Fun Web Products

Publisher Information

Fun Web Products is a software publisher located in White Plains, New York in the United States*. The company is a primary distributor of unwanted software. Thre are 3 additional code signing certificates issued to this publisher.
Remove Fun Web Products Malware - Powered by Reason Core Security
Authority:
VeriSign, Inc.

Valid from:
12/17/2008 7:00:00 PM

Valid to:
1/20/2010 6:59:59 PM

Subject:
CN=Fun Web Products, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Fun Web Products, L=White Plains, S=New York, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7469e97907f383e4ff81ae9b045c64aa

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.FunWebProducts.EE, PUP.Installer.FunWebProducts.DD, PUP.Installer.FunWebProducts.FF, PUP.Installer.FunWebProducts.g, PUP.Mindspark.FunWebProducts.Installer (M), PUP.Mindspark.FunWebProducts (M), PUP.MyWebSearch.Mindspark (M)
100.00%

Clam AntiVirus
Suspect.Adware.MWS, Adware.Mywebsearch-5, Adware.FunWebProducts-5
78.00%

Fortinet FortiGate
Riskware/MyWebSearch, Misc/Mywebsearch, PossibleThreat, Adware/FunWeb
76.00%

F-Prot
W32/Mywebsearch.A.gen, W32/FunWeb.D@adw, W32/Mywebsearch.B.gen
74.00%

ESET NOD32
Win32/Toolbar.MyWebSearch (variant), Win32/AdInstaller (variant), Win32/Toolbar.MyWebSearch.O potentially unwanted (variant)
70.00%

Kaspersky
not-a-virus:WebToolbar.Win32.MyWebSearch, not-a-virus:WebToolbar.Win32.MyWebSearch.a, not-a-virus:WebToolbar.Win32.FunWeb
66.00%

Dr.Web
Trojan.Funweb.106, Trojan.MulDrop.32887, Trojan.DownLoader5.20968, Trojan.MulDrop.32756, Adware.MyWebSearch.4, Adware.MyWebSearch.3
66.00%

avast!
Win32:Mywebsearch-R [PUP], Win32:Mywebsearch-O [Tool], Win32:PUP-gen [PUP], Win32:FunWeb [PUP]
64.00%

Vba32 AntiVirus
Trojan.BHORA.03696, Trojan.BHORA.0984, Adware.WebSearch.14605, Adware.MyWebSearch, Trojan.BHORA.02092, Trojan.BHORA.05544
64.00%

IKARUS anti.virus
not-a-virus:AdTool.Win32.MyWebSearch, not-a-virus.AdWare.MyWebSearch, not-a-virus:AdWare.Mywebsearch, not-a-virus:WebToolbar.Win32.MyWebSearch
60.00%

1 / 68      (Adware)
iwon.exe  (8b7bf70fb116367426802eefed3f7c82)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
retrogamer.exe  (1dd203c6e86efc56bea8e64d0607f69c)

1 / 68      (Adware)

1 / 68      (Adware)

28 / 68    (Adware)
myfuncards.exe  (840e8e686a298a31304229a666bf42e2)

24 / 68    (Adware)

19 / 68    (Adware)

1 / 68      (Adware)

25 / 68    (Adware)

23 / 68    (Adware)

20 / 68    (Adware)

19 / 68    (Adware)

33 / 68    (Adware)

15 / 68    (Adware)

16 / 68    (Adware)

22 / 68    (Adware)

15 / 68    (Adware)

13 / 68    (Adware)

28 / 68    (Adware)

 
Latest 30 of 63 files

The certificates below are also signed by Fun Web Products.

1F5E8AA6D425A4079DE388B7EF6D6904  (Jan 19, 2010 to Jan 20, 2011)

0AD7596F3379BF722EBD93059830F312  (Jan 16, 2008 to Jan 20, 2009)

46753A38027EC7C2A0A189D3DAA7B149  (Jan 16, 2007 to Jan 17, 2008)

The following publishers (by Authenticode signature organization name) are related.

Remove Fun Web Products Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Fun Web Products by VeriSign, Inc. on December 17, 2008 with the serial number '7469e97907f383e4ff81ae9b045c64aa'.