Just wanted to give you the heads up on a publisher called Information Technology Systems doo.
According to the certificate, the publisher is located in Montenegro:
This is the VirusTotal scan report for the Information Technology Systems doo file:
Generic.DAA, Unwanted-Program and are some of the detection names.
Did you also find a file signed by Information Technology Systems doo? What kind of download was it? In my case, the download claimed to be the Flash Player installer.
Update 2014-09-03: Found a file promoted as a Java installer, signed by Information Technology Systems doo:
The web page is hosted on softkopro.net. The file is called java_setup.exe and is detected by 10 of the 55 anti-virus programs at VirusTotal.
According to the web page, java_setup.exe is a downloader, rather than the real Java setup file:
“Coinis downloader is distributing a proprietary download manager that will take you to the official download of this program. Prior to taking you to the official download, we will offer optional sponsored software that you may be interested in. You are not required to install any additional software to receive your download.”
Update 2016-09-23: I’ve rescanned the java_setup.exe file. Now the detection rate is 31/57. Based on the scan result over at VirusTotal and by looking at the java_setup.exe executable file, it seems that the file contains the InstallCore software rather the Coinis downloader, contrary to what the web page at softkopro.net stated.