Internet Marketing Lab

Publisher Information

Internet Marketing Lab is a software publisher located in "Seocho-gu ", Seoul in Korea*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
5/27/2011 9:00:00 AM

Valid to:
5/27/2012 8:59:59 AM

Subject:
CN=Internet Marketing Lab, O=Internet Marketing Lab, L="Seocho-gu ", S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
45cfd1b3ed673e365dd9beae9e7eec4b

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InternetMarketingLab.T, PUP.Installer.InternetMarketingLab.M, PUP.Installer.InternetMarketingLab.L, PUP.InternetMarketingLab.M, PUP.InternetMarketingLab (M), PUP.InternetMarketingLab.Installer (M), PUP.Internet (M), PUP.Internet.Installer (M), PUP (M)
100.00%

Trend Micro House Call
ADW_KRADDARE, ADW_AGENT
18.18%

Comodo Security
UnclassifiedMalware, Heur.Suspicious
13.64%

Trend Micro
ADW_KRADDARE, ADW_AGENT
13.64%

Antiy Labs AVL
Trojan/win32.agent.gen
13.64%

AhnLab V3 Security
PUP/Win32.SponsorKeyword
13.64%

avast!
Win32:Adware-gen [Adw]
13.64%

Avira AntiVirus
SPR/SponsKey.B
13.64%

G Data
Win32:Adware-gen
13.64%

IKARUS anti.virus
Win32.AdWare
13.64%

1 / 68      (Adware)
setup_kmplayer_.exe  (10700de4643ca7f48b06b66d90abc997)

1 / 68      (Adware)
sponsorkeyword.exe  (74e3c936e449af870828c37556617054)

1 / 68      (Adware)
setup_pandora_.exe  (4f4d8e17207261424c976f05e852446f)

1 / 68      (Adware)
setup_id002_s.exe  (2e16faf9dae778a65e28c66fc9e2a455)

1 / 68      (Adware)
setup_p001_.exe  (296719df3cb2efab4fefd0255fc61097)

1 / 68      (Adware)
sponsorkeyword.exe  (19966f4d10d4528c21f5ecf9afa5453d)

1 / 68      (Adware)
setup_kmplayer_.exe  (a8fb7ba422373891317a84e0fb997466)

1 / 68      (Adware)
setup_id004_s.exe  (6124e9f660f5d7b432956dbf9f6afcab)

1 / 68      (Adware)
setup_kmplayer_.exe  (375966c2ddede03bff9c83be634265be)

1 / 68      (Adware)
sponsorkeyword.exe  (14dd357c746dd33cf3b062247fc37f1e)

1 / 68      (Adware)
setup_filebus_.exe  (c56040d7a112c919d6f3688813aa68a0)

1 / 68      (Adware)
sponsorkeyword.exe  (2ce29b68ed6bd17c763f38daddded196)

1 / 68      (Adware)
setup_pandora_.exe  (c15a409cbfe5fc34232275eeb11ed3a4)

1 / 68      (Adware)
sponsorkeyword.exe  (4343b92b9e5a4395507bc6de451e860d)

1 / 68      (Adware)
sponsorkeyword.exe  (3ee761bd53527eaa3568a93869c5af42)

1 / 68      (Adware)
setup_p003_s.exe  (2d565f9079b0eaeb9591e55c4e55db54)

1 / 68      (Adware)
sponsorkeyword.exe  (1d5760280d512d2003ceaf574436336a)

10 / 68    (Adware)
sponsormatchagent.exe  (0377a74bc4b0a2890331ef167f05cde5)

2 / 68      (Adware)
sponsormatch.exe  (27b925fa7c027191c1dc90522fd1abc2)

14 / 68    (Adware)
setup_p001_.exe  (cc7dc37a39fefe0ba5411274222ddb52)

21 / 68    (Adware)
setup_p002_s.exe  (4ed5e5e46a20f544e987880d29d37315)

6 / 68      (Adware)
sponsorkeywordagent.exe  (5fb13e69f6aab912f593c04cac468140)

The following certificate is also signed by Internet Marketing Lab.

51E23D20329B49B76271E7F32572F5A1  (Jul 23, 2012 to Jul 24, 2013)

* Note, the details and description above are based on the code signing digital signature issued to Internet Marketing Lab by Thawte, Inc. on May 27, 2011 with the serial number '45cfd1b3ed673e365dd9beae9e7eec4b'.