b0978e485e680e677141f51c00af500  (83c2d36c7be14c3ca27499385749077c)

1 / 68      (Adware)
aresplus_2.7.0_setup.exe  (3e7ca61f0ef07a85160621a9984eec20)

1 / 68      (Adware)
installer_adobe_flash_player_portuguese.exe  (fe74f6d4b91c3a539d62f53c36f63fca)

1 / 68      (Adware)
installer_mediaplayer_portuguese.exe  (9aad6499cdd9ab0b249943fc205f6e14)

1 / 68      (Adware)
installer_flv_media_player__portuguese.exe  (5a295935dde6d716866d0f771f6a1259)

1 / 68      (Adware)
aresplus_2.7.0_setup.exe  (ad1a6110f71ab059030ca041f71c6561)

1 / 68      (Adware)
installer_mediaplayer_japanese.exe  (11ecbe605aab22e9252ecbb76e28aacd)

1 / 68      (Adware)
installer_adobe_flash_player_portuguese.exe  (1422ce307cf37abf723850dc91b18f0d)

1 / 68      (Adware)

1 / 68      (Adware)
installer_ares.exe  (532f6680aa6e434ec2eada167bfbf60b)

1 / 68      (Adware)
ares.exe  (5b4ed242afc45348acdc5b08b7f62c14)

1 / 68      (Adware)
installer_flv_media_player__french.exe  (e8ea0fb62cfc15ae117252e92e5750bd)

1 / 68      (Adware)
installer_adobe_flash_player_french.exe  (5ece37e8ce922070f4d793f066c2c52a)

1 / 68      (Adware)
installer_youtube_downloader.exe  (2d089b913237dc6803940512a054c18b)

1 / 68      (Adware)
installer_java_german.exe  (2ceaea357fff7f76523435cf7c27a352)

1 / 68      (Adware)
installer_java_german.exe  (5c39d05b5fff3201a5ca454f09371996)

1 / 68      (Adware)
229789-674248-ares-plus.exe  (fc0c0b8838ae4967b8dd1c0dd7ac23e2)

1 / 68      (Adware)
eazel_3.0_setup.exe  (22c02cdced44382fa32e592eb201dea2)

1 / 68      (Adware)
installer_flv_media_player__portuguese.exe  (e488bd45d6a11ff535ee0c53823de164)

1 / 68      (Adware)
installer_ares.exe  (3479e636b97bcb51d12f727cf2566484)

 
Latest 30 of 344 files

Downloads URLs for files signed by Onekit Internet S,L.

1 / 68      (Adware)
http://www.wallsave.com/.../2949401  (installer_lord_ganesha_ganesh_pictures_images_and_collection_75578_wallpaper.exe)

The following certificate is also signed by Onekit Internet S,L.

1121082E90950E0960FF7F21E2D20A9F1AF6  (Apr 17, 2012 to Apr 18, 2013)

The following publishers (by Authenticode signature organization name) are related.

Remove Onekit Internet S,L Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Onekit Internet S,L by GlobalSign nv-sa on April 15, 2013 with the serial number '11216c6b688869b7980323d94c3965bbb528'.