home

Tor Media LLC

Publisher Information

Tor Media LLC is a software developer located in Novosibirsk, Russian Federation in Russia*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
6/17/2013 3:00:00 AM

Valid to:
6/22/2014 2:59:59 AM

Subject:
CN=Tor Media LLC, O=Tor Media LLC, L=Novosibirsk, S=Russian Federation, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
44333f0d3f90631ea32fa7bb0d911c50

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.TorMedia.Installer (M), PUP.TorMedia (M), PUP (M)
100.00%

1 / 68      (Adware)
BackgroundEngine.exe (Background Engine Script)  (5398884663ef9f8799f95671c2b42f64)

1 / 68      (Adware)
nsprocess.dll  (dda21406d61b6f53c290a04de04191ea)

1 / 68      (Adware)
installerhelper.dll  (e66d29e0a306f291d025f993b1eb4355)

1 / 68      (Adware)
toolbarupdate.exe (WebBars)  (c31384eb3760a9e6fa7d96dded13739a)

1 / 68      (Adware)
uninstall.exe (WebBars)  (32e2a04824322aca69ad9e73bc968bdf)

1 / 68      (Adware)
extension32.dll  (74f0efa134a452b409a71f5ec3e25e4f)

1 / 68      (Adware)
extensionupdaterservice.exe  (69fcf18fa5e3c744ea392f9cf9025ead)

1 / 68      (Adware)
nsprocess.dll  (32caf8ec3d5fb2da8e7a7268686f61f0)

1 / 68      (Adware)
nsprocess.dll  (b9ee7c1207c16b71ee3787cdb9ccd25b)

1 / 68      (Adware)
install.exe (WebBars)  (e902563aae9434f0a22644a0ae286d28)

1 / 68      (Adware)
extensionupdaterservice.exe  (1a32fc01789e508ca3cfbe097eca35fc)

1 / 68      (Adware)
installerhelper.dll  (0fd7a50025a21bf2207c34c16fd2885b)

1 / 68      (Adware)
extensionupdaterservice.exe  (fe3a101a59bb186b0fa4d3020fa70bab)

1 / 68      (Adware)
nsprocess.dll  (4b14288188f31a02295b9664620b24e3)

1 / 68      (Adware)
installerhelper.dll  (c4371af68c33dd000e81e99f390ec31e)

1 / 68      (Adware)
Extension.dll  (47e94cc9554281eea33cb999641bc7e3)

1 / 68      (Adware)
toolbarupdatewebbars.exe (WebBars)  (06a3d426fcfb0753175d2a3601414c8b)

1 / 68      (Adware)
extension64.dll  (f6f531bebaeced64481da009830ce00a)

1 / 68      (Adware)
BackgroundEngine.exe (Background Engine Script)  (aea883d3b15f2620cdc37086be7100dc)

1 / 68      (Adware)
uninstall.exe (WebBars)  (a0357b81e1e8fb90704562c830a41a30)

1 / 68      (Adware)
BackgroundEngine.exe (Background Engine Script)  (ccb95ce3ffc4378a359f4ee767ae3e7f)

1 / 68      (Adware)
nsprocess.dll  (446223883f68d0868e221e2dcf27e1cf)

1 / 68      (Adware)
toolbarupdatewebbars.exe (WebBars)  (7ec6ca2ae0d74b850b5774f15990ea65)

1 / 68      (Adware)
installerhelper.dll  (3a452dc81cb2bd3e69935c74a1949969)

1 / 68      (Adware)
nsprocess.dll  (0f1f6062bec9e07a4fc0a1142a8d940f)

1 / 68      (Adware)
uninstall.exe (WebBars)  (437573fd95f4964df7483744840021e5)

1 / 68      (Adware)
installerhelper.dll  (cb48162b2be89cd061212527cac1c1b5)

1 / 68      (Adware)
BackgroundEngine.exe (Background Engine Script)  (c41fc6eaf25f81a7a7c50389a8030abe)

1 / 68      (Adware)
extension32.dll  (1746ce0efed43cfde3635af4e3e0ceeb)

1 / 68      (Adware)
extension32.dll  (3e7d5f12c560ee87f0b1ff2b7f8c405e)

 
Latest 30 of 95 files

The certificates below are also signed by Tor Media LLC.

728BB0A5BF05B1CE3A5A863E569ACE6E  (Jun 09, 2014 to Jun 22, 2015)

51884B8AD645B5569AEE9DF15EC05D8B  (Jun 21, 2012 to Jun 22, 2013)

* Note, the details and description above are based on the code signing digital signature issued to Tor Media LLC by Thawte, Inc. on June 17, 2013 with the serial number '44333f0d3f90631ea32fa7bb0d911c50'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.