Cheng Du VTools Information Technology

Publisher Information

Cheng Du VTools Information Technology is a software publisher located in ChengDu, Sichuan in China*. The publisher primarily developes software that can be classifed as adware. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
12/10/2011 7:00:00 PM

Valid to:
1/25/2014 6:59:59 PM

Subject:
CN=Cheng Du VTools Information Technology, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Cheng Du VTools Information Technology, L=ChengDu, S=SiChuan, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1b5d68e0afa12e8f1159c668dd228431

Scanner detections:
Detections  (74% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.ChengDuVToolsInformationTechnology.P, PUP.ChengDuVToolsInformationTechnology.X, PUP.ChengDuVToolsInformationTechnology.o, PUP.ChengDuVToolsInformationTechnology.W, PUP.ChengDuVToolsInformationTechnology.h, PUP.Installer.ChengDuVToolsInformationTechnology.P, PUP.ChengDuVToolsInformationTechnology.V, PUP.ChengDuVToolsInformationTechnology.d, PUP.ChengDuVToolsInformationTechnology.l, PUP.ChengDuVToolsInformationTechnology.Q, PUP.ChengDuVToolsInformationTechnology.CC, PUP.Installer.ChengDuVToolsInformationTechnology.S, PUP.ChengDuVToolsInformationTechnology.N, PUP.ChengDuVToolsInformationTechnology.J, PUP.ChengDuVToolsInformationTechnology.DD, PUP.ChengDuVToolsInformationTechnology.p, PUP.ChengDuVToolsInformationTechnology.f, PUP.ChengDuVToolsInformationTechnology.K, Common.PUP.ChengDuVToolsInformationTechnology.H, PUP.ChengDuVToolsInformationTechnology.L, PUP.Installer.ChengDuVToolsInformationTechnology.I, PUP.ChengDuVToolsInformationTechnology.U, PUP.ChengDuVToolsInformationTechnology.AA, PUP.ChengDuVToolsInformationTechnology.EE, PUP.ChengDuVToolsInformationTechnology.r
100.00%

Dr.Web
Adware.Downware.1399, Adware.Downware.2226, Adware.InstallCore.133, riskware program Program.Unwanted.34
70.00%

Malwarebytes
PUP.Optional.FreeNew.A
62.00%

F-Prot
W32/A-669e39c4, W32/A-a42edc75, W32/A-42c63c6c, W32/FreeNew.A.gen
62.00%

IKARUS anti.virus
PUA.FreeNew, AdWare.Win32.FreeNew, PUA.PCErrorFix
62.00%

VIPRE Antivirus
Threat.4150696, Adware.Linkury, InstallCore.b
60.00%

Agnitum Outpost
Riskware.Agent, PUA.InstallCore
60.00%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud)
60.00%

Trend Micro House Call
TROJ_GEN.F47V0930, TROJ_GEN.F47V0309, TROJ_GEN.F47V0807, TROJ_GEN.F47V0412, TROJ_GEN.F47V1102
56.00%

Bkav FE
W32.Cloddf5.Trojan, W32.Clod7b5.Trojan
52.00%

18 / 68    (PUP)
iobit_uninstaller_4_beta_downloader.exe  (df28804bbbc20edc240b607c80e387b6)

18 / 68    (PUP)
all_in_one_pdf_lite_1.0_downloader.exe  (9c6378a07ef3665ffff50f45a5dd7feb)

18 / 68    (PUP)
openoffice_downloader.exe  (79031b99d55505ef6ca120dd261ced9c)

18 / 68    (PUP)
star_defender_4_and_astro_avenger_1.0.0.0_downloader.exe  (34bafe042497dcfc057cdf556d697e1b)

18 / 68    (PUP)
earthquake_3d_2_downloader.exe  (179dbf3768a9e390540de66a65cc1bba)

18 / 68    (PUP)
realplayer_downloader.exe  (4039f6f218a0849dbc9731559b73e72f)

18 / 68    (PUP)
norton_removal_tool_downloader.exe  (8d067085a8a2d2ad08a9595c98c33df5)

18 / 68    (PUP)
mozilla_firefox_downloader.exe  (95a8dd82e8ce142fe3d85db0295fa2e9)

1 / 68      (inconclusive)
windows_cleaner.exe (Windows Cleaner by Vtools)  (245dd2fe455626fb410be5f92b675bb1)

1 / 68      (inconclusive)
flashgamesniffercomp3.dll  (48a4ffc573b24c3251691eabb16cbf9c)

1 / 68      (inconclusive)
flashgamesniffercomp.dll  (7deeb0f22a9da0bac71e7f264ece469c)

