home

QUANTO SOLUCOES E SISTEMA LTDA

Publisher Information

QUANTO SOLUCOES E SISTEMA LTDA is a software publisher located in PRESIDENTE PRUDENTE, Sao Paulo in Brazil*.
Authority:
Thawte, Inc.

Valid from:
4/2/2014 9:00:00 PM

Valid to:
4/3/2015 8:59:59 PM

Subject:
CN=QUANTO SOLUCOES E SISTEMA LTDA, O=QUANTO SOLUCOES E SISTEMA LTDA, L=PRESIDENTE PRUDENTE, S=SAO PAULO, C=BR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
00b87ede3281ffb1ee77df86b54a8cb0

Scanner detections:
Malware distribution  (58% detected)

Scan engine
Details
Detections

avast!
Win32:Banker-KYB [Trj], Win32:FakeFlash-B [Trj], Win32:Banker-KXI [Trj], Win32:Bancos-CHN [Trj], Win32:Delf-TSP [Trj], Win32:Alureon-BCX [Trj]
86.36%

McAfee
Artemis!A5E36205E7BC, Artemis!E4EEB346A203, Artemis!6BF0BAB878C0, GenericR-AQO!05AB6D5DFB72, Artemis!B192BB93F2D1, Artemis!5DFD5F6DA8AF, Artemis!EA905A3EE904
68.18%

MicroWorld eScan
Gen:Variant.Kazy.371129, Gen:Heur.Kelios.1, Gen:Variant.Kazy.383414, Gen:Variant.Symmi.48180, Gen:Variant.Strictor.55027, Gen:Variant.Strictor.56807
63.64%

Bitdefender
Gen:Variant.Kazy.371129, Gen:Heur.Kelios.1, Gen:Variant.Kazy.383414, Gen:Variant.Symmi.48180, Gen:Variant.Strictor.55027
63.64%

Lavasoft Ad-Aware
Gen:Variant.Kazy.371129, Gen:Heur.Kelios.1, Gen:Variant.Kazy.383414, Gen:Variant.Symmi.48180, Gen:Variant.Strictor.55027
63.64%

Emsisoft Anti-Malware
Gen:Variant.Kazy.371129, Gen:Heur.Kelios, Gen:Variant.Kazy.383414, Gen:Variant.Symmi.48180, Gen:Variant.Strictor.55027, Gen:Variant.Strictor.56807
63.64%

VIPRE Antivirus
Trojan.Win32.Packer.EnigmaProtector1.1X-1.3X, Trojan.Win32.Generic
63.64%

G Data
Gen:Variant.Kazy.371129, Gen:Heur.Kelios, Gen:Variant.Kazy.383414, Gen:Variant.Symmi.48180, Gen:Variant.Strictor.55027, Gen:Variant.Strictor.56807
63.64%

F-Secure
Gen:Variant.Kazy.371129, Gen:Heur.Kelios.1, Gen:Variant.Kazy.383414, Gen:Variant.Symmi.48180, Gen:Variant.Strictor.55027
59.09%

Trend Micro
PAK_Generic.009, TSPY_BANKER.YOUM, TROJ_SPNV.01DI14, TROJ_GEN.R00JC0DKM15, TROJ_GEN.R0C1C0EK514, TROJ_GEN.R047C0DA216, TROJ_BANLOAD.YAA
59.09%

15 / 68    (Malware)
notepadruntime.exe  (51c132f17e76ce8624c7ca51def63e86)

0 / 68
notepadruntime.exe  (1ea9c2aee57f07d51698b7345093e933)

15 / 68    (Malware)
systemline.exe  (efe4927bf9c5a91abaeaebc4ca818183)

0 / 68
hksave.exe  (6cd3379beb12f47af2fa595d7a8b93a8)

0 / 68
settingsconnection.exe  (5897b7e566cf6e49967d87ecec852432)

22 / 68    (Malware)
searchfiles.exe  (ff7ecf4cc25a7e7109bcb302b6a32f43)

3 / 68      (inconclusive)
groupuser.exe  (16b23539620af0a8aa1b3263415a58e9)

15 / 68    (Malware)
comconnect.exe  (310588cd282296d43336bce85e1298d6)

6 / 68      (Malware)
adobeflashplayer12.0.exe  (ea905a3ee904a5b2936d9a69819ab858)

5 / 68      (Malware)
winsettings.exe  (a3f9c742676162dc50e067449e3e6fa9)

19 / 68    (Malware)
upd.exe  (7db44b58c1e5ed57016d091acb38da0a)

15 / 68    (Malware)
notepadruntime.exe  (e5273fd23709afaebe01c14a94a26464)

17 / 68    (Malware)
adobeflashplayer12.0.gif  (5dfd5f6da8af386af61c747d3945d59a)

20 / 68    (Malware)
adobeflashplayer12.0.exe  (b192bb93f2d1cd2458856dec01eb59e4)

3 / 68
hksave.exe  (2922107a178cbce482fb76da6cca4f6c)

5 / 68      (Malware)
win3001.exe (by Nartycoh Franghu)  (34ca6606c6c02c35bdb6f13045bf4f7c)

27 / 68    (Malware)
win3000.exe (by Nartycoh Franghu)  (05ab6d5dfb72b00edbe40710a58dd607)

1 / 68      (inconclusive)
con64_inc.dll  (0072549d26d98d87ed052c25dda6fd17)

10 / 68    (inconclusive)
adobeflashplayer11.0.exe  (ae43c6f3c32fb0a62d63d2529479d80c)

14 / 68    (Malware)
processuser.exe  (6bf0bab878c0f8eff6e5e50a95cb0555)

4 / 68      (inconclusive)
adobeflashplayer12.0.exe  (9bda8e4c7a69a34233fd1c91edb6cbbc)

2 / 68
gamecenter.exe  (0f658f3441dc1cc7a0a5837dc86bccba)

14 / 68    (Malware)
adobeflashplayer12.0.exe  (e4eeb346a203614b0348e8eaee65c132)

7 / 68      (Malware)
consettings.exe  (04ad818767a41ba797e222539f5d7e5f)

13 / 68    (inconclusive)
adobeflashplayer12.0.exe  (a5e36205e7bcc9cd82e63ea2f92336d9)

0 / 68
adobeflashplayer12.0.exe  (18d6640c7b34cfa9103982be8e9ac2dd)

* Note, the details and description above are based on the code signing digital signature issued to QUANTO SOLUCOES E SISTEMA LTDA by Thawte, Inc. on April 02, 2014 with the serial number '00b87ede3281ffb1ee77df86b54a8cb0'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.