Maroin Co., Ltd

Publisher Information

Maroin Co., Ltd is a software developer located in Haeundae-gu, Busan in Korea*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Remove Maroin Co., Ltd Malware - Powered by Reason Core Security
Authority:
Thawte, Inc.

Valid from:
1/14/2013 9:00:00 AM

Valid to:
1/15/2014 8:59:59 AM

Subject:
CN="Maroin Co., Ltd", OU=Dev Team, O="Maroin Co., Ltd", L=Haeundae-gu, S=Busan, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
45d35ae0597265a616314a55e3ebe91b

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MaroinCo.I, PUP.Task.MaroinCo.Q, PUP.MaroinCo.S, PUP.Installer.MaroinCo.H, PUP.MaroinCo.Installer (M), PUP.MaroinCo (M)
100.00%

Trend Micro House Call
TROJ_GEN.F47V1214, TROJ_GEN.F47V0829, TROJ_GEN.F47V0329, TROJ_GEN.F47V0401, ADW_KRADDARE, Suspicious_GEN.F47V0303, TROJ_GEN.F47V0909
57.14%

AVG
MalSign.Generic, OpenShopper.A
52.38%

Malwarebytes
Adware.KorAd, Adware.Korad
38.10%

Comodo Security
ApplicUnwnt, Heur.Suspicious
38.10%

ESET NOD32
Win32/Adware.OpenShopper (variant), Win32/Adware.Kraddare.HA (variant)
38.10%

Clam AntiVirus
Adware.Openshopper-1
33.33%

AhnLab V3 Security
PUP/Win32.OpenKeyword, Win-PUP/Helper.OpenKeyword.2134416, Win-PUP/Helper.OpenKeyword.2134456.B
33.33%

nProtect
Adware/W32.Agent.432688, Adware/W32.KrAdword.44480, Adware/W32.KrAdword.427496, Adware/W32.KrAdword.56768, Adware/W32.KrAdword.1718232
23.81%

VIPRE Antivirus
Trojan.Win32.Generic
23.81%

1 / 68      (Adware)
48937.exe  (40bedc1fd111c4cde92016dd573da1bc)

1 / 68      (Adware)
34413.exe (by http://smarttip.co.kr)  (5488d9d332742f9caebd43c5494f061f)

1 / 68      (Adware)
SmartTipAgent.exe (by Maroin)  (247b4beb2377cc242d4e8418bdfa7dfe)

1 / 68      (Adware)
SmartTip.exe (SmartTip by Maroin)  (d798972a49f1011fe05c8f4e9747a8f1)

1 / 68      (Adware)
OpenKeywordC.exe (OpenKeywordC by TGSM)  (c1bb7c5cbb10e793ae8c87b9ab30522e)

1 / 68      (Adware)
openkeyword_silent.exe  (9ce9a247911da1f62d2c0b31504da32b)

9 / 68      (Adware)
OpenKeywordD.exe (OpenKeywordD by TGSM)  (6e624be05fed234d7370807d1bc9907b)

4 / 68      (Adware)
OpenKeyword.exe (OpenKeyword by Maroin)  (a22d708b060458c4ee6612b17546f51f)

9 / 68      (Adware)
SmartTipAgent.exe (by Maroin)  (cc0a7c6874392670e76c025822d20eef)

4 / 68      (Adware)
SmartTip.exe (SmartTip by Maroin)  (9840e7fc4824aff5b907d280c1461662)

21 / 68    (Adware)
torrent3.1_win.exe  (56562fe74a515129676b58a796fe4652)

20 / 68    (Adware)
okextern.exe (by http://openkeyword.co.kr)  (6a0af5c736cf3636fad6e89c8b3eea14)

17 / 68    (Adware)
561806.exe  (d5aca099a9bbb0a52383937d322c1e66)

19 / 68    (Adware)
555722.exe (by http://openkeyword.co.kr)  (3a8ca397fa4624a9c1353b084d456cb9)

1 / 68      (Adware)
SmartTipAgent.exe (by Maroin)  (7b58f5b66e34f92e1550ea1dac541508)

1 / 68      (Adware)
SmartTip.exe (SmartTip by Maroin)  (bfac65e16dea252c91e9c21bbbd7debb)

14 / 68    (Adware)
oksetup.exe  (d2c3e0fdb2e5b4375875fd7f900a4965)

10 / 68    (Adware)
okupdate.exe (by http://openkeyword.co.kr)  (acf376d7722504ab65e6fc31181af1da)

3 / 68      (Adware)
openkeyword_silent.exe  (6b1a7e0bddfd74884d99d11dd532dba5)

4 / 68      (Adware)
OpenKeywordAgent.exe (OpenKeywordAgent by Maroin)  (ad4c080bec1d045a8a864101de27cc97)

12 / 68    (Adware)
okextern.exe (by http://openkeyword.co.kr)  (d283abb494445613d6c4e313aba79634)

The certificates below are also signed by Maroin Co., Ltd.

6247B0D6AE6DA842E9AFD19046D234EF  (Dec 01, 2015 to Mar 02, 2018)

5DF1E27BEBF6F3BA4B33632B858EC872  (Dec 18, 2013 to Feb 17, 2016)

Remove Maroin Co., Ltd Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Maroin Co., Ltd by Thawte, Inc. on January 14, 2013 with the serial number '45d35ae0597265a616314a55e3ebe91b'.