Internet Marketing Lab

Publisher Information

Internet Marketing Lab is a software publisher located in Seocho-gu, Seoul in Korea*. There is one additional code signing certificate issued to this publisher.
Remove Internet Marketing Lab Malware - Powered by Reason Core Security
Authority:
Thawte, Inc.

Valid from:
7/23/2012 8:00:00 AM

Valid to:
7/24/2013 7:59:59 AM

Subject:
CN=Internet Marketing Lab, O=Internet Marketing Lab, L=Seocho-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
51e23d20329b49b76271e7f32572f5a1

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Startup.InternetMarketingLab.T, PUP.Startup.InternetMarketingLab.O, PUP.BHO.InternetMarketingLab.F, PUP.InternetMarketingLab.Installer (M)
100.00%

AhnLab V3 Security
Win-PUP/Helper.SponsorKeyword.79232, PUP/Win32.SponsorKeyword
50.00%

Clam AntiVirus
Trojan.Fosniw-249
25.00%

1 / 68      (Adware)
setup_p002_s.exe  (56162f576309f14f91ba239d53a8bab2)

1 / 68      (Adware)
skbho.dll  (bf9bb586849fb089e59d4f95d0bfed0c)

3 / 68      (Adware)
sponsorkeyword.exe  (0bcaa9a64921e000a6cfd1a2fc3bcd82)

2 / 68      (Adware)
sponsorkeywordagent.exe  (09403bf6b28583a65578e3e4ca30bd1c)

The following certificate is also signed by Internet Marketing Lab.

45CFD1B3ED673E365DD9BEAE9E7EEC4B  (May 27, 2011 to May 27, 2012)

Remove Internet Marketing Lab Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Internet Marketing Lab by Thawte, Inc. on July 23, 2012 with the serial number '51e23d20329b49b76271e7f32572f5a1'.