ISFORU Co. Ltd.

Publisher Information

ISFORU Co. Ltd. is a software developer located in Mapo-gu, Seoul in Korea*. There is one additional code signing certificate issued to this publisher.
Remove ISFORU Co. Ltd. Malware - Powered by Reason Core Security
Authority:
Thawte, Inc.

Valid from:
7/22/2010 4:30:00 AM

Valid to:
9/20/2012 3:29:59 AM

Subject:
CN=ISFORU Co. Ltd., OU=Dev Team, O=ISFORU Co. Ltd., L=Mapo-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
54c92ab2c9b41b853a81cad82d42f77f

Scanner detections:
Detections  (57% detected)

Scan engine
Details
Detections

Malwarebytes
Adware.KorAd, Trojan.Keylogger
85.71%

AhnLab V3 Security
PUP/Win32.MemoThis
71.43%

McAfee
Artemis!80F0447B4200, Artemis!5EAAB025F92E, Artemis!1A4A4B73D406, Artemis!4C9CE5F4D997
57.14%

Norman
NSIS_MemoThis.A, KeyLogger.IMS, Suspicious_Gen4.ABGKS, KeyLogger.HMQ
57.14%

avast!
Win32:Agent-AOIU [Trj], Win32:Agent-AOIT [Trj]
57.14%

Kaspersky
Trojan-Spy.Win32.KeyLogger, not-a-virus:AdWare.Win32.Agent
57.14%

Bitdefender
Trojan.Generic.KDV.676898, Trojan.Generic.KDV.679215, Gen:Variant.Zusy.Elzob.5888, Trojan.Agent.AUTB
57.14%

ViRobot
Trojan.Win32.A.KeyLogger.944976, Trojan.Win32.A.KeyLogger.1638024, Adware.CUPService.1995152, Adware.MemoThis.1995168.A
57.14%

Avira AntiVirus
TR/Agent.aoiu.34, Adware/Agent.ylb, TR/Agent.autb.3, TR/Agent.autb.2
57.14%

McAfee Web Gateway
Artemis!80F0447B4200, Artemis!5EAAB025F92E, Generic PWS.y!1ct, Artemis!4C9CE5F4D997
57.14%

29 / 68    (PUP)
mal_3.exe (MemoThis by IsforU Co.)  (4c9ce5f4d99760b417bf4c882327635d)

31 / 68    (PUP)
mal_2.exe (MemoThis by IsforU Co.)  (1a4a4b73d406dc50fc0db16f422c3a46)

25 / 68    (PUP)
malware_245.exe (MemoThis by IsforU Co)  (5eaab025f92eaa62a55b43a031227cb7)

20 / 68    (PUP)
malware_032.exe (MemoThis by IsforU Co.)  (80f0447b4200c1dd1ef626962daf44dd)

1 / 68      (inconclusive)
Hiverion.dll (Hiverion by IsforU Co.,Ltd)  (0446d1d4b7e3cb6b6178e4ec50520de7)

1 / 68      (inconclusive)
MemoThis.dll (MemoThis by IsforU Co.,Ltd)  (9cfb500faeaa156e79eb8c5bb2c5cc68)

2 / 68      (inconclusive)
Updater.exe (Updater Module)  (78b515df5a8b1c3c813e7f5c0fb6f6ea)

The following certificate is also signed by ISFORU Co. Ltd..

5EC0C91AD09C7D0D8D80F5E4456A0106  (Sep 12, 2012 to Oct 13, 2014)

Remove ISFORU Co. Ltd. Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to ISFORU Co. Ltd. by Thawte, Inc. on July 22, 2010 with the serial number '54c92ab2c9b41b853a81cad82d42f77f'.