home

JE communication

Publisher Information

JE communication is a software publisher located in "Gangnam-gu ", Seoul in Korea*. The company is a primary distributor of unwanted software. Thre are 4 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
1/9/2012 9:00:00 AM

Valid to:
10/17/2012 8:59:59 AM

Subject:
CN=JE communication, O=JE communication, L="Gangnam-gu ", S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
434f5fde34495332b10e00cb5f8397ad

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.JEcommunication.H, PUP.JEcommunication.Installer (M), PUP.JEcommunication (M), PUP.JEcommun.Installer (M), PUP.JEcommun (M), PUP (M)
100.00%

Malwarebytes
Adware.KorAd
15.38%

VIPRE Antivirus
Trojan.Win32.Generic
15.38%

Norman
FakeAV.BJER, FakeAV.BJEQ
15.38%

avast!
Win32:Adware-AZG [Adw]
15.38%

AhnLab V3 Security
PUP/Win32.Winerspop
15.38%

nProtect
Adware/W32.KrAdword.301688, Adware/W32.KrAdword.131376
15.38%

K7 AntiVirus
Adware
7.69%

Agnitum Outpost
PUA.Kraddare
7.69%

NANO AntiVirus
Riskware.Win32.Kraddare.crektb
7.69%

1 / 68      (Adware)
vitavaccine_good.exe  (c1d58ee65fa59b02fd6939df981a8c48)

1 / 68      (Adware)
winspop_clubpds.exe (Windows Winerspop)  (844337d97e87195ee56ce237091809ed)

1 / 68      (Adware)
winspop_self.exe (Windows Winerspop)  (a0c96a5c38d5798401f16fe7a73e3240)

1 / 68      (Adware)
clearvaccine_process_s_run.exe  (d32fa159c04c19983506ee2ce485f7c6)

1 / 68      (Adware)
tmp0000053c  (29103e8c6068af69cf3753d1b45e043c)

1 / 68      (Adware)
totalboandm.exe  (6f8e72d851db0865d4591ce8600d7c02)

1 / 68      (Adware)
totalboanBK.exe  (080b24fc73ee4fe82cecf8a31d7d056b)

1 / 68      (Adware)
totalboan.exe  (c402a40f6f0e2db0f5318840011bd1f6)

1 / 68      (Adware)
uninst_fileboan.exe  (60605a57ef965337ebe0d25a233d2748)

1 / 68      (Adware)
winspsv.exe (Windows Winerspop)  (d376608bc92a83ad43216ba8f7960f91)

1 / 68      (Adware)
malware_194.exe  (a46f64b7082af7cb706d5bec81f902f7)

9 / 68      (Adware)
winspsp.exe (Windows Winerspop)  (52011cae7c7d1a85c9a2acdb78fdcbaa)

17 / 68    (Adware)
winspsu.EXE (Windows Winerspop)  (f2f73dde89d28ce75d3a1567e200af63)

The certificates below are also signed by JE communication.

40E440C0868BF76724AB0B79E1D1A63F  (Mar 26, 2014 to Mar 27, 2015)

79BFEDDF41C2E1BD5C1C61870556A607  (Oct 29, 2012 to Nov 29, 2013)

6AE5926AD804699F49BFF482B2BF0B53  (Aug 15, 2011 to Oct 14, 2012)

217805E59F1C39EA283584DAC5CEAD29  (Aug 30, 2010 to Aug 31, 2011)

The following publishers (by Authenticode signature organization name) are related.

Now Media Corp.

* Note, the details and description above are based on the code signing digital signature issued to JE communication by Thawte, Inc. on January 09, 2012 with the serial number '434f5fde34495332b10e00cb5f8397ad'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.