home

Mediaclick

Publisher Information

Mediaclick is a software publisher located in Gangnam-gu, Seoul in Korea*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
2/2/2009 4:51:19 PM

Valid to:
1/30/2010 2:39:21 PM

Subject:
CN=Mediaclick, OU=Software Development Department, O=Mediaclick, L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
1ea80c81cc69b9b71655baca73403b94

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Mediaclick, PUP.Mediacli (M), PUP.Mediacli.Installer (M), PUP (M)
100.00%

1 / 68      (Adware)
hotclipalert.exe  (ae756ded84fd94506e7d5e0356526cef)

1 / 68      (Adware)
hotclipb.DLL (hotclipb Module)  (4a1eb38ad55add5d2649abce18973ae5)

1 / 68      (Adware)
vweb.DLL (vweb Module)  (33ac91c70f3230cfce20cba566bdc4af)

1 / 68      (Adware)
TurboClean.exe  (98aabf1f43627d5755a15379449795ed)

1 / 68      (Adware)
unset.exe  (fdf15728d302f2f914c674c2b88122c7)

1 / 68      (Adware)
freeaniuc.exe  (f710688df86e0ad95c1584cf17032ec9)

1 / 68      (Adware)
freeani.exe  (27a84d7ca382e1fb076719bc686bd720)

1 / 68      (Adware)
TurboClean.exe  (3f519a9fc581c2f1885c5ade2525d2ee)

1 / 68      (Adware)
poweroffmanager.exe  (a135a913731cd49821e9bf357df75ce1)

1 / 68      (Adware)
vweb.DLL (vweb Module)  (7af844bc8111531999b9610bf7fac7b1)

1 / 68      (Adware)
donkey.exe (eMule by http://www.emule-project.net)  (7fc3aa7882854ecf40da34dd913caa5b)

1 / 68      (Adware)
u.exe  (1410a201a25ec8cd3f3d09b07736c724)

1 / 68      (Adware)
show.exe  (3c61e354a02f520ab35a4dc3bcde1fa1)

1 / 68      (Adware)
flvtool2.exe (Exerb by Exerb Project)  (ddf19f8458f3b9116f4bfbd8a8debb98)

1 / 68      (Adware)
ffplay.exe  (ad4a7a68dae720fc48e64710eccf5db3)

1 / 68      (Adware)
ffmpeg.exe  (9dfed054da552997baa1ca1d6ee9a4df)

1 / 68      (Adware)
uninstall.exe  (57eb29b42fa9298528c01221947c0539)

1 / 68      (Adware)
mainbar.dll  (ee3e9710e210dc996a55a1d27f377e6b)

1 / 68      (Adware)
internetsearchcheck.exe  (2f16f79af8d38d7e85bdac0fb11f661a)

1 / 68      (Adware)
VisualWeb.exe  (1d97fe70402b24ed061f58f7f00907ab)

1 / 68      (Adware)
005505c.exe  (e6c6ae82e4616af8d4ded1cba94be4d6)

The certificates below are also signed by Mediaclick.

4995688FF6DA3C9BEAA792BB26023CA2  (Mar 03, 2010 to Mar 04, 2011)

10DCB8E8E4CCBA8287CA3E7D2CAB6B80  (Jan 31, 2008 to Jan 30, 2009)

* Note, the details and description above are based on the code signing digital signature issued to Mediaclick by Thawte Consulting (Pty) Ltd. on February 02, 2009 with the serial number '1ea80c81cc69b9b71655baca73403b94'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.