Koyote-Lab Inc.

Publisher Information

Koyote-Lab Inc. is a software developer located in Panama City, Panama*. The publisher primarily developes software that can be classified as adware. Thre are 3 additional code signing certificates issued to this publisher.
Remove Koyote-Lab Inc. Malware - Powered by Reason Core Security
Authority:
Thawte, Inc.

Valid from:
2/23/2012 7:00:00 AM

Valid to:
2/22/2014 6:59:59 AM

Subject:
CN=Koyote-Lab Inc., OU=DEV, O=Koyote-Lab Inc., L=Panama City, S=Panama, C=PA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7ad16c59e384a2e3d38d2287483f9b2b

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Bandoo.KoyoteLab (M), PUP.Bandoo.KoyoteLab.Installer (M), PUP.APN.Bandoo (M)
100.00%

G Data
Win32.Application.Searchsuite, Win32.Application.KoyoteLab, Win64.Application.Searchsuite
76.00%

McAfee Web Gateway
SearchSuite, Artemis!0836B99633AC, Artemis!F586A2AD85B0, BehavesLike.Win32.Suspicious.dc, Artemis!F439408AAB8C
68.00%

Sophos
PUA 'SearchSuite' (of type Adware), Generic PUA KP, Generic PUA FJ
64.00%

McAfee
SearchSuite, Artemis!0836B99633AC, Artemis!F586A2AD85B0, Artemis!F439408AAB8C
62.00%

Dr.Web
Adware.Bandoo.244, Adware.Toolbar.444, Adware.Searcher.2497, Adware.Toolbar.218, Adware.Toolbar.219, Adware.Toolbar.246
62.00%

K7 Gateway Antivirus
Unwanted-Program
58.00%

K7 AntiVirus
Unwanted-Program
58.00%

ESET NOD32
Win32/Toolbar.SearchSuite.Q potentially unwanted application, probably Win32/Toolbar.SearchSuite.Q potentially unwanted application
42.00%

VIPRE Antivirus
Threat.4150696, KoyoteLab, Threat.5224331
42.00%

20 / 68    (PUP)
ftalkv4.exe (fTalk by Koyote-Lab Inc)  (843b1040c9c07a90993b11fffa001365)

8 / 68      (PUP)
ftalkv3.exe (fTalk by Bandoo Media Inc)  (14403a2b809982109adefd14da7ae68f)

1 / 68      (PUP)

1 / 68      (Adware)
mgrldr1.dll  (e1f344336cf3d844557660d5b26f730f)

19 / 68    (PUP)
IEBHO.dll (IEHelper Module by Koyote-Lab)  (821426267e236d53ffcc207f0d8e2a4a)

22 / 68    (PUP)
Datamngr.dll (Data Manager by Koyote-Lab)  (d582616872a38e6e65d50b959949ab46)

1 / 68      (Adware)
apcrtldr1.dll  (da65a066669e91114111b674095ee34b)

1 / 68      (PUP)
uninstall.exe (Fixbee by Koyote-Lab)  (0e4d4f59354d0d6dab9bce411b6e65de)

19 / 68    (PUP)
IEBHO.dll (IEHelper Module by Koyote-Lab)  (819c14b0b41271ecd4c6def3006537e4)

1 / 68      (Adware)
apcrtldr1.dll  (cfa85ba259320a0893008960ab2b5714)

11 / 68    (PUP)
ftalkv3.exe (fTalk by Koyote-Lab Inc)  (b8c71ac9362a2e3abe75780e84dc8396)

3 / 68      (PUP)
fTalk.exe (fTalk by Koyote-Lab)  (e9ad26641308a369d8fc175ec6996d03)

20 / 68    (PUP)
ftalkv4.exe (fTalk by Koyote-Lab Inc)  (613d76b5279c0cbffe45467e2083406a)

16 / 68    (PUP)
mediabar.exe (7-Zip by Igor Pavlov)  (d562b805fa5a134c5df1c1e6a108dbaf)

1 / 68      (PUP)
starter.exe  (fbbeb6670a51fcb4bc16915e30d4f4d0)

1 / 68      (PUP)
uninstall.exe (FuzeZip by Koyote-Lab)  (18de2e6b2965c08b205af880baee0558)

1 / 68      (Adware)
mgrldr.dll  (93492b89dfaca07714793405436b8a62)

1 / 68      (PUP)
ftalkv4.exe (fTalk by Koyote-Lab Inc)  (2c306192dfbe64c5bae245a1373b104d)

6 / 68      (PUP)

11 / 68    (PUP)
ftalkv3.exe (fTalk by Koyote-Lab Inc)  (a539f5ff919d479c2e204c1420773506)

1 / 68      (Adware)
mgrldr.dll  (4de178a1f269cc0ca8553e426ff71a1f)

1 / 68      (PUP)
internet explorer settings.exe  (0dedb7d510af1a44ef6f0b5f3320412a)

19 / 68    (PUP)
IEBHO.dll (IEHelper Module by Koyote-Lab)  (2a0d2468c160c1ce097657863c5c151b)

22 / 68    (PUP)
Datamngr.dll (Data Manager by Koyote-Lab)  (38b68a87ac7bda8f9a273a57b3de633c)

11 / 68    (PUP)
datamngrhlpff9.dll (Data Manager by Koyote-Lab)  (33e236ef0b5a8eda111266e737d799df)

13 / 68    (PUP)
datamngrhlpff8.dll (Data Manager by Koyote-Lab)  (74a79657b0b01d33ad22f12ec184867d)

20 / 68    (PUP)
datamngrhlpff7.dll (Data Manager by Koyote-Lab)  (4622ba7ef7ca2104bf69f1e4ed594ed7)

14 / 68    (PUP)
datamngrhlpff6.dll (Data Manager by Koyote-Lab)  (807ff4e4f2e3e8a2e5cd51ab735b150c)

19 / 68    (PUP)
datamngrhlpff5.dll (Data Manager by Koyote-Lab)  (69fc693f496503d8ecde21f16fa81ea1)

13 / 68    (PUP)
datamngrhlpff4.dll (Data Manager by Koyote-Lab)  (8157a698a9ca08eccfd74ab2aeaaa350)

 
Latest 30 of 1,549 files

Downloads URLs for files signed by Koyote-Lab Inc..

20 / 68    (PUP)
http://download.cdn.ftalk.com/cdn/o/1/r/.../fTalkV4.exe  (843b1040c9c07a90993b11fffa001365)

The certificates below are also signed by Koyote-Lab Inc..

05787E08EB7454E434F666A81F251A2D  (Feb 12, 2014 to Feb 22, 2016)

6DC36CF26D6F48FBEDF0A4F4506380D0  (Dec 05, 2013 to Feb 21, 2016)

5D8843D240CE142A4D70B9208C8B2B7D  (Oct 26, 2015 to Feb 21, 2016)

The following publishers (by Authenticode signature organization name) are related.

Remove Koyote-Lab Inc. Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Koyote-Lab Inc. by Thawte, Inc. on February 23, 2012 with the serial number '7ad16c59e384a2e3d38d2287483f9b2b'.