NanJing WangYa Computer Co., Ltd.

Publisher Information

NanJing WangYa Computer Co., Ltd. is a software developer located in nanjing, Jiangsu in China*.
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
12/31/2008 8:00:00 AM

Valid to:
1/1/2010 7:59:59 AM

Subject:
CN="NanJing WangYa Computer Co., Ltd.", O="NanJing WangYa Computer Co., Ltd.", L=nanjing, S=jiangsu, C=CN

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
0b46a281c3101c09a071e2189475e63e

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Avira AntiVirus
TR/Crypt.XPACK.Gen, TR/VB.Agent.b.2, TR/Agent.418992
42.86%

F-Prot
W32/VB-Backdoor-PEK-based!Maxim, W32/VB-Backdoor-HMR-based!Maxim
42.86%

McAfee
Generic VB.b
28.57%

McAfee Web Gateway
Generic VB.b
28.57%

Fortinet FortiGate
W32/VB.B!tr
28.57%

Quick Heal
(Suspicious) - DNAScan
14.29%

Clam AntiVirus
PUA.Packed.ASPack
14.29%

Comodo Security
Heur.Suspicious
14.29%

Norman
Suspicious_Gen2.GOANL
14.29%

Sophos
Mal/Generic-S
14.29%

1 / 68      (inconclusive)
ghywoyhd.exe (Client by WY)  (ef61075844d3433928a7fa7e2c8cae98)

0 / 68
workw3in.dll  (818472f7bba66312589936645e2cc6cf)

0 / 68
qijbuw.exe (Client by WY)  (5d57dcdb7404e0dd74595b1bc3f9bf4f)

0 / 68
windlwork.dll  (a951be1a99a15b40339b4adaf8263231)

0 / 68
system.dll (apposinforun by wangya)  (26e8fd0f4c5f937279d34b9ac5224019)

0 / 68
zipit.dll  (f18225265c2a9b042589cf3271fcb38a)

0 / 68
workw3in.dll  (3199106a1dcf3dbca34d90ba83d1871a)

0 / 68
windlwork.dll  (5921d3b3f0152278249b8061dd568556)

0 / 68
system.dll (shellrun by wangya)  (43ad8a9245c0080751fdae413eb9f21e)

1 / 68
windlwork.dll  (8a8cbb4a05a3f563f6af0d6e71750b74)

8 / 68      (Malware)
amgmqdpm.exe (Client by WY)  (4b24d32f0e6aae46e3ee9b06a9d5a95a)

0 / 68
windlwork.dll  (c449415e31fad26007c491f260960b29)

5 / 68      (Malware)
symuavbqb.exe (Client by WY)  (8bc23ac7dd47785677f5087574f6a53a)

0 / 68
system.dll (Dbsqlinfo)  (513a22f56f31a8f03ad06a6d9932d927)

0 / 68
windlwork.dll  (fd2c7d064faa94b879d8dabb0e9cc67e)

2 / 68
majmonitoring.exe (MajMonitoring by WangYa)  (7d205c59239d8612ff466d2dfdb8c7a2)

0 / 68
setup.exe (OsMonitor Server by WangYa Computer Co.,Ltd)  (c6bc3304ee92a5d818b60012175310b1)

0 / 68
eaagle.dll (WangYaDll)  (14afa500619a17ed5c8bd06233da3038)

2 / 68      (inconclusive)

0 / 68
zipdll.dll (Delphi Zip)  (76f9b41c5a4f8df09c6bf014229e6784)

0 / 68
hbyabeihua.lib (FileBackUp by NanJing WangYa)  (2de948b0972cb6e67744a9359e6a7aca)

0 / 68
zipit.dll (Info-ZIP's WiZ by Info-ZIP)  (04c223b53c56a4a3f53bcc1a0c60e29e)

0 / 68
wyimage.dll (Intel JPEG Library by Intel)  (eb484aa576cc980748bcb26604789275)

0 / 68
system.dll (Dbsqlinfo)  (3d852161de55fbb2cdd91b31b9e6f416)

0 / 68
windlwork.dll  (334e31351c6c275067630b9f5e014588)

* Note, the details and description above are based on the code signing digital signature issued to NanJing WangYa Computer Co., Ltd. by Thawte Consulting (Pty) Ltd. on December 31, 2008 with the serial number '0b46a281c3101c09a071e2189475e63e'.