Volonet Ltd

Publisher Information

Volonet Ltd is a software developer located in Tel Aviv, Israel*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Remove Volonet Ltd Malware - Powered by Reason Core Security
Authority:
COMODO CA Limited

Valid from:
1/11/2012 1:00:00 AM

Valid to:
11/26/2013 12:59:59 AM

Subject:
CN=Volonet Ltd, O=Volonet Ltd, STREET=hazfira 19, L=Tel Aviv, S=Israel, PostalCode=67778, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00d9eb879a7f4adb713bb56f5d9ea449da

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Volonet.L, PUP.BHO.Volonet.G, PUP.Toolbar.Volonet.J, PUP.Volonet.J, PUP.Volonet.K, PUP.Installer.Volonet.F, PUP.Installer.Volonet.H, PUP.installCore.Volonet.Installer (M), PUP.installCore.Installer (M), PUP.installCore (M)
100.00%

Dr.Web
Adware.Funmoods.1, Adware.InstallCore.15, Trojan.AVKill.20899
64.00%

ESET NOD32
Win32/Toolbar.Montiera, Win32/Toolbar.Montiera (variant), Win32/Toolbar.Funmoods, Win32/Toolbar.Escort, Win32/Toolbar.Funmoods (variant), Win32/InstallCore (variant)
60.00%

Malwarebytes
PUP.FunMoods, PUP.Funmoods, PUP.Optional.Funmoods
46.00%

Sophos
Funmoods Toolbar, W32/Ramnit-A, Mal/Generic-S, Install Core Installer
42.00%

Fortinet FortiGate
Adware/Funmoods, W32/Ramnit.C, Riskware/Funmoods, Adware/InstallCore, Riskware/Toolbar, W32/InstallCore.A
30.00%

Vba32 AntiVirus
Signed-Adware.InstallCore, Virus.Win32.Nimnul.b, Downware.InstallCore, BScope.Malware-Cryptor.Sinba.C, AdWare.InstallCore.gen
28.00%

McAfee Web Gateway
W32/Ramnit.a, Heuristic.BehavesLike.Win32.Suspicious-BAY.O, Artemis!D39046C5A8A6, Artemis!E57BA941C5D1, Artemis!84674D2BF88B
26.00%

McAfee
W32/Ramnit.a, Artemis!8DFD45814EC0, Artemis!D39046C5A8A6, Artemis!E57BA941C5D1, Artemis!84674D2BF88B, Artemis!1FBD2EACC24A, Artemis!8C2C41448AFA
24.00%

K7 Gateway Antivirus
Virus , Trojan, Unwanted-Program , Trojan
24.00%

1 / 68      (Adware)
funmoodssrv.exe (Funmoods)  (3164a11aa750241ecc6989cc71b8e1f9)

1 / 68      (Adware)
uninstall.exe (Funmoods)  (3f580b2f133519c5d30e98ee643c30d9)

1 / 68      (Adware)
fm4ie.exe (Funmoods)  (40bfe1b657d305a0c99fa890fefb283b)

25 / 68    (Adware)
setup.exe (Funmoods)  (76e2ba0676abdabcfa1f0f5016209392)

1 / 68      (Adware)
icreinstall_setup.exe  (a9aaa83fb958f2c4d9f80fa6e440c4a9)

1 / 68      (Adware)
setup.exe  (6d8c5e37d4ef3d213315b35d79ed5f3c)

1 / 68      (Adware)
setup.exe  (49372f88ffc24f6e578254760bb44223)

1 / 68      (Adware)
setup.exe  (65f7e8793691bed48a431dfdd498d080)

1 / 68      (Adware)
setup.exe  (a7cb62f31e1f0baeb8363abbf488c935)

1 / 68      (Adware)
setup.exe  (4338a155ae6b7af9d2c9ef0fea2a4aff)

25 / 68    (Adware)
setup.exe (Funmoods)  (8e211aafb1a594ad473996bcad58ba53)

25 / 68    (Adware)
setup.exe (Funmoods)  (29b045611e9144056e9c0664ef6c93f5)

1 / 68      (Adware)
setup.exe  (7f69287dcb835c0ef3f57fd7e2412644)

1 / 68      (Adware)
setup.exe  (a9980c68e9bdd284ab533f98370537c8)

9 / 68      (Adware)
setup.exe (Funmoods)  (b730ce3729251f7a47a5d00a7be1f5ee)

3 / 68      (Adware)
fm4ffx.exe (funmoods by Funmoods)  (4de405345d8879159c1c8dea4392defb)

20 / 68    (Adware)
setup.exe (Funmoods)  (3e1dbc98605c336f8dd06aaa32ac6809)

5 / 68      (Adware)
facebook smileys setup.exe  (26384d77245147225f89ef3b8695e3f7)

12 / 68    (Adware)
setup.exe (Funmoods)  (caa8a3f219614f31a846a1a5b3e8e0a5)

12 / 68    (Adware)
fm4ie.exe (Funmoods)  (ddcada8c66d56df6e4ef2bbedf2bb865)

3 / 68      (Adware)

11 / 68    (Adware)
funmoodslatest.exe (Setup© by Setup ©)  (8c2c41448afafc09772eea93fec658e2)

15 / 68    (Adware)
setup.exe (GreetingMoods Add-On by GreetingMoods)  (1fbd2eacc24a17a57cf9580f85ac6641)

3 / 68      (Adware)
setup.exe (Funmoods)  (8321e07fe90b8767ff9e340e03769732)

3 / 68      (Adware)
update_e.exe  (2b37bedd0ea723fc1c691b0b5781335b)

9 / 68      (Adware)
setup.exe (Funmoods)  (7a977f060dfe7036e243e2c844d20790)

3 / 68      (Adware)
funmoodsupdate.exe  (a925619f4c2ad42acc252a710713b23a)

6 / 68      (Adware)
funmoodseng.dll (Funmoods)  (27ae963c132916705c2f469bcb79e966)

6 / 68      (Adware)
funmoodsapp.dll (Funmoods)  (fd151f1600577e04033474a2f8ca667f)

47 / 68    (Adware)
escortshld.dll  (c9203382e3e7b20cb23fc4de70ce7ad5)

 
Latest 30 of 76 files

Downloads URLs for files signed by Volonet Ltd.

3 / 68      (Adware)
http://i.funmoods.com/fm/mca/wr/.../Setup.exe  (8321e07fe90b8767ff9e340e03769732)

The following websites host and distribute files published by Volonet Ltd.

The certificates below are also signed by Volonet Ltd.

27228002C4368B8985B0D57BC7FE75CC  (Nov 24, 2010 to Nov 24, 2012)

00DE39C4EC992110F04979AE8347F5C1DD  (Nov 22, 2009 to Nov 23, 2010)

The following publishers (by Authenticode signature organization name) are related.

Remove Volonet Ltd Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Volonet Ltd by COMODO CA Limited on January 11, 2012 with the serial number '00d9eb879a7f4adb713bb56f5d9ea449da'.