home

GJ Networks

Publisher Information

GJ Networks is a software developer located in Dongjak-gu, Seoul in Korea*. The publisher primarily developes software that can be classified as adware.
Authority:
Thawte, Inc.

Valid from:
12/12/2011 9:00:00 AM

Valid to:
12/12/2013 8:59:59 AM

Subject:
CN=GJ Networks, O=GJ Networks, L=Dongjak-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3f796579dd55f89dfe34df13dcbf595f

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Startup.GJNetworks.K, PUP.Toolbar.GJNetworks.L, PUP.GJNetworks.D, PUP.GJNetworks.N, PUP.GJNetworks.K, PUP.GJNetworks.L, PUP.GJNetworks (M), PUP.GJNetwor (M), PUP (M)
100.00%

Malwarebytes
Adware.KorAd
35.00%

Comodo Security
UnclassifiedMalware, Heur.Suspicious, ApplicUnwnt
35.00%

VIPRE Antivirus
Trojan.Win32.Generic.pak!cobra, Threat.4657539
35.00%

AhnLab V3 Security
PUP/Win32.Speller
35.00%

McAfee
Artemis!4C23BA35CA06, Artemis!77AFEB8613B3, Artemis!87CD375F5032, Artemis!85A7D9413253, Artemis!AFCDCD0FE420, Artemis!33D176CAFA38
30.00%

ESET NOD32
Win32/Adware.Kraddare.FJ (variant)
30.00%

AVG
Fake_AntiSpyware
30.00%

Trend Micro House Call
ADW_KRADARE, ADW_KRADDARE, TROJ_GEN.R0CBH05EN14, Suspicious_GEN.F47V0821
30.00%

nProtect
Adware/W32.KrAdword.285256, Adware/W32.KrAdword.483096, Trojan/W32.Agent.215112, Trojan/W32.Agent.243784
25.00%

1 / 68      (PUP)
tmp000036e7  (d895ad3b9c0dd0b20b3deecb067d5789)

1 / 68      (PUP)
beta003.exe  (73e16f14283a4d343b226401772813e1)

1 / 68      (PUP)
beta002.exe  (96aa78d2d65c94fb90fa15d5579a990c)

1 / 68      (PUP)
findkey.exe  (747147331625f2b972eceec3b9d9f1dd)

1 / 68      (PUP)
pan003.exe  (e69b3f8c08548e02ffb07868f909da33)

1 / 68      (PUP)
utilq001.exe  (f0828f330a6b5ea2579271a242584ef5)

1 / 68      (PUP)
rapid001.exe  (76c97dacda34dc6fc4905c1a9a192fa7)

1 / 68      (PUP)
super001.exe  (5bd6048f466da8ca68bf818d1ba4a930)

1 / 68      (PUP)
racl001.exe  (5b63d819baf45f0b0135d5c51af25664)

1 / 68      (PUP)
filesk.exe  (8073140e06be304c2e3068afe806e22f)

12 / 68    (PUP)
spellersvc.exe (RaclSvc Module)  (33d176cafa383d38d17ab9e75e3f0be4)

5 / 68      (PUP)
SpellerCtrl.dll  (afcdcd0fe4200c1488e21e7908e06791)

7 / 68      (PUP)
spelleruninst.exe (RaclUninst Module)  (6f4e277f40f83e9c8f2093da5c508970)

4 / 68      (PUP)
SpellerCtrl.dll  (1ee0b2f7aec41373dd709698f5ff7c24)

18 / 68    (PUP)
spelleruninst.exe (RaclUninst Module)  (85a7d9413253a8e46d63686a4abd882f)

27 / 68    (PUP)
spellersvc.exe (RaclSvc Module)  (19e6164643f225b0a4e068257539cbb8)

19 / 68    (PUP)
spelleruninst.exe (RaclUninst Module)  (87cd375f50328da067872ee7c362603d)

23 / 68    (PUP)
스펠러.exe  (77afeb8613b3b1084654c733bf6fdadc)

2 / 68      (PUP)
SpellerCtrl.dll  (babee493e7e4bf67312246091ef73d67)

20 / 68    (PUP)
spellersvc.exe (RaclSvc Module)  (4c23ba35ca06fd2055a0d9ec6069de97)

* Note, the details and description above are based on the code signing digital signature issued to GJ Networks by Thawte, Inc. on December 12, 2011 with the serial number '3f796579dd55f89dfe34df13dcbf595f'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.