lookinglink is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising. There is one additional code signing certificate issued to this publisher.
11/27/2013 12:00:00 AM
11/27/2014 11:59:59 PM
CN=lookinglink, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=lookinglink, L=San Diego, S=California, C=US
Detections (100% detected)
Adware.Yontoo.BHO.O, PUP.lookinglink.U, PUP.lookinglink.P, PUP.lookinglink.l, PUP.lookinglink.V, PUP.lookinglink.S, PUP.lookinglink.k, PUP.lookinglink.Z, PUP.lookinglink.BB, PUP.lookinglink.W, PUP.lookinglink.g, PUP.lookinglink.i, Adware.Yontoo.lookinglink.R, Adware.Yontoo.lookinglink.T, Adware.Yontoo.lookinglink.FF, PUP.lookinglink.R, PUP.lookinglink.m, PUP.Yontoo.lookinglink (M), Adware.Yontoo.lookinglink (M)
Adware BrowseFox.F, Lokilink, MalSign.FRight
Yontoo, Threat.4150696, Threat.4741131, Trojan.Win32.Generic, Threat.5061968
Adware.Win32.Agent, Adware.Win32.BrowseFox, Adware.Win64.BrowseFox, Adware.MSIL.BrowseFox
Artemis!8A957DEF13B9, BrowseFox, Artemis!8DA08828DC29, PUP-FNK, PUP-FPS, PUP-FQG, Artemis!01D250AFE28C, BrowseFox.a, Artemis!C40E96B67F4D, Artemis!C1F954F61C9B, Artemis!49C22B1EA72E
Trojan.BPlug.167, Trojan.BPlug.100, Trojan.BPlug.117, Trojan.BPlug.218, Trojan.BPlug.199, Trojan.BPlug.214, Trojan.BPlug.219
McAfee Web Gateway
Artemis!8A957DEF13B9, BehavesLike.Win32.Trojan.ch, Artemis!8DA08828DC29, BehavesLike.Win32.Downloader.nh, PUP-FPS, BehavesLike.Win32.Backdoor.ch
Win32/BrowseFox.O potentially unwanted application, Win32/BrowseFox.N potentially unwanted application, Win32/BrowseFox.P potentially unwanted application
Antiy Labs AVL
GrayWare[AdWare:not-a-virus]/Win32.Agent, GrayWare[AdWare:not-a-virus]/Win32.Kranet, Trojan/Win32.TSGeneric, GrayWare[AdWare:not-a-virus,HEUR]/Win32.Kranet
PUA.Agent, Riskware.Agent, Trojan.BPlug, PUA.Yotoon, PUA.Kranet
The following certificate is also signed by lookinglink.
The following publishers (by Authenticode signature organization name) are related.
* Note, the details and description above are based on the code signing digital signature issued to lookinglink by VeriSign, Inc. on November 27, 2013 with the serial number '3196dd72cc98341089cb73c9ba4b6429'.