home

OOO NPP GARANT-SERVIS-UNIVERSITET

Publisher Information

OOO NPP GARANT-SERVIS-UNIVERSITET is a software developer located in Moscow, Moscow City in Russia*. The publisher primarily developes software that can be classified as adware. There is one additional code signing certificate issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
8/22/2013 3:00:00 AM

Valid to:
8/22/2016 2:59:59 AM

Subject:
CN=OOO NPP GARANT-SERVIS-UNIVERSITET, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=OOO NPP GARANT-SERVIS-UNIVERSITET, L=Moscow, S=Moscow City, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
26aa653ac0cd28f27abdabd5a3a9da30

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OOONPPGA (M), PUP.OOONPPGA.Installer (M), PUP (M)
100.00%

1 / 68      (PUP)
F1Shell.run  (44506f474fd0c29fea4c53da63501c88)

1 / 68      (PUP)
F1Admin.run  (0f5d37f7ac6711d505b4435c7391759a)

1 / 68      (PUP)
F1Shell.dll  (90b226d7c0702c9ceca8fcc97f3d5dd7)

1 / 68      (PUP)
garant.exe  (790d0822b9395390848245d16691f096)

1 / 68      (PUP)
24114.msi  (5a3b68fb959494559f28ae7a6d11d1c5)

1 / 68      (PUP)
datasetup.exe  (fb703302a2a57649853b09f6a86b61f5)

1 / 68      (PUP)
F1DataSetup.run  (510a3df613621693d70e8214628d2a2b)

1 / 68      (PUP)
f1consultingchecker.run  (7649a0b77639cf0d021b0c0bdac10422)

1 / 68      (PUP)
F1UsersSave.exe  (03ce48531e5ece0575c28c82baf4e53e)

1 / 68      (PUP)
mshlp32.dll (GARANT by SIE "GARANT-SERVICE-UNIVERSITY")  (da16496caaf23008e85d64c2b3b89e4e)

1 / 68      (PUP)
f1consultingchecker.run  (f6c9c1245d91c5c53d7a97f95cb8f377)

1 / 68      (PUP)
F1CacheHelper.run  (571570af3220807fab62d3cb5fb299e4)

1 / 68      (PUP)
f1consultingchecker.run  (7e603a7ac917b331bc947ab0f29282b8)

1 / 68      (PUP)
gu7tr.dll  (983d419400090d4a20d32eff58c0462a)

1 / 68      (PUP)
gu711.dll  (f86581dfe0cfe161f4a40ae860cd083d)

1 / 68      (PUP)
gsock32.dll  (8b9803fb7d3cd5694339cfbe1c1299cc)

1 / 68      (PUP)
gl.dll  (bef84b4df6f21810fec407cf482c7594)

1 / 68      (PUP)
gbladapter.dll  (151c277618b63e47211c4bba9dc53482)

1 / 68      (PUP)
CSAdapter.dll  (40a384326b4b73f6370a2bd8a2deba80)

1 / 68      (PUP)
F1Sleep.exe  (f03c2a63405a646b5b10e7f180e98bf4)

1 / 68      (PUP)
F1SendMail.exe  (3f392aefa328cdb9e07c74a1ba013468)

1 / 68      (PUP)
F1EasyUpdate.exe  (abe494c23add1dde0a868b073523169a)

1 / 68      (PUP)
F1UsersSave.exe  (c639fe7e132160f41d65637a650e00fd)

1 / 68      (PUP)
gclean.exe  (13ec24b6bd17511842b8ffe3b4fb7829)

1 / 68      (PUP)
F1Shell.dll  (51e34812c3923002282428b40c14c7e5)

1 / 68      (PUP)
gsock32.dll  (29690b2c844f617dd03c69f29b3b2e93)

1 / 68      (PUP)
gbladapter.dll  (19b061641149f67d4d30610872b26fdb)

1 / 68      (PUP)
f1consultingchecker.run  (57e2badaa189c410f3060c9f96a75c15)

1 / 68      (PUP)
F1SplashScreen.run  (bafb8759dd2f9eac5b92b7b911139b11)

1 / 68      (PUP)
F1Prime.run  (32f7cbfffcc0efec5be1b3d65116f025)

 
Latest 30 of 345 files

The following certificate is also signed by OOO NPP GARANT-SERVIS-UNIVERSITET.

27425545C3CE4E4B0F44524816A30C13  (Apr 27, 2012 to Apr 28, 2014)

* Note, the details and description above are based on the code signing digital signature issued to OOO NPP GARANT-SERVIS-UNIVERSITET by VeriSign, Inc. on August 22, 2013 with the serial number '26aa653ac0cd28f27abdabd5a3a9da30'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.