Onesoft Co., Ltd.

Publisher Information

Onesoft Co., Ltd. is a software developer located in Yeonje-gu, Busan in Korea*. The company is a primary distributor of unwanted software.
Authority:
Thawte, Inc.

Valid from:
9/7/2012 9:00:00 AM

Valid to:
9/8/2013 8:59:59 AM

Subject:
CN="Onesoft Co., Ltd.", O="Onesoft Co., Ltd.", L=Yeonje-gu, S=Busan, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
146b18330da6ca8d2fbf17db9f7db486

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OnesoftCo.i, PUP.OnesoftCo.I, PUP.OnesoftCo (M), PUP.OnesoftC (M), PUP.OnesoftC.Installer (M), PUP (M)
100.00%

nProtect
Adware/W32.Agent.491384, Adware/W32.Agent.319352
10.00%

McAfee
RDN/Generic PUP.x!ws, Adware-FunPop.a
10.00%

Malwarebytes
Adware.Kraddare, Adware.FunPop.K
10.00%

Trend Micro House Call
TROJ_GEN.R047H0AI713, TROJ_GEN.R0CBC0OIG13
10.00%

Comodo Security
TrojWare.Win32.Downloader.Adload.EN, ApplicUnwnt
10.00%

Dr.Web
Trojan.DownLoader9.54842, Trojan.DownLoader10.12135
10.00%

VIPRE Antivirus
Trojan.Win32.Generic, Funpop
10.00%

Trend Micro
TROJ_SPNV.03H513, TROJ_GEN.R0CBC0OIG13
10.00%

McAfee Web Gateway
RDN/Generic PUP.x!ws, Adware-FunPop.a
10.00%

1 / 68      (Adware)
fish_ser_setbunb_1907_31.exe  (932b7923e6ea79307f3ba27fbb682ddc)

1 / 68      (Adware)
earth3d_setbunb_257_39.exe  (7e1a98939994f8e071405a7a8983fd74)

1 / 68      (Adware)
dbz_tribute_lunatic_setbuna_1894_2.exe  (c06bc36a7439cb07b2d979fcfa806aac)

1 / 68      (Adware)
cdspace7litesetup_setbund_1263_9.exe  (c295aa13d1ac533d195a5a2454e0203d)

1 / 68      (Adware)
odin3v1.85_setbune_768_8.exe  (afd7d4d65facdfbca7f5d86cce08d91e)

1 / 68      (Adware)
mkeyins.exe (mkeyins)  (51f34053b2e1ea1ddc8e2e278f5f6849)

1 / 68      (Adware)
magic_one_install_full_setbune_516_5.exe  (0ab72d55a4f7a6cfdd1605e64479263f)

1 / 68      (Adware)
jre6u26windowsi586_setbung_776_5.exe  (456f0e29b221e7957ec39ffbff334be9)

1 / 68      (Adware)
freemp3converter3_setbuni_1542_40.exe (setbun by onesoft)  (b7ea6572bba27441d368dbb6d927813f)

1 / 68      (Adware)
mine_talchul_setbuni_2213_12.exe (setbun by onesoft)  (ab0fe39670d79e120f0f0a095609825f)

1 / 68      (Adware)
busdriver_setup_f471net_1548_33.exe  (cfd9da9a0e78c4610f21a1fa62f90069)

1 / 68      (Adware)
mkeyins_joripong.exe (mkeyins)  (c5375038916da3068aaf6a7b3159e94e)

1 / 68      (Adware)
fastpingsetup_setbund_834_4.exe  (f7ba35402f035cd8ce2f98af8f636b90)

1 / 68      (Adware)
khanhin_bchoi.exe (khancho)  (748545414168b621d6e89f84a162c3e9)

1 / 68      (Adware)
hnctt20_setbunc_78_40.exe  (f5dff9a546fdf05642ea04ed4c132633)

1 / 68      (Adware)
mkeyins_joripong.exe (mkeyins)  (50a27f08b1133ec3cc39f22d6df29e35)

1 / 68      (Adware)
minecraftv1.8.1_setbunf_1338_8.exe  (54564dbab4731c44285f6a112662fcb8)

1 / 68      (Adware)
hamachi2_setbung_1409_12.exe  (5898ae6911c3f859a6709dda0a12681d)

18 / 68    (Adware)
mcbolins.exe  (1608fb91f2fbcfeb3d4766f750c0472e)

28 / 68    (Adware)
Dragon_Age_II_v2.0_Trainer_getproa_682_41.exe  (690514254a4347e876fb9524d82fc087)

Downloads URLs for files signed by Onesoft Co., Ltd..

18 / 68    (Adware)
http://update1.lottomeca.com/mecabol/.../mcbolins.exe  (1608fb91f2fbcfeb3d4766f750c0472e)

28 / 68    (Adware)

The following websites host and distribute files published by Onesoft Co., Ltd..

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Onesoft Co., Ltd. by Thawte, Inc. on September 07, 2012 with the serial number '146b18330da6ca8d2fbf17db9f7db486'.