home

NanJing WangYa Computer Co., Ltd.

Publisher Information

NanJing WangYa Computer Co., Ltd. is a software developer located in nanjing, Jiangsu in China*.
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
12/31/2008 8:00:00 AM

Valid to:
1/1/2010 7:59:59 AM

Subject:
CN="NanJing WangYa Computer Co., Ltd.", O="NanJing WangYa Computer Co., Ltd.", L=nanjing, S=jiangsu, C=CN

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
0b46a281c3101c09a071e2189475e63e

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Avira AntiVirus
TR/Crypt.XPACK.Gen, TR/VB.Agent.b.2, TR/Agent.418992
50.00%

F-Prot
W32/VB-Backdoor-PEK-based!Maxim, W32/VB-Backdoor-HMR-based!Maxim
50.00%

McAfee
Generic VB.b
33.33%

Fortinet FortiGate
W32/VB.B!tr
33.33%

Quick Heal
(Suspicious) - DNAScan
16.67%

Clam AntiVirus
PUA.Packed.ASPack
16.67%

Comodo Security
Heur.Suspicious
16.67%

Norman
Suspicious_Gen2.GOANL
16.67%

Sophos
Mal/Generic-S
16.67%

Qihoo 360 Security
Trojan.Generic
16.67%

1 / 68      (inconclusive)
ghywoyhd.exe (Client by WY)  (ef61075844d3433928a7fa7e2c8cae98)

0 / 68
workw3in.dll  (818472f7bba66312589936645e2cc6cf)

0 / 68
qijbuw.exe (Client by WY)  (5d57dcdb7404e0dd74595b1bc3f9bf4f)

0 / 68
windlwork.dll  (a951be1a99a15b40339b4adaf8263231)

0 / 68
system.dll (apposinforun by wangya)  (26e8fd0f4c5f937279d34b9ac5224019)

0 / 68
zipit.dll  (f18225265c2a9b042589cf3271fcb38a)

0 / 68
workw3in.dll  (3199106a1dcf3dbca34d90ba83d1871a)

0 / 68
windlwork.dll  (5921d3b3f0152278249b8061dd568556)

0 / 68
system.dll (shellrun by wangya)  (43ad8a9245c0080751fdae413eb9f21e)

0 / 68
windlwork.dll  (8a8cbb4a05a3f563f6af0d6e71750b74)

7 / 68      (Malware)
amgmqdpm.exe (Client by WY)  (4b24d32f0e6aae46e3ee9b06a9d5a95a)

0 / 68
windlwork.dll  (c449415e31fad26007c491f260960b29)

4 / 68      (inconclusive)
symuavbqb.exe (Client by WY)  (8bc23ac7dd47785677f5087574f6a53a)

0 / 68
system.dll (Dbsqlinfo)  (513a22f56f31a8f03ad06a6d9932d927)

0 / 68
windlwork.dll  (fd2c7d064faa94b879d8dabb0e9cc67e)

2 / 68
majmonitoring.exe (MajMonitoring by WangYa)  (7d205c59239d8612ff466d2dfdb8c7a2)

0 / 68
setup.exe (OsMonitor Server by WangYa Computer Co.,Ltd)  (c6bc3304ee92a5d818b60012175310b1)

0 / 68
eaagle.dll (WangYaDll)  (14afa500619a17ed5c8bd06233da3038)

2 / 68      (inconclusive)
WorkWinLm.exe (WorkWin Client by Nanjing WangYa Computer Co . , )  (9cad7fa6c61735e8bad22aac1b8cdcfc)

0 / 68
zipdll.dll (Delphi Zip)  (76f9b41c5a4f8df09c6bf014229e6784)

0 / 68
hbyabeihua.lib (FileBackUp by NanJing WangYa)  (2de948b0972cb6e67744a9359e6a7aca)

0 / 68
zipit.dll (Info-ZIP's WiZ by Info-ZIP)  (04c223b53c56a4a3f53bcc1a0c60e29e)

0 / 68
wyimage.dll (Intel JPEG Library by Intel)  (eb484aa576cc980748bcb26604789275)

0 / 68
system.dll (Dbsqlinfo)  (3d852161de55fbb2cdd91b31b9e6f416)

0 / 68
windlwork.dll  (334e31351c6c275067630b9f5e014588)

* Note, the details and description above are based on the code signing digital signature issued to NanJing WangYa Computer Co., Ltd. by Thawte Consulting (Pty) Ltd. on December 31, 2008 with the serial number '0b46a281c3101c09a071e2189475e63e'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.