home

Tor Media LLC

Publisher Information

Tor Media LLC is a software developer located in Novosibirsk, Russian Federation in Russia*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
6/9/2014 3:00:00 AM

Valid to:
6/22/2015 2:59:59 AM

Subject:
CN=Tor Media LLC, O=Tor Media LLC, L=Novosibirsk, S=Russian Federation, C=RU

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
728bb0a5bf05b1ce3a5a863e569ace6e

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.TorMedia (M), PUP.TorMedia.Installer (M), PUP (M)
100.00%

1 / 68      (Adware)
nsprocess.dll  (68b54d7f791b1b577a79b6c734f63cda)

1 / 68      (Adware)
kompexsqlitewrapper.dll  (5582420f5b607cb7ae2087d4f6bce6dc)

1 / 68      (Adware)
installerhelper.dll  (37f5e6578e31ec1f008693a339820872)

1 / 68      (Adware)
chromium.dll  (f74ad096e31b28d36e125803a8022ff9)

1 / 68      (Adware)
interfaces64.dll  (ca2a5f7c62e50cdace9b13201642fb82)

1 / 68      (Adware)
guj3pbzyik.dll  (e676a6e183b72d1c89f81c799717d117)

1 / 68      (Adware)
uninstaller.exe  (633de428d1a9c97e12140a0ae90dbf91)

1 / 68      (Adware)
uninstall.exe (WebBars)  (67cf11a679c31e61b1b096dc8674eeca)

1 / 68      (Adware)
toolbar64.dll  (42c3e55a9f07a178abf2294956fdd5be)

1 / 68      (Adware)
toolbar32.dll  (a48237e6e5348a918f02aab0256cccf1)

1 / 68      (Adware)
loader.exe  (840985761b17dfbc0b5d5ddec2d1f9b5)

1 / 68      (Adware)
interfaces64.dll  (fb6cc713af479c4e2685fb8683d35689)

1 / 68      (Adware)
interfaces32.dll  (9da069235ebc8429b3887538e69b177d)

1 / 68      (Adware)
backgroundsingleton.exe  (2b0ee51562a37c60324d94c64523a404)

1 / 68      (Adware)
nsprocess.dll  (6fc747294376e434af65fcd96a40155d)

1 / 68      (Adware)
_firl0d.dll  (4d2ba0c039f25a8549f18b5e0077abab)

1 / 68      (Adware)
kompexsqlitewrapper.dll  (c2b01b8129e9f71feece508969a778c4)

1 / 68      (Adware)
chromium.dll  (5bc77952cdb353fa9c6eba656890de39)

1 / 68      (Adware)
nsprocess.dll  (22e6d0a66f440562db4e93e375c921c6)

1 / 68      (Adware)
BackgroundEngine.exe (Background Engine Script)  (2bd22acb3debe475d2999d22687970cd)

1 / 68      (Adware)
uninstall.exe (WebBars)  (d98a59074a392f82602887bf07cdc10f)

1 / 68      (Adware)
extension32.dll  (46540d4418ca4fd01c6f2e2c8fe23d09)

1 / 68      (Adware)
_et4w3s.dll  (681e1ab99f76dd7bedf54f77ebb74f90)

1 / 68      (Adware)
runner.exe  (249118c0a8a482804de62489a606964a)

1 / 68      (Adware)
backgroundsingleton.exe  (5e02ee8a3057ee5fe2683fd89e3b3f80)

1 / 68      (Adware)
kompexsqlitewrapper.dll  (de9ac48173614f43516919b06ca395d3)

1 / 68      (Adware)
chromium.dll  (fb2ca8a104cea5a216cd10a76a3bdc9e)

1 / 68      (Adware)
nsprocess.dll  (adebe155dcca91f321dbb53a7c5912de)

1 / 68      (Adware)
kompexsqlitewrapper.dll  (da21c4103b621c1d0a754d60a4ec528e)

1 / 68      (Adware)
chromium.dll  (8a8fb4cf23bc5ba3dfac9b2f7ad87fef)

 
Latest 30 of 387 files

The certificates below are also signed by Tor Media LLC.

44333F0D3F90631EA32FA7BB0D911C50  (Jun 17, 2013 to Jun 22, 2014)

51884B8AD645B5569AEE9DF15EC05D8B  (Jun 21, 2012 to Jun 22, 2013)

* Note, the details and description above are based on the code signing digital signature issued to Tor Media LLC by Thawte, Inc. on June 09, 2014 with the serial number '728bb0a5bf05b1ce3a5a863e569ace6e'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.