OOO Port.Ru

Publisher Information

OOO Port.Ru is a software developer located in Moscow, Russia*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
11/12/2008 3:00:00 AM

Valid to:
11/13/2010 2:59:59 AM

Subject:
CN=OOO Port.Ru, OU=Secure Application Development, O=OOO Port.Ru, L=Moscow, S=Moscow, C=RU

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
5d5ba1f66ad0d98e254857ba2eb2e238

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Jiangmin
TrojanDropper.Agent.aqqc, Rootkit.Small.el
50.00%

Bkav FE
HW32.Stranact
25.00%

The Hacker
Trojan/Dropper.Agent.bybl
25.00%

F-Prot
W32/MalwareF.GOGD
25.00%

Norman
Suspicious_Gen2.CCING
25.00%

Commtouch SDK
W32/Risk.JOGZ-3970
25.00%

avast!
Win32:Adware-BOV [Adw]
25.00%

0 / 68
magentsetup.exe (by Mail.Ru)  (d23c8f03dd933a69f78cfb1e086b74ab)

0 / 68
magent.exe (by Mail.Ru)  (e853ee4940348d91a70bf9afd01f4b84)

0 / 68
magent.exe (by Mail.Ru)  (670b3174d1077a5bd83a2597d894f259)

0 / 68
magentsetup.exe (by Mail.Ru)  (24bcf58c51bc9a9289d71308206cefce)

0 / 68
magent.exe (by Mail.Ru)  (c6f2343e4ed04afee0ff5f140de7bda6)

0 / 68
opera-settings-wizard.exe (opera.mail.ru Module)  (1ae2f8880c2dbb61d97e2ad07bd000a1)

0 / 68
magentsetup.exe (by Mail.Ru)  (f60075fa4a3fbc8c4bbb20dca145b5b9)

0 / 68

0 / 68
magent.exe (by Mail.Ru)  (682267785a6ab82d94e75812145c5b03)

0 / 68
newmrasearch.dll  (13205d3a20a171137efbbdc154de5f13)

0 / 68
magentsetup.exe (by Mail.Ru)  (20c1fb0d4120205d65fffc13ed3e4b2d)

0 / 68
MRATag.dll (MRATag by Mail.Ru)  (a31ff06ab3db6bf06b447beaa96958a9)

0 / 68
magentsetup.exe (by Mail.Ru)  (2392548d24ee820c30ab8ecece227cd8)

0 / 68
magent.exe (by Mail.Ru)  (787ab52e0c2f553da6f722e042a50303)

0 / 68
mramenu.dll  (62fd6ac15747edd1c571e2c19b4681f1)

0 / 68
magent.exe (by Mail.Ru)  (b101db3d782b3d423121c8edb852b5d5)

0 / 68
magent.exe (by Mail.Ru)  (c8584da8cb654f0b2cd6f6391324bdf1)

0 / 68
magentsetup.exe (by Mail.Ru)  (883775827b83f6e38b404ee59d89af66)

0 / 68
magent5.4.exe (by Mail.Ru)  (2b9b13fcca8a37c44c9f0bda12ff7af2)

0 / 68
mramenu.dll  (19148bb1f99a636697f9632ba8c4fef5)

0 / 68
MailRuSputnik.DLL (MailRuSputnik Module by @Mail.Ru)  (42aeabc9ce82a55b4521e64a6cf2c099)

0 / 68
MailRuSputnik.DLL (MailRuSputnik Module by @Mail.Ru)  (3c3d0688a5d85ede675fc4b90ffbb9b3)

0 / 68
unins000.exe  (603886335c71abd190e3a16576c26fa1)

1 / 68

0 / 68

0 / 68
MailRuSputnik.DLL (MailRuSputnik Module by @Mail.Ru)  (caad9ab6c9ba60b281cf44c4ace68c6b)

0 / 68
MRATag.dll (MRATag by Mail.Ru)  (b53632be05ae3b17b253f0a33f630ac6)

1 / 68      (inconclusive)
opera_sws.exe (opera)  (7ff9cdbdcff5ab32970508acf920f555)

0 / 68
SputnikHelper.exe (Mail.Ru Sputnik Helper by Mail.Ru)  (ab7578af7b03167885e2fc275dc4570b)

0 / 68
mailrusputnik.exe (MailRuSputnik Installer Module)  (8147fece63383e1f0a3a3c5e0c097c11)

 
Latest 30 of 55 files

Downloads URLs for files signed by OOO Port.Ru.

5 / 68      (inconclusive)

0 / 68
http://exe.agent.mail.ru/.../magent5.5.exe  (ddb24655a8a0c8493e99434ac4215884)

The following websites host and distribute files published by OOO Port.Ru.

The certificates below are also signed by OOO Port.Ru.

34DE0BE3E12121BBBB32726ABB870631  (Oct 22, 2007 to Nov 21, 2008)

265C6FD11C0F3924531D50653DD4C2DB  (Nov 03, 2006 to Nov 22, 2007)

21F8DF  (Oct 20, 2005 to Nov 22, 2006)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to OOO Port.Ru by Thawte Consulting (Pty) Ltd. on November 12, 2008 with the serial number '5d5ba1f66ad0d98e254857ba2eb2e238'.