1 / 68      (inconclusive)
unins000.exe  (aef6c1e7c85960946917c97cd863eea9)

1 / 68      (inconclusive)
GamesDownloader.exe (Online Games Downloader by VTools)  (0bf91d6ce2ed4eda456ccb4c3390ac32)

1 / 68      (inconclusive)
FlashPlayer.exe (Online Games Downloader by VTools)  (38438373ad73593dda307dc9eb66acb1)

1 / 68      (inconclusive)
sqlite3.dll  (a262ab3924ed01cfab3bd27758502d0e)

1 / 68      (inconclusive)
BHOToolBar.dll (Online Games Downloader by VTools)  (fb8d14dc0b80ed40c653875d60fa1c63)

1 / 68      (inconclusive)
samsung_auto_backup_4.1.371.0_downloader.exe  (bc3f878fb81b2f80c755a3bd885ce5b3)

16 / 68    (PUP)
iobit_uninstaller_downloader.exe  (89376b745fcf2c8c2d733a34fe70c7bb)

16 / 68    (PUP)
iobit_uninstaller_downloader.exe  (a5002cb0f2fe277120624e2e4b94a31e)

1 / 68      (inconclusive)
freenewdownloader_for_iobit_uninstaller.exe (by Vtools)  (47fb207fe325655f86aede33786d4504)

10 / 68    (PUP)
bluff_to_win_in_texas_holdem_quiz_1.0_downloader.exe  (dd1e11bb03a7dc1aec1c087e069df9b9)

10 / 68    (PUP)
bluff_to_win_in_texas_holdem_quiz_1.0_downloader.exe  (25e8c2d10ce91356229ab32cc078a306)

15 / 68    (PUP)
mozilla_firefox_downloader.exe  (0198db7361754d6f52a4b9f2be62aa41)

15 / 68    (PUP)
razer_game_booster_downloader.exe  (d5f688f0db71fafba29088120bc71bdd)

15 / 68    (PUP)
iobit_uninstaller_downloader.exe  (2661029fa1ad6ec1c288a4d11004cf76)

15 / 68    (PUP)
picasa_downloader.exe  (d8693556fb1f3c22d8d62ddb4afe708a)

15 / 68    (PUP)
realtek_high_definition_audio_codec_downloader.exe  (d19435d73cbf080f75bb734962ed33c6)

15 / 68    (PUP)
vlc_media_player_downloader.exe  (3720509c637dc9b471577c02c87753c1)

3 / 68      (PUP)
acceleratetab.exe (AccelerateTab)  (c563916fbbdeec2d172aedf034fdc4ab)

6 / 68      (PUP)
razer_game_booster_downloader.exe  (74e0b951a766fa584d335faf27e33168)

 
Latest 30 of 327 files

Downloads URLs for files signed by Cheng Du VTools Information Technology.

18 / 68    (PUP)
http://www.techtudo.com.br/_/software/.../download  (iobit_uninstaller_4_beta_downloader.exe)

18 / 68    (PUP)
http://www.freenew.net/.../get.htm?id=220  (star_defender_4_and_astro_avenger_1.0.0.0_downloader.exe)

1 / 68      (inconclusive)

18 / 68    (PUP)
http://www.freenew.net/.../get.htm?id=606462  (realplayer_downloader.exe)

15 / 68    (PUP)
http://www.freenew.net/.../get.htm?id=68647  (google_earth_downloader.exe)

15 / 68    (PUP)
http://www.freenew.net/.../get.htm?id=544431  (razer_game_booster_downloader.exe)

16 / 68    (PUP)
http://www.freenew.net/.../get.htm?id=577396  (video_strip_poker_pc_1.44_downloader.exe)

15 / 68    (PUP)
http://www.freenew.net/.../get.htm?id=65527  (mumble_1.2.3_downloader.exe)

14 / 68    (PUP)
http://www.freenew.net/.../get.htm?id=566441  (best_pop_up_killer_removal_tool__1.0_downloader.exe)

The following websites host and distribute files published by Cheng Du VTools Information Technology.

The certificates below are also signed by Cheng Du VTools Information Technology.

0A8A25417701491E37564B59A150624E  (Jan 01, 2014 to Mar 02, 2016)

74ABEBE80CBD793FD40D60CBD6D03A38  (Jan 26, 2010 to Jan 27, 2012)

The following publishers (by Authenticode signature organization name) are related.

Detection Incidence by Country
* Note, the details and description above are based on the code signing digital signature issued to Cheng Du VTools Information Technology by VeriSign, Inc. on December 10, 2011 with the serial number '1b5d68e0afa12e8f1159c668dd228431'.