home

Road Runner HoldCo LLC

Publisher Information

Road Runner HoldCo LLC is a software publisher located in Herndon, Virginia in the United States*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. Thre are 5 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
11/12/2013 7:00:00 PM

Valid to:
12/18/2014 6:59:59 PM

Subject:
CN=Road Runner HoldCo LLC, OU=Digital ID Class 3 - Microsoft Software Validation v2, OU=Herndon, O=Road Runner HoldCo LLC, L=Herndon, S=Virginia, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
0915ad02e705a856f4ba27b68c57bb96

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.RoadRunnerHoldCo.Installer (M), PUP.RoadRunnerHoldCo.O, PUP.RoadRunnerHoldCo (M), PUP.Visicom, Win32.Generic.Visicom.Meta, PUP (M)
100.00%

ESET NOD32
Win32/Toolbar.Visicom (variant)
18.75%

IKARUS anti.virus
Trojan-PSW.Win32.Minari
6.25%

1 / 68      (Malware)
roadrunnerbhn_ie_2.1.0.10.exe (RR Toolbar by Road Runner HoldCo)  (058a7b7a75d769ec65ea32c72ec16b83)

1 / 68      (Adware)
twc_tb_ie_0220.exe (by Visicom Media)  (b7eb464dcd537b54b127b8e8158aee46)

1 / 68      (Adware)
rr_tb_ie_0220.exe (by Visicom Media)  (802737af8c9e11f116af3806e35728b5)

1 / 68      (Adware)
rr_tb_ff_09192014.exe (by Visicom Media)  (141046df0ad7061ce9cbee67628fef54)

2 / 68      (PUP)
roadrunnerbhn_ff_2.1.0.10.exe (RR Toolbar by Road Runner HoldCo)  (01a38e408b29868f836468b7c482d59d)

1 / 68      (Adware)
rr_tb_ie_09192014.exe (by Visicom Media)  (e407bb361a609a9fd407b6002490cf11)

1 / 68      (Adware)
rr_tb_ff_0220.exe (by Visicom Media)  (375fd4696f868cd144625b3e08fc6fd6)

1 / 68      (Adware)
twc_tb_ff_1111.exe (by Visicom Media)  (b4572d25634e4466404b6e4f141defe7)

1 / 68      (Adware)
twc_tb_ff_0220.exe (by Visicom Media)  (676b6d7752f68f33acfeb1f7c5b4aaa4)

1 / 68      (PUP)
twcdownloadclient.exe  (f3ac6b7432a9887ce57784b931a510ec)

2 / 68      (Adware)
twc_tb_ie_1111.exe (by Visicom Media)  (36d702ec05db05aded517e5b08ca9b2b)

2 / 68      (PUP)
twc+toolbar_ie_2.1.0.10.exe (TWC Toolbar by Road Runner HoldCo)  (cb7c229ce5293dee16f05580d2d57153)

1 / 68      (Adware)
twc_tb_ff_0804.exe (by Visicom Media)  (376373740d4ec2b8e5f66ec444818afa)

1 / 68      (Adware)
twc_tb_ie_0804.exe (by Visicom Media)  (3317cb946c91888efcf5cf4e5c92598a)

1 / 68      (Adware)
twc_tb_ff_0220.exe (by Visicom Media)  (b4c5ee40a50ea18c834d0fa2d2114386)

2 / 68      (PUP)
twc+toolbar_ff_2.1.0.10.exe (TWC Toolbar by Road Runner HoldCo)  (ab7e5d9b752e8d5e535efa7c8fc8a4fb)

Downloads URLs for files signed by Road Runner HoldCo LLC.

2 / 68      (Adware)
http://outwi1.twc.com.edgesuite.net/toolbar/benefits/benefit/.../TWC_TB_IE_1111.exe  (36d702ec05db05aded517e5b08ca9b2b)

1 / 68      (PUP)
https://registration.rr.com/TWCDownloadClient.exe  (f3ac6b7432a9887ce57784b931a510ec)

The following websites host and distribute files published by Road Runner HoldCo LLC.

outwi1.twc.com.edgesuite.net

registration.rr.com

The certificates below are also signed by Road Runner HoldCo LLC.

2EF76EF15B0A4AF092042A7AC1F77FAB  (Nov 26, 2012 to Nov 27, 2013)

34373E4A758ED3203F841399DD345455  (Nov 13, 2011 to Dec 19, 2012)

4C32D0E981B30C80D35F8F106BE7472D  (Oct 12, 2010 to Nov 12, 2011)

7AA96B241E75856603EA2F32A7A1C24F  (Oct 26, 2009 to Oct 27, 2010)

28D93FBE28735B448EF2FCD544706981  (Jan 03, 2007 to Jan 04, 2008)

The following publishers (by Authenticode signature organization name) are related.

Time Warner Cable Enterprises LLC

* Note, the details and description above are based on the code signing digital signature issued to Road Runner HoldCo LLC by VeriSign, Inc. on November 12, 2013 with the serial number '0915ad02e705a856f4ba27b68c57bb96'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.