HANcommunication

Publisher Information

HANcommunication is a software developer located in seoul, Guro-Gu in Korea*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.
Remove HANcommunication Malware - Powered by Reason Core Security
Authority:
Thawte, Inc.

Valid from:
5/18/2012 9:00:00 AM

Valid to:
5/19/2013 8:59:59 AM

Subject:
CN="HANcommunication ", O="HANcommunication ", L=seoul, S=Guro-gu, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
4de37e21660280beb7915bc467a96193

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Hue Communication, PUP.Hue Communication.Startup, PUP.Hue Communication.Installer
92.86%

CMC Antivirus
Hoax.Win32.BadJoke.ScreenFlicker!O
14.29%

Avira AntiVirus
BDS/Backdoor.Gen2
7.14%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
7.14%

IKARUS anti.virus
Backdoor.Gen2
7.14%

F-Prot
W32/NewMalware-LSU-based!Maximu
7.14%

AhnLab V3 Security
PUP/Win32.GCodec
7.14%

McAfee
Artemis!CDD0DA2E6BF1
7.14%

1 / 68      (Adware)
gcodecup.exe.bak (by HanCommuniCation)  (64d821ad0e405da0a735564066bb0619)

1 / 68      (Adware)
GCodecuninstall.exe (by HanCommuniCation)  (1ece12dd45ba7078b6c92385afbc974f)

1 / 68      (Adware)
gcodecsl.dll (by HnaCommunication)  (e9c7cbdf35e82743497e31f18a05b33b)

1 / 68      (Adware)
Gcodecopen.exe (by HanCommuniCation)  (557a0b9411db4879df765cb9c73404b7)

1 / 68      (Adware)
HanGokMenu.dll  (9b5eda4902fbc607ab16a86e817387c3)

1 / 68      (Adware)
timeAdd.DLL (by HnaCommunication)  (6b21d3ad316d9e2d9a58084d398e4024)

1 / 68      (Adware)
hka.dll  (dc4da75820fb7aeb656d162d1b19fabd)

1 / 68      (Adware)
GCodecuninstall.exe  (2fe2e953a710a9f71627c93fc7a8bd26)

1 / 68      (Adware)
GCodecch.exe  (a937b3139a11355fdf6e4c775f49f1f0)

1 / 68      (Adware)
gcodecband.dll  (82318ea2350258f9ce4e887a99f972a6)

1 / 68      (Adware)
GCodecup.exe  (4c5c17feaeb6d61adf032741a2c97bcb)

1 / 68      (Adware)
GCodechper.exe  (98c5072f7b375435561ff2c99d8a9c6f)

5 / 68      (Adware)
GcodecOpen.exe (GcodecOpen by HanCommunication)  (cdd0da2e6bf15ab5b1d8ba26a7da5815)

4 / 68      (Adware)
GCodecSvc.exe (by HanCommuniCation)  (91bf2f88b983e732482e233272c52ea5)

The following certificate is also signed by HANcommunication .

3962DEF517F7534C2829A48F9A9454D4  (May 12, 2013 to Jun 12, 2015)

Remove HANcommunication Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to HANcommunication by Thawte, Inc. on May 18, 2012 with the serial number '4de37e21660280beb7915bc467a96193'.