Qiwang Computer

Publisher Information

Qiwang Computer is a software developer located in Nanning, Guangxi in China*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
5/30/2007 8:00:00 PM

Valid to:
5/30/2008 7:59:59 PM

Subject:
CN=Qiwang Computer, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Qiwang Computer, L=Nanning, S=Guangxi, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
502228010cfce690e807ab1a1a2a72b9

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.QiwangComputer.S, PUP.QiwangComputer.Installer (M), PUP.QiwangCo.Installer (M), PUP (M)
100.00%

ESET NOD32
Win32/Adware.RegistryEasy (variant)
20.00%

Norman
RegistryEasy.DI, W32/Troj_Generic.AOZFY
13.33%

avast!
Win32:Adware-gen [Adw]
13.33%

Comodo Security
UnclassifiedMalware
13.33%

Sophos
Sus/Behav-269
6.67%

McAfee Web Gateway
Artemis!81F0A14D6B36
6.67%

Panda Antivirus
Suspicious file
6.67%

Prevx
Heuristic: Suspicious Self Modifying File
6.67%

VirusBuster
Adware.RegistryEasy!o8rngHh4qXo
6.67%

1 / 68      (Adware)
evidencesmart_setup.exe (by EvidenceSmart)  (8e7935ed2461558f9c52b483911374df)

1 / 68      (Adware)
unp263975056.tmp (by RegistryEasy)  (baeb28b074668c26ccc4e2f70e62544d)

1 / 68      (Adware)

1 / 68      (Adware)
registryeasy v4.0.exe (by RegistryEasy)  (fae999c19c62b03f66a91dd8e4bc84e8)

1 / 68      (Adware)

1 / 68      (Adware)
registryeasy.exe (by RegistryEasy)  (2b0718385f29174f99adb0d54ef33b38)

1 / 68      (Adware)

1 / 68      (Adware)
registryfast v4.0.exe (by RegistryFast)  (d9915538be1c134c10e2c0d690cb5540)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

6 / 68      (Adware)
registryeasy.exe (by RegistryEasy)  (bc50445671a0ceab2e43cc9f29ee1f46)

12 / 68    (Adware)
registrygenius.com_setup.exe (by RegistryGenius)  (144d0c163e4394c437a634e2f463fce8)

2 / 68      (Adware)
registryfast_setup.exe (by RegistryFast)  (32949725f78090301bfbd476e2b04f64)

6 / 68      (Adware)

The following certificate is also signed by Qiwang Computer.

19E46BDB66FF71931FE43DB54F76BE4F  (Jun 15, 2008 to Jun 13, 2011)

* Note, the details and description above are based on the code signing digital signature issued to Qiwang Computer by VeriSign, Inc. on May 30, 2007 with the serial number '502228010cfce690e807ab1a1a2a72b9'.