Rock Turner is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising. There is one additional code signing certificate issued to this publisher.
3/14/2014 7:00:00 AM
3/15/2015 6:59:59 AM
CN=Rock Turner, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Rock Turner, L=Santa Monica, S=California, C=US
Detections (100% detected)
PUP.Yontoo.RockTurner (M), Adware.Yontoo.RockTurner (M)
Threat.4150696, Trojan.Win32.Generic, Adware.SearchProtect
Trojan.BPlug.309, Trojan.Yontoo.1734, Trojan.BPlug.123, Trojan.BPlug.100
Win32:BrowseFox-EW [PUP], Win32:Amonetize-GP [PUP], Win32:BrowseFox-C [PUP]
Win64/BrowseFox.J potentially unwanted application, Win32/BrowseFox.M potentially unwanted application
W32/A-caf5c463, W64/A-59c9c70a, W64/A-7883d091, W32/MegaBrowse.A
Win.Adware.Agent-12778, Win.Adware.Swiftbrowse-497, Win.Adware.Swiftbrowse-773, Win.Adware.Swiftbrowse-20
PUA.Yotoon, Riskware.Agent, Trojan.BPlug
Adware.Yotoon.Win64.6, Adware.Yotoon.Win64.14, Adware.Yotoon.Win64.3, Adware.Kranet.Win32.17
AhnLab V3 Security
Win-PUP/BrowseFox.Gen, Trojan/Win64.SwiftBrowse, PUP/Win32.Agent
The following certificate is also signed by Rock Turner.
The following publishers (by Authenticode signature organization name) are related.
* Note, the details and description above are based on the code signing digital signature issued to Rock Turner by VeriSign, Inc. on March 14, 2014 with the serial number '71a33d3a2d147e26fb179221834af81f'.