home

HOW SOFT

Publisher Information

HOW SOFT is a software publisher located in Guro-gu, Seoul in Korea*. The publisher primarily developes software that can be classified as adware. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
11/29/2011 9:00:00 AM

Valid to:
1/28/2013 8:59:59 AM

Subject:
CN=HOW SOFT, O=HOW SOFT, L=Guro-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
567c8147e85208efce0495c1d8ac015f

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Hue Communication.HOWSOFT.Installer (M), PUP.Hue Communication.HOWSOFT (M), PUP.Hue Communication (M)
100.00%

1 / 68      (PUP)
kos_guide.dll (by HowSoft)  (0b0db91c40f0d595456fadfad4aba2fd)

1 / 68      (PUP)
DownLoadGetChange.exe (by HowSoft)  (96c02a6fcaf356aa5ea4ba2a6618f90d)

1 / 68      (PUP)
downloadgetinstall.exe  (b4fcd840277514e058abe5300db1cb59)

1 / 68      (PUP)
DownLoadGetUpgrade.exe (by HowSoft)  (18a15c898dee36357d48f2796531bdcb)

1 / 68      (PUP)
DownLoadDownAgree.exe  (8b9ccaa8911b8120a1ffc083ca23e608)

1 / 68      (PUP)
howcodecopen.exe (Howcodec by howsoft)  (f77ea8830a51142c0f3705d1e176b540)

1 / 68      (PUP)
howcodecopen.exe (Howcodec by howsoft)  (d41810d305d6768bbaec662cda795153)

1 / 68      (PUP)
DownLoadGetUpgrade.exe (by HowSoft)  (ad0ab541bef6b9d81ce4dd8cc277dd84)

1 / 68      (PUP)
DownLoadGetupHp.exe  (cf31591e6a21a15bd41f6398cccf75bc)

1 / 68      (PUP)
DownLoadGetIconSl.exe  (066228e0e88220107b3d9b9b584f4163)

1 / 68      (PUP)
howcodecsetup.exe  (48487b59abdcd6d9f0c15a3fdb1832a4)

1 / 68      (PUP)
kth_opensearch_fsetup.exe  (3c8f0f2959396d432bec39804cee2891)

1 / 68      (PUP)
windowsearchinstall_castmywidget.exe (windowsearch by Copyright (C) 2012 howsoft Co.., All rights reserved)  (f35f33315cd0d111d6690167b18a8876)

1 / 68      (PUP)
howcodechper.exe (howcodec by HowSoft)  (7fa77592a86047157675e8eb448800a5)

1 / 68      (PUP)
timeAdd.dll  (b792158cbf6297206833f4bafe27878d)

1 / 68      (PUP)
windowsearchsetup.exe (by Copyright (C)WindowSearch. All Right Reserved)  (d24aab64385f57fccff9b2fd76b39b1e)

1 / 68      (PUP)
howcodec_update.exe (by HowSoft)  (33476e2cfe74956dcb979b58e0126e6b)

1 / 68      (PUP)
wsact.dll (WindowSearch BHO by HowSoft)  (12cd82b9b3151b1f05b466888d12aaf3)

1 / 68      (PUP)
howcodec_update.exe (by HowSoft)  (2c7e1098eba066d1096c59ed99ec3bb1)

1 / 68      (PUP)
HowcodecOpen.exe (HowcodecOpen by HowSoft)  (f6b4cc8caed3ca60f72c53a4a710f57a)

1 / 68      (PUP)
wsstart.exe (WindowSearch Version Manager by HowSoft)  (76ed7bd0c5efb4581ae3813ba182605c)

1 / 68      (PUP)
windowsearchsetup.exe (by Copyright (C)WindowSearch. All Right Reserved)  (db5308935b39e9b26169918adec39054)

1 / 68      (PUP)
HowcodecOpen.exe (HowcodecOpen by HowSoft)  (05e510ffafeb1cf73004741901aebd04)

1 / 68      (PUP)
wsact.dll (WindowSearch BHO by HowSoft)  (a4e5c2a6388ad8b1888b58f279f6ba71)

1 / 68      (PUP)
DownLoadGetupHp.exe (by HowSoft)  (a1a6c0ebc989841fdb69e3159dd6808e)

1 / 68      (PUP)
downloadgetinstall.exe  (11c1f335d44595ecfbd4e4ab7c23ba19)

1 / 68      (PUP)
wsstart.exe (WindowSearch Version Manager by HowSoft)  (6b5d180c779cc0a42d82967ddbb70801)

1 / 68      (PUP)
windowsearchinstall.exe (windowsearch by Copyright (C) 2012 howsoft Co.., All rights reserved)  (c00fa3fb58be6c59f3ff50e87f98efdd)

1 / 68      (PUP)
howcodecsetup.exe  (ddf91be942a95d592e4ab9da3a6c4a9e)

1 / 68      (PUP)
howcodec_update.exe (Howcodec by HowSoft)  (a8e360d03136307c78af6dc0f591b8d1)

 
Latest 30 of 139 files

The certificates below are also signed by HOW SOFT.

7BA3F775C5D05768F56F97039538592C  (Jan 30, 2013 to Mar 02, 2015)

3B9817FBE154B0346689E1852F9704A7  (Dec 16, 2010 to Dec 17, 2011)

* Note, the details and description above are based on the code signing digital signature issued to HOW SOFT by Thawte, Inc. on November 29, 2011 with the serial number '567c8147e85208efce0495c1d8ac015f'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.