home

McGruff SafeGuard

Publisher Information

McGruff SafeGuard is a software developer located in Miami Beach, Florida in the United States*. Thre are 5 additional code signing certificates issued to this publisher.
Authority:
COMODO CA Limited

Valid from:
6/16/2011 8:00:00 PM

Valid to:
6/16/2012 7:59:59 PM

Subject:
CN=McGruff SafeGuard, O=McGruff SafeGuard, STREET=5900 Collins, L=Miami Beach, S=FL, PostalCode=33140, C=US

Issuer:
CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
75c43fdc106983576b34bde5192aa22d

Status:
No known positive detections

Scan engine
Details
Detections

Dr.Web
BACKDOOR.Trojan
66.67%

Reason Heuristics
Threat.Win.Reputation.IMP
33.33%

0 / 68
WebFilterSetup.exe (WebFilterSetup)  (b1287cad812919ec8fedc8c67ccea058)

0 / 68
RegistryFileDll.DLL (RegistryFileDll Dynamic Link Library)  (dff5be339f2af29761ac6d5cb64632da)

0 / 68
pophome.exe  (38ee4d9c97cdf558d48e4c9d5d690c2d)

0 / 68
smss.EXE (smss)  (3cb9261b56327c76f93dc82f885e371e)

0 / 68
registerlsp64.exe (RegisterLSP64.exe by ParentsOnPatrol)  (73ef4b3bbf4707c5d96df00488ca6a0f)

0 / 68
RegistryFileDll.DLL (RegistryFileDll Dynamic Link Library)  (8fc3f966080c092c306b98f2c314a6c1)

0 / 68
registerlsp64.exe (RegisterLSP64.exe by ParentsOnPatrol)  (16c6c69128736393e38dcd12866c5ba4)

0 / 68
pophome.exe  (3ca3ed0baf900d764df6c1a8bf571cd0)

0 / 68
nssdbm3.dll (Network Security Services by Mozilla Foundation)  (af8c91aa0282c661fc7b818559612517)

0 / 68
sqlite3.dll  (65138165b7c5086fc9b081fd9cd5cac8)

0 / 68
softokn3.dll (Network Security Services by Mozilla Foundation)  (f8dcd133f308d4a19327c4806413a429)

0 / 68
registerlsp.exe (RegisterLSP.exe by ParentsOnPatrol)  (64446650e8dbc13c8ed76bbba9d83bb7)

0 / 68
registerlsp.exe (RegisterLSP.exe by ParentsOnPatrol)  (a3a0a129c830f3cacf5491416cf0b18c)

0 / 68
skypechatdll.dll  (030c5894369ed7e6684b590dbba55a47)

0 / 68
freebl3.dll (Network Security Services by Mozilla Foundation)  (2123f3672ab9e05b01de02d3e570e13f)

0 / 68
SkypeChat.exe (SkypeChat)  (a9774764f61ac8fdae2a3a4322258a40)

0 / 68
services.exe (Event Agent Scanner by Event Agent)  (8372aeb89dda984eefa79058b6064c1f)

1 / 68      (inconclusive)
lsass.exe (Event Agent Setup by Event Agent)  (f05e6585053678608472aebe3ef8a22c)

0 / 68
komdll.dll  (bcd1b76b30d0b0992e0e7655293a9ed3)

1 / 68      (Malware)
eventagentpc.dll (eventagentpc.dll by ParentsOnPatrol)  (debba5468097526e1affa1fd407ec2cc)

0 / 68
smss.EXE (smss)  (4ed0fd40ad6af5a0a164780095537a7d)

0 / 68
ea.exe (TrayIcon by ms)  (c0507c9356b26b649e7d81cc15278e3a)

0 / 68
spoolsv.exe (Event Agent Startup)  (d9880edd714824495a3182d2ed0bc752)

0 / 68
eventdll.dll (EventDLL.dll by ParentsOnPatrol)  (7195831e95ccf5ea53cbdada1888f1a0)

0 / 68
skypechatdll.dll  (d62ecbafbdd34527ba4b6c65728358c7)

0 / 68
eventagentpc64.dll (eventagentpc.dll by ParentsOnPatrol)  (7908d9375db0b8ef3bc72ee5aa272d45)

0 / 68
wuaudt.exe (wuaudt .exe by ParentsOnPatrol)  (4901d79146037f06cdc2bbde2ba8bb9f)

0 / 68
SkypeChat.exe (SkypeChat)  (416a8293ba13f7fbb29d897562ec935f)

1 / 68      (inconclusive)
pophome.exe  (b95cb10ec13f05f6f46a0d98e0af662f)

0 / 68
komdll.dll  (858a5120507280cf43deb5531d93924c)

 
Latest 30 of 42 files

The certificates below are also signed by McGruff SafeGuard.

0B29F7DCC171E35E1E9E93D4537465C2  (Feb 14, 2014 to Jun 03, 2015)

602A3764E40B9E2AFCB659A1515F9FBD  (May 21, 2012 to May 22, 2014)

0930B5C8ED1349B8F5B7AC94352AB008  (Jan 16, 2013 to Jan 22, 2014)

0409B5BA142089722CF05EA8561A2C5A  (Apr 08, 2009 to Apr 09, 2011)

4A1859EABAA7A5F15ADA1F9298806D14  (Mar 25, 2008 to Mar 26, 2009)

* Note, the details and description above are based on the code signing digital signature issued to McGruff SafeGuard by COMODO CA Limited on June 16, 2011 with the serial number '75c43fdc106983576b34bde5192aa22d'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.