home

Mediaclick

Publisher Information

Mediaclick is a software publisher located in Gangnam-gu, Seoul in Korea*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/3/2010 9:00:00 AM

Valid to:
3/4/2011 8:59:59 AM

Subject:
CN=Mediaclick, O=Mediaclick, L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
4995688ff6da3c9beaa792bb26023ca2

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Startup.Mediaclick, PUP.Mediacli (M), PUP (M)
100.00%

Comodo Security
Heur.Suspicious
6.67%

AVG
MalSign.Adware.70e
6.67%

1 / 68      (Adware)
rtorrentunc.exe  (3663264bdcb0124eb303c55a6e07a645)

1 / 68      (Adware)
rtorrentsetup.exe  (1f4123ab8833ea930513ec402a2865ca)

1 / 68      (Adware)
rTorrentuc.exe (rTorrent by http://www.rTorrent.co.kr)  (a0bc354e267313bb49b001cdd0f7cec8)

1 / 68      (Adware)
rTorrent.exe (rTorrent by http://www.rTorrent.co.kr)  (226ef699a480e64eebd1344de2a13ca6)

1 / 68      (Adware)
unset.exe  (6533d789f8961fe03276eb72288f189b)

1 / 68      (Adware)
TurboClean.exe  (7ef56772357380e3df711dcd9b323be8)

1 / 68      (Adware)
filefinder.exe  (1073fce728d8e30ed976fdea277d4682)

1 / 68      (Adware)
filefinderuc.exe  (76998c0facfca0781d4b5c991d588d7b)

1 / 68      (Adware)
uninst.exe  (1c5eebbb1d029527d7332d0478b4eebc)

1 / 68      (Adware)
icons.dll  (02d0ebd9e39ea189475332552abe5f7d)

1 / 68      (Adware)
internetfavoritesite.exe  (4ea17c87d86f7449117ae1b514d5cd1b)

1 / 68      (Adware)
messageboxb.DLL (messageboxb Module)  (47a325b451fe26adb867c9b06281e83a)

1 / 68      (Adware)
messageboxcheck.exe  (d4b32604154b0484cb522cffc80cd5c3)

1 / 68      (Adware)
init.exe  (5a538a25d9b16005d1d6747a57aea861)

3 / 68      (Adware)
TurboClean.exe  (5dbe7ee0f7e8c3c448188a45fd1b2e97)

Downloads URLs for files signed by Mediaclick.

1 / 68      (Adware)
http://cfile6.uf.tistory.com/.../0362BE4B50EB69BC098156  (rtorrentsetup.exe)

The certificates below are also signed by Mediaclick.

1EA80C81CC69B9B71655BACA73403B94  (Feb 02, 2009 to Jan 30, 2010)

10DCB8E8E4CCBA8287CA3E7D2CAB6B80  (Jan 31, 2008 to Jan 30, 2009)

* Note, the details and description above are based on the code signing digital signature issued to Mediaclick by Thawte Consulting (Pty) Ltd. on March 03, 2010 with the serial number '4995688ff6da3c9beaa792bb26023ca2'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.