» Onesoft Co., Ltd.
Digital Signature
Analysis
Files (20)
Downloads (7)
Distribution (3)
Related (5)

Onesoft Co., Ltd.

Publisher Information

Onesoft Co., Ltd. is a software developer located in Yeonje-gu, Busan in Korea*. The company is a primary distributor of unwanted software.

Authority:

Thawte, Inc.

Valid from:

9/7/2012 9:00:00 AM

Valid to:

9/8/2013 8:59:59 AM

Subject:

CN="Onesoft Co., Ltd.", O="Onesoft Co., Ltd.", L=Yeonje-gu, S=Busan, C=KR

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

146b18330da6ca8d2fbf17db9f7db486

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.OnesoftCo.i, PUP.OnesoftCo.I, PUP.OnesoftCo (M), PUP.OnesoftC (M), PUP.OnesoftC.Installer (M), PUP (M)

100.00%

nProtect

Adware/W32.Agent.491384, Adware/W32.Agent.319352

10.00%

McAfee

RDN/Generic PUP.x!ws, Adware-FunPop.a

10.00%

Malwarebytes

Adware.Kraddare, Adware.FunPop.K

10.00%

Trend Micro House Call

TROJ_GEN.R047H0AI713, TROJ_GEN.R0CBC0OIG13

10.00%

Comodo Security

TrojWare.Win32.Downloader.Adload.EN, ApplicUnwnt

10.00%

Dr.Web

Trojan.DownLoader9.54842, Trojan.DownLoader10.12135

10.00%

VIPRE Antivirus

Trojan.Win32.Generic, Funpop

10.00%

Trend Micro

TROJ_SPNV.03H513, TROJ_GEN.R0CBC0OIG13

10.00%

AhnLab V3 Security

PUP/Win32.Cleang, PUP/Win32.F2Day

10.00%

1 / 68 (Adware)

fish_ser_setbunb_1907_31.exe (932b7923e6ea79307f3ba27fbb682ddc)

1 / 68 (Adware)

earth3d_setbunb_257_39.exe (7e1a98939994f8e071405a7a8983fd74)

1 / 68 (Adware)

dbz_tribute_lunatic_setbuna_1894_2.exe (c06bc36a7439cb07b2d979fcfa806aac)

1 / 68 (Adware)

cdspace7litesetup_setbund_1263_9.exe (c295aa13d1ac533d195a5a2454e0203d)

1 / 68 (Adware)

odin3v1.85_setbune_768_8.exe (afd7d4d65facdfbca7f5d86cce08d91e)

1 / 68 (Adware)

mkeyins.exe (mkeyins) (51f34053b2e1ea1ddc8e2e278f5f6849)

1 / 68 (Adware)

magic_one_install_full_setbune_516_5.exe (0ab72d55a4f7a6cfdd1605e64479263f)

1 / 68 (Adware)

jre6u26windowsi586_setbung_776_5.exe (456f0e29b221e7957ec39ffbff334be9)

1 / 68 (Adware)

freemp3converter3_setbuni_1542_40.exe (setbun by onesoft) (b7ea6572bba27441d368dbb6d927813f)

1 / 68 (Adware)

mine_talchul_setbuni_2213_12.exe (setbun by onesoft) (ab0fe39670d79e120f0f0a095609825f)

1 / 68 (Adware)

busdriver_setup_f471net_1548_33.exe (cfd9da9a0e78c4610f21a1fa62f90069)

1 / 68 (Adware)

mkeyins_joripong.exe (mkeyins) (c5375038916da3068aaf6a7b3159e94e)

1 / 68 (Adware)

fastpingsetup_setbund_834_4.exe (f7ba35402f035cd8ce2f98af8f636b90)

1 / 68 (Adware)

khanhin_bchoi.exe (khancho) (748545414168b621d6e89f84a162c3e9)

1 / 68 (Adware)

hnctt20_setbunc_78_40.exe (f5dff9a546fdf05642ea04ed4c132633)

1 / 68 (Adware)

mkeyins_joripong.exe (mkeyins) (50a27f08b1133ec3cc39f22d6df29e35)

1 / 68 (Adware)

minecraftv1.8.1_setbunf_1338_8.exe (54564dbab4731c44285f6a112662fcb8)

1 / 68 (Adware)

hamachi2_setbung_1409_12.exe (5898ae6911c3f859a6709dda0a12681d)

14 / 68 (Adware)

mcbolins.exe (1608fb91f2fbcfeb3d4766f750c0472e)

25 / 68 (Adware)

Dragon_Age_II_v2.0_Trainer_getproa_682_41.exe (690514254a4347e876fb9524d82fc087)

Downloads URLs for files signed by Onesoft Co., Ltd..

1 / 68 (Adware)

http://blogattach.naver.net/e87df44f506362d5ff1c79497794e29530699620/20130115_239_blogfile/.../earth3d_setbunb_257_39.exe (7e1a98939994f8e071405a7a8983fd74)

1 / 68 (Adware)

http://blogattach.naver.net/a732bb081c2c2d9db057330d3ddca1d57e2ed606/20121113_187_blogfile/.../DBZ_Tribute_LuNaTic_setbuna_1894_2.exe (c06bc36a7439cb07b2d979fcfa806aac)

1 / 68 (Adware)

http://blogattach.naver.net/b520a91967503a8ba443261e2aceb2cc683f5b/20121228_139_blogfile/.../Odin3v1.85_setbune_768_8.exe (afd7d4d65facdfbca7f5d86cce08d91e)

1 / 68 (Adware)

http://blogattach.naver.net/78ed64d4c59b9c406e8eeed8e1037d05a4f60eed96/20121114_164_blogfile/.../Magic_One_Install_Full_setbune_516_5.exe (0ab72d55a4f7a6cfdd1605e64479263f)

1 / 68 (Adware)

http://blogattach.naver.net/56c34afae9b7b26e40a1c0f7cf2b512e88df22c77e/20121119_143_blogfile/.../minecraftv1.8.1_setbung_1338_12.exe (5898ae6911c3f859a6709dda0a12681d)

14 / 68 (Adware)

http://update1.lottomeca.com/mecabol/.../mcbolins.exe (1608fb91f2fbcfeb3d4766f750c0472e)

25 / 68 (Adware)

http://down.downholic.com/down/.../Dragon_Age_II_v2.0_Trainer_getproa_682_41.exe (690514254a4347e876fb9524d82fc087)

Distribution

The following websites host and distribute files published by Onesoft Co., Ltd..

blogattach.naver.net

update1.lottomeca.com

down.downholic.com

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Onesoft Co., Ltd. by Thawte, Inc. on September 07, 2012 with the serial number '146b18330da6ca8d2fbf17db9f7db486'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.