home

suhyeun development

Publisher Information

suhyeun development is a software developer located in Namyangju-si, Gyeonggi-Do in Korea*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.
Authority:
thawte, Inc.

Valid from:
2/26/2015 9:00:00 AM

Valid to:
4/27/2016 8:59:59 AM

Subject:
CN=suhyeun development, OU=IT Team, O=suhyeun development, L=Namyangju-si, S=Gyeonggi-do, C=KR

Issuer:
CN=thawte SHA256 Code Signing CA, O="thawte, Inc.", C=US

Serial number:
6796e46842068495882951a174df5733

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.suhyeundevelopment, PUP.suhyeundevelopment, PUP.suhyeundevelopment (M), PUP.suhyeundevelopment.Toolbar (M), PUP.suhyeundevelopment.Installer (M), PUP.suhyeund.Installer (M), PUP (M)
100.00%

Vba32 AntiVirus
AdWare.PopAd
60.00%

K7 AntiVirus
Riskware , Adware
50.00%

IKARUS anti.virus
not-a-virus:AdWare.PopAd, PUA.PopAd, Trojan.Hider
45.00%

Qihoo 360 Security
HEUR/QVM42.0.Malware.Gen, Win32/Virus.Adware.baa, HEUR/QVM07.1.Malware.Gen, HEUR/QVM42.1.Malware.Gen
45.00%

McAfee
Artemis!24CC4DA6D87D, Artemis!9C10BD25AC6E, Artemis!816AC4A4E3BF, Artemis!51DAFAF1FFC1, Artemis!B49DE9E85410, Artemis!E80BC08DEADC
40.00%

AhnLab V3 Security
PUP/Win32.WizLine, PUP/Win32.savepop, PUP/Win32.PopAd
35.00%

Trend Micro House Call
Suspicious_GEN.F47V0305, TROJ_GE.82C87EE1
30.00%

Bkav FE
W32.HfsAdware
30.00%

AVG
Generic6
30.00%

1 / 68      (Adware)
savepop.exe (Savepop)  (97888f093a4ae7d64a6333b7541d7421)

1 / 68      (Adware)
savepop_agent.exe  (35b75e3e41f6a9230e1a4e4d72758cd5)

1 / 68      (Adware)
savepop_agent.exe  (7d24cecda4a7a52e78500da0b0473fe1)

1 / 68      (Adware)
savepop_agent.exe  (3b9881411d3e81c9ba7ec6f244c53a17)

1 / 68      (Adware)
wizline_agent.exe  (369611467e49c7580da9b1bb956f2184)

1 / 68      (Adware)
wizline_agent.exe  (17762ad14a76b107ec1c560ceab1742a)

9 / 68      (Adware)
wizline_agent.exe  (d5615803d33f2490d09321404ce59892)

30 / 68    (Adware)
kar1b8d.tmp  (85546f4584927f925e34bcddd8027c16)

9 / 68      (Adware)
wizline_agent.exe  (239962423b7686bc4c1205bfe6701079)

33 / 68    (Adware)
savepop_agent.exe  (b49de9e854103b4025c85e054ba14a59)

4 / 68      (Adware)
wzcart.exe (WizLine)  (175546533cd31f71835fcf3ce8dfd5ea)

1 / 68      (Adware)
wizlineuninstall.exe  (c39d5f33eda67ce0985fc068c688e1e9)

11 / 68    (Adware)
wizline_agent.exe  (51dafaf1ffc14c04bb4752e9836f608f)

32 / 68    (Adware)
savepop_agent.exe  (816ac4a4e3bf8b323ffdcde937858837)

6 / 68      (Adware)
WizLine.dll (WizLine)  (9c10bd25ac6e6415d577c0e5943af0c4)

7 / 68      (Adware)
WizLineAgent.exe (WizLine)  (e80bc08deadc18d6ec97c5110b65d8f0)

1 / 68      (Adware)
savepopuninstall.exe  (0e83aee0afd8c986286d71f3a5114269)

15 / 68    (Adware)
savepopagent.exe (Savepop)  (24cc4da6d87dee3095f057aef2eddeaa)

10 / 68    (Adware)
savepop.exe (Savepop)  (97888f093a4ae7d64a6333b7541d7421)

9 / 68      (Adware)
wizline_agent.exe  (a72bb2291d5c1a0911e722add403bc6e)

The following certificate is also signed by suhyeun development.

023624230A00353C0B58CE8D96A17650  (Mar 12, 2014 to Mar 13, 2015)

* Note, the details and description above are based on the code signing digital signature issued to suhyeun development by thawte, Inc. on February 26, 2015 with the serial number '6796e46842068495882951a174df5733'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.