ZBANG IT LTD

Publisher Information

ZBANG IT LTD is a software publisher located in Rehovot, Israel*. Software developed by ZBANG IT LTD has been typically classified as potentially unwanted software. There is one additional code signing certificate issued to this publisher.
Remove ZBANG IT LTD Malware - Powered by Reason Core Security
Authority:
Thawte, Inc.

Valid from:
12/6/2011 6:00:00 PM

Valid to:
12/7/2012 5:59:59 PM

Subject:
CN=ZBANG IT LTD, O=ZBANG IT LTD, L=Rehovot, S=Israel, C=IL

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
327a602c3d891af76c7f1e85399e69b9

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.Installer.W, PUP.Optional.ZBANGIT.J, PUP.Optional.ZBANGIT.H, PUP.Optional.ZBANGIT.Q, PUP.Optional.Installer.Y, PUP.Optional.ZBANGIT.P, PUP.Optional.Installer.AA, Threat.ZBANGIT, Threat.Installer.ZBANGIT, Win32.Generic.ZBANGIT.Meta, Win32.Generic.ZBANGIT.Installer.Meta, Win64.Generic.ZBANGIT.Installer.Meta
100.00%

NANO AntiVirus
Trojan.Win32.SMSSend.cpjnlq
2.00%

Antiy Labs AVL
HackTool[Hoax]/Win32.ArchSMS
2.00%

McAfee Web Gateway
Heuristic.BehavesLike.Win32.Fake.O
2.00%

Zillya! Antivirus
Tool.ArchSMS.Win32.7898
2.00%

Agnitum Outpost
Trojan.SMSSend
2.00%

1 / 68      (PUP)
whitelabelsetup.exe (MultiMi by Zbang.it)  (887012d1c169f66594ae80c8b0c37dd2)

1 / 68      (PUP)
MultimiRestarter.exe (MultiMi by ZBANG IT)  (a3761d5bef5302fe2e6faffe53bfa6fc)

1 / 68      (PUP)
Multimi.exe (MultiMi by ZBANG IT)  (2baaf4b7e83bd705cb0fbdb87847a5ab)

1 / 68      (PUP)
multimisetup_1.0.8.12079.msi  (174d68ff85c01a043764e42bd12d4ed3)

1 / 68      (PUP)

1 / 68      (PUP)
setup.exe (MultiMi by Zbang.it)  (a4115cb56edaa8405f3ce35d4bc33c6a)

1 / 68      (PUP)
whitelabelsetup.exe (MultiMi by Zbang.it)  (9391c322f5612fd8fb47b27057c9995b)

1 / 68      (PUP)
Multimi.exe (MultiMi by ZBANG IT)  (fe1101c0b51c8dbd896d3d9deadec909)

1 / 68      (PUP)
MultimiRestarter.exe (MultiMi by ZBANG IT)  (6b827e61940edcdb0dddd1f1163bcddd)

1 / 68      (PUP)
Multimi.exe (MultiMi by ZBANG IT)  (bc2a7e8c330812230bef3f672bf62a03)

1 / 68      (PUP)
multimisetup_0.40.15.10607.msi  (b1c220875262c42453bb7d7286a6d8f4)

1 / 68      (PUP)
MultiMiSetup_1.0.3.11540.exe (MultiMi by Zbang.it)  (121e62305241ad1fa145294266c79917)

1 / 68      (PUP)
MultimiRestarter.exe (MultiMi by ZBANG IT)  (12521f46e8842f82c701d75be76f7d8b)

1 / 68      (PUP)
Multimi.exe (MultiMi by ZBANG IT)  (7f0cda082bdeb900e682249920e6cbe7)

1 / 68      (PUP)
MultiMiUi.exe (MultiMi by ZBANG IT)  (543acc28f838bc08a976ba581029c9fa)

1 / 68      (PUP)
MultiMiUi.exe (MultiMi by ZBANG IT)  (3d2a8aaef4b6dded4001ba3240f38274)

1 / 68      (PUP)
MultiMiSetup_0.40.22.11319.exe (MultiMi by Zbang.it)  (58b8aec0b4aa19731f1deb8266df1789)

1 / 68      (PUP)
WebServerReport.exe (WebServerReport by Microsoft)  (0cc80ecfc9c671c3e5ba0589a43ff2bd)

1 / 68      (PUP)
MultimiRestarter.exe (MultiMi by ZBANG IT)  (82e1884c55735a25cf91a6f6ce83d8e2)

1 / 68      (PUP)
Multimi.exe (MultiMi by ZBANG IT)  (25f11b74e1c5fe3b46a09bfa336162cb)

1 / 68      (PUP)
multimisetup_1.0.6.11596.msi  (ac2ee386db6de30e4b01a834b164fea5)

1 / 68      (PUP)
MultimiRestarter.exe (MultiMi by ZBANG IT)  (2db3e6c675c3d0acaf9eedbf2d89a14b)

1 / 68      (PUP)
MultiMiUi.exe (MultiMi by ZBANG IT)  (ad1443d2a089678d011e2e3c4d883fdc)

1 / 68      (PUP)
Multimi.exe (MultiMi by ZBANG IT)  (725bf8987ad50adfa40c585074cb47a1)

1 / 68      (PUP)

1 / 68      (PUP)
MultiMiUi.exe (MultiMi by ZBANG IT)  (75806a2c2ac07e8a298cee852c9748a3)

1 / 68      (PUP)
avg_mmi_stf_all_2012_1.exe (MultiMi by Zbang.it)  (89d8d59b5c26155473c8196ea2096dad)

1 / 68      (PUP)
MultiMiSetup_1.0.5.11570.exe (MultiMi by Zbang.it)  (82c34657e1e3c1d51b4773c324514b65)

1 / 68      (PUP)
MultimiRestarter.exe (MultiMi by ZBANG IT)  (d8719e2b3fda6492743851b97acfd4ce)

1 / 68      (PUP)
Multimi.exe (MultiMi by ZBANG IT)  (2d835f2f904c1f09ead89572b38792e2)

 
Latest 30 of 60 files

The following certificate is also signed by ZBANG IT LTD.

2CE84804262987AE7B9FE9DB8204E0A9  (Dec 08, 2010 to Dec 08, 2011)

Remove ZBANG IT LTD Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to ZBANG IT LTD by Thawte, Inc. on December 06, 2011 with the serial number '327a602c3d891af76c7f1e85399e69b9'.