» Samsung
Digital Signature
Analysis
Files (22)

Samsung

Publisher Information

Samsung is a software developer located in Korea*. Thre are 3 additional code signing certificates issued to this publisher.

Authority:

Samsung

Valid from:

1/17/2011 1:00:00 AM

Valid to:

1/17/2012 12:59:59 AM

Subject:

E=supp@samsung.com, CN=Samsung, O=Samsung, C=KR

Issuer:

E=supp@samsung.com, CN=Samsung, O=Samsung, C=KR

Serial number:

00f41866b8e5e7fc49a23bf8306014c3c4

Scanner detections:

Malware distribution (82% detected)

Scan engine

Details

Detections

ESET NOD32

Win32/Spy.Banker.XAZ (variant), Win32/Spy.Banker.WZJ (variant), Win32/Spy.Banker.WYC (variant), Win32/Spy.Banker.WXQ (variant)

95.00%

Emsisoft Anti-Malware

Trojan-PWS.Banker6!IK, Trojan-Spy.Win32.Agent!IK, Trojan-Spy.Win32.Farko!IK, Trojan.Generic.6870552, Trojan.Generic.5802526

90.00%

McAfee

Generic PWS.y!d2h, Artemis!61AD6571AF5E, Artemis!18BB0BDD6094, Artemis!E45AEE8BEC77, Artemis!7B88CD4DB17E, Artemis!D1608C0564D3, Artemis!1E4816817C3D, Artemis!C4EB128908D7, Generic PWS.y!dle

85.00%

VIPRE Antivirus

Trojan.Win32.Generic, Trojan-Spy.Win32.Agent

85.00%

IKARUS anti.virus

Trojan-PWS.Banker6, Trojan-Spy.Win32.Agent, Trojan-Spy.Win32.Farko, Trojan-Spy.Win32.Savnut, Trojan-PWS.Agent, Virus.Win32.Vundo

85.00%

Kaspersky

Trojan-Spy.Win32.Farko, Trojan-Spy.Win32.Agent, HEUR:Trojan.Win32.Generic, not-a-virus:HEUR:Adware.Win32.Agent

80.00%

Bitdefender

Trojan.Generic.KDV.492806, Gen:Variant.Graftor.Elzob.126, Trojan.Generic.7017810, Trojan.Generic.6870552, Trojan.Generic.5802526

80.00%

Comodo Security

UnclassifiedMalware, TrojWare.Win32.Spy.Agent.bpdv

80.00%

F-Secure

Trojan.Generic.KDV.492806, Gen:Variant.Graftor.Elzob.126, Trojan.Generic.7017810, Trojan.Generic.6870552, Trojan.Generic.5802526

80.00%

G Data

Trojan.Generic.KDV.492806, Gen:Variant.Graftor.Elzob.126, Trojan.Generic.7017810, Trojan.Generic.6870552, Trojan.Generic.5802526

80.00%

22 / 68 (Malware)

acroiehelpe.dll (Adobe PDF Reader Link Helper by Adobe Systems) (dc23fc5d2d73b0499ba9166ff9cb9bf2)

16 / 68 (Malware)

acroiehelpe028.dll (Adobe PDF Reader Link Helper by Adobe Systems) (f4f16733b6ca5cef7b5cd43d0992a65e)

26 / 68 (Malware)

acroiehelpe.dll (Adobe PDF Reader Link Helper by Adobe Systems) (e964f666e93f597ca863443e596c2873)

3 / 68 (Malware)

acroff018.dll (976316896517eeb71144420583ccb03d)

0 / 68

acroiehelpe056.dll (Adobe PDF Reader Link Helper by Adobe Systems) (bbef4ec1c15e09eb8c72717192446c52)

34 / 68 (Malware)

acroiehelpe067.dll (Adobe PDF Reader Link Helper by Adobe Systems) (40f6d779232d0e503ca1aef0f89bc78f)

28 / 68 (Malware)

acroff.dll (b72dd9d5967c74584639d22e435213a1)

4 / 68 (inconclusive)

acroff058.dll (c4eb128908d760b9924af53a1bee3b3e)

34 / 68 (Malware)

acroff053.dll (e2c68807d5fd7f84863795e489d49dce)

0 / 68

acroff009.dll (69f5c6a788edeb4510c6dc22b9b8f305)

9 / 68 (Malware)

acroiehelpe027.dll (Adobe PDF Reader Link Helper by Adobe Systems) (5f310266d6ce531f517a0501254e7729)

24 / 68 (Malware)

acroff059.dll (b1b919578de0c06a6fd558a85d727405)

23 / 68 (Malware)

acroff.dll (1e4816817c3dfd501e13e137458bc5de)

20 / 68 (Malware)

acroiehelpe.dll (Adobe PDF Reader Link Helper by Adobe Systems) (7e4fd77f7cd96eff88410394af0d4126)

33 / 68 (Malware)

acroiehelpe.dll (Adobe PDF Reader Link Helper by Adobe Systems) (aba13a3e85bd241e4679a5b2431b5d3a)

31 / 68 (Malware)

acroff052.dll (d1608c0564d3bab3394848e4d3ccb8dd)

29 / 68 (PUP)

acroff.dll (7b88cd4db17eed216fc79234dddb87e1)

32 / 68 (Malware)

acroiehelpe032.dll (Adobe PDF Reader Link Helper by Adobe Systems) (e45aee8bec77f45714665adefd5db569)

18 / 68 (Malware)

acroiehelpe058.dll (Adobe PDF Reader Link Helper by Adobe Systems) (18bb0bdd609498a2970d14514a6ecbab)

25 / 68 (Malware)

acroff064.dll (61ad6571af5ed6b78cc3438cc10f15b2)

1 / 68 (inconclusive)

acroff060.dll (fa66a5272d704998d5f57ab9e547f779)

22 / 68 (Malware)

acroiehelpe068.dll (Adobe PDF Reader Link Helper by Adobe Systems) (471507e7181edb6f8525583dcee00659)

The certificates below are also signed by Samsung.

00DFE134E42B8E60A2 (Mar 13, 2007 to Mar 09, 2022)

00A93FAD65187F40449A71C4E9CD091AB9 (Jan 17, 2012 to Jan 18, 2014)

0082254D814D656A2B (Jan 10, 2013 to Feb 09, 2013)

* Note, the details and description above are based on the code signing digital signature issued to Samsung by Samsung on January 17, 2011 with the serial number '00f41866b8e5e7fc49a23bf8306014c3c4'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.