SafetyNut Inc.

Publisher Information

SafetyNut Inc. is a software publisher located in Panama City, Panama*. The company is a primary distributor of unwanted software. SafetyNut distributes a custom branded version of the Ask.com (APN) search toolbar as part of a bundled installation. Thre are 2 additional code signing certificates issued to this publisher.
Remove SafetyNut Inc. Malware - Powered by Reason Core Security
Authority:
Thawte, Inc.

Valid from:
5/12/2014 7:00:00 AM

Valid to:
6/5/2016 6:59:59 AM

Subject:
CN=SafetyNut Inc., OU=DEV, O=SafetyNut Inc., L=Panama City, S=Panama, C=PA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
4f3993be035d6a94e4f10241ff0b285b

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SafetyNut.TorchMedia (M), PUP.APN.SafetyNut (M), PUP.APN.SafetyNut.Installer (M), PUP.SafetyNut.TorchMedia.Installer (M), PUP.SafetyNut.Somoto (M), PUP.SafetyNut (M), PUP.SafetyNut.AzureusSoftware (M)
100.00%

Kaspersky
not-a-virus:WebToolbar.Win32.SearchSuite
10.00%

McAfee
Artemis!3DF73CFC5B4B, SearchSuite, W32/Chir.gen!remnants, Program.SearchSuite, Artemis!EEAA3266A475
10.00%

Panda Antivirus
Adware/SearchSuite
10.00%

Fortinet FortiGate
Riskware/SearchSuite, Adware/SearchSuite, W32/Virut.CE.gen, Riskware/Win64_SearchSuite
10.00%

AVG
SafetyNut Inc., Toolbar.SearchSuite
10.00%

McAfee Web Gateway
BehavesLike.Win32.Dropper.cc, SearchSuite, Heuristic.LooksLike.Win32.SuspiciousPE.J, Artemis!AF870B1A036F
10.00%

Baidu Antivirus
Adware.Win32.SearchSuite, PUA.Win32.SearchSuite
10.00%

Dr.Web
Adware.Toolbar.246, Adware.Toolbar.366
10.00%

Sophos
Generic PUA CK, W32/Scribble-B, Generic PUA IK, Generic PUA JL
8.00%

1 / 68      (Adware)
safetyldr.dll  (c29c68f06001eefc9e2a6b16b2b1c5b8)

1 / 68      (Adware)
moviestoolbarsetup_somoto.exe (MoviesToolbar by Somoto)  (31b8c90ed089e741ea92c8cd050371b6)

1 / 68      (Adware)

26 / 68    (Adware)
safetynut_ie.dll (SafetyNutH Module by Somoto)  (104897a9101e333bb86bf1fe0f573de5)

31 / 68    (Adware)
safetynut.dll (SafetyNut by Somoto)  (936341f53f14b0f21dbfdc0b6fcc0943)

1 / 68      (Adware)
internet explorer settings.exe  (c9577a8f44eebe1606011c7d5266dab6)

1 / 68      (Adware)
safetycrt.dll  (71f3bb1e55392403ddf9bd2760a1ec09)

37 / 68    (Adware)

1 / 68      (Adware)
del_dm_ll_nsl3f91.dll  (860abb51799e08d7ddcd2295c7ecc800)

1 / 68      (Adware)
del_dm_ll_nsl3f91.dll  (defc6fdd41924ad3671763f99d2baca8)

1 / 68      (Adware)
del_dm_exe_nsl3f91.exe (SafetyNut by Somoto)  (cfd1ff7146fd0f0a2f071f50fd2dfc56)

23 / 68    (Adware)
safetynut.dll (SafetyNut by Torch Media Inc)  (5cf3e5054f26030add7900cdabf3f286)

1 / 68      (Adware)
internet explorer settings.exe  (e131dcaae176550c2fbb363e5b48cee4)

14 / 68    (Adware)
uninstall.exe (MusicToolbar by Torch Media Inc)  (6c4647d8ad529e70e0921cab6f99fee0)

1 / 68      (Adware)

1 / 68      (Adware)
trz609e.tmp  (92fb780f9ac7479b8f09e61244582610)

1 / 68      (Adware)
safetynuthlpff9.dll (SafetyNut by Torch Media Inc)  (620b699ccd338f70ae8ddd0ddaf61ab9)

1 / 68      (Adware)
safetynuthlpff8.dll (SafetyNut by Torch Media Inc)  (ace385421ba00a60aff93b6731b8ba52)

1 / 68      (Adware)
safetynuthlpff7.dll (SafetyNut by Torch Media Inc)  (97ba30f3991b92e72ced38ec89641328)

1 / 68      (Adware)
safetynuthlpff6.dll (SafetyNut by Torch Media Inc)  (71397e03f6019a247b83b9790d4a0c86)

1 / 68      (Adware)
safetynuthlpff5.dll (SafetyNut by Torch Media Inc)  (c2552f3191372c2a92b7a3502878e8d5)

1 / 68      (Adware)
safetynuthlpff4.dll (SafetyNut by Torch Media Inc)  (e820e9aa23a9c1f35dc68b2aa8da5ac5)

1 / 68      (Adware)
safetynuthlpff32.dll (SafetyNut by Torch Media Inc)  (fe12a4687dacf4043ef5d71c7b158a1c)

1 / 68      (Adware)
safetynuthlpff31.dll (SafetyNut by Torch Media Inc)  (380f9010952223f05c9b793b2f393653)

1 / 68      (Adware)
safetynuthlpff30.dll (SafetyNut by Torch Media Inc)  (652562eeab46bbdcfac8f71fbf0948e1)

1 / 68      (Adware)
safetynuthlpff29.dll (SafetyNut by Torch Media Inc)  (c09e81adacd5dec24bf1f5c1c0429619)

1 / 68      (Adware)
safetynuthlpff28.dll (SafetyNut by Torch Media Inc)  (b42030f1224ac1bd270a25b3f441de3b)

1 / 68      (Adware)
safetynuthlpff27.dll (SafetyNut by Torch Media Inc)  (59f69175d43e39eccd9621896a2ff540)

1 / 68      (Adware)
safetynuthlpff26.dll (SafetyNut by Torch Media Inc)  (46411e710b626e19bb62d0ead3653a7e)

1 / 68      (Adware)
safetynuthlpff25.dll (SafetyNut by Torch Media Inc)  (e4dfea060aa98b351da81e85ce3e4768)

 
Latest 30 of 865 files

The certificates below are also signed by SafetyNut Inc..

6AB246C8FFCF2543499B3BA85878BA25  (Jun 05, 2013 to Jun 06, 2014)

148940AA8E2C5A9C4956C4E46572CFE1  (Feb 06, 2014 to Jun 06, 2014)

The following publishers (by Authenticode signature organization name) are related.

Remove SafetyNut Inc. Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to SafetyNut Inc. by Thawte, Inc. on May 12, 2014 with the serial number '4f3993be035d6a94e4f10241ff0b285b'.