home

Suzhen Zhou

Publisher Information

Suzhen Zhou is a software developer located in Wuhan, Hubei in China*.
Authority:
VeriSign, Inc.

Valid from:
10/17/2012 8:00:00 PM

Valid to:
10/18/2015 7:59:59 PM

Subject:
CN=Suzhen Zhou, OU=Individual Developer, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=No Organization Affiliation, L=Wuhan, S=Hubei, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
13a691b148e6d8d0891f888e6605e0dd

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

Qihoo 360 Security
Win32/Trojan.Adware.37e, Trojan.Generic
86.67%

Bkav FE
W64.HfsAutoA
13.33%

ESET NOD32
Win32/InstallMonetizer.AF
6.67%

Reason Heuristics
PUP.InstallMonetizer.Bundle (M)
6.67%

ESET NOD32
Win32/InstallMonetizer.AF potentially unwanted application
6.67%

0 / 68
1q0qrwiy.sys  (b7fa532c339f4c6de810ca16ed5fb8a7)

2 / 68
77fgztk0.sys  (eabe0d0596c030fa296801618e368acc)

2 / 68
jxeaib7g.sys  (684250e6cabd7ca15467fca64129b79e)

0 / 68
hesibiwx.sys  (d615c70fc729263ec2f866d51b55406f)

0 / 68
istartmenu.exe (iStartMenu by candysoft.com)  (4fb2e9d91514479704cae1e8ad6b3fb9)

0 / 68
iStartMenuDLL.dll (iStartMenu by CandySoft.com)  (9b600aaad7c611ffd8c6e3b700aff5be)

0 / 68
iStartMenu.exe (iStartMenu by CandySoft.com)  (e9e0112bcb5b3db2f66baed731a3c46c)

0 / 68
iStartMenuService.exe (iStartMenu by CandySoft.com)  (358a603605eb74597dce3670aaf82f1e)

0 / 68
ipod-to-pc-transfer.exe (CopyToy by CandySoft.com)  (a2a220b3427dc97869bb0708b7764e0b)

0 / 68
istartmenu8.exe (iStartMenu by Windows8StartMenu.com)  (5642e678fb2ea1ec4c3772f262041de1)

0 / 68
isxdl.dll (ISX Download DLL by Bjørnar Henden)  (8304f69d23e24ec65dca794d7be8e17b)

1 / 68      (inconclusive)
istartmenu8.exe (iStartMenu by iStartMenu.com)  (5051d3caeac407be2bc3e245b9e3ab86)

0 / 68
wkvbgqc.exe (GameLaunch.exe by Sunward Information Technology Co.Ltd)  (307580fa4faf0604debcb6ae21bdab96)

2 / 68      (PUP)
istartmenu.exe (iStartMenu by iStartMenu.com)  (b101a7a97830b48c20e114aa26ef1c0c)

1 / 68
iStartMenu.exe (iStartMenu by CandySoft.com)  (a946f1a5fbc3acd4238a8d5f92a5f95b)

1 / 68
iStartMenuDLL.dll (iStartMenu by CandySoft.com)  (4f9b679bc1887665e4da4d8088699db3)

1 / 68
istartmenu.exe (iStartMenu by candysoft.com)  (63026c769dbd73037a2429fd0d95ea50)

1 / 68
iStartMenuService.exe (iStartMenu by CandySoft.com)  (fae28932a71ce43ae00ea0323655a57c)

1 / 68
iStartMenuDLL.dll (iStartMenu by CandySoft.com)  (f06ba276b6f4c3111ebee3733647663e)

1 / 68
iStartMenu.exe (iStartMenu by CandySoft.com)  (9480871bbf3357f3de1387ee40c107f9)

0 / 68
copytoy.exe (CopyToy by CandySoft.com)  (3c23f528dcc8d8b21f53b1ee1caa12f8)

1 / 68
zlib.net.dll (ZLIB.NET by ComponentAce)  (bf7582ba8c1fd8dfd3f1a70d61327149)

1 / 68
taglib-sharp.dll  (91725c6fdaa87f14118fc62be3af50ab)

0 / 68
System.Data.SQLite.dll (System.Data.SQLite by http://sqlite.phxsoftware.com)  (984afc9f216bb23f88720be065a96f91)

0 / 68
sqlite3.dll  (eb2d3df7c1fc22b9ff444cef6d409a5f)

1 / 68
icu.net.dll (icu.net by SIL International)  (14391df9c22fc945bf5954300c34e514)

1 / 68
CopyToy.exe (CopyToy by CandySoft.com)  (0ecef69aa26717ffa3ba0ceb0e054d17)

1 / 68
copytoy.exe (CopyToy by CandySoft.com)  (ceea87a3b9bd7b8c8d749e402950847d)

Downloads URLs for files signed by Suzhen Zhou.

1 / 68
http://files.downloadnow.com/s/software/13/58/25/.../copytoy.exe  (ceea87a3b9bd7b8c8d749e402950847d)

1 / 68
http://candysoft.com/.../istartmenu.exe  (63026c769dbd73037a2429fd0d95ea50)

1 / 68
http://candysoft.com/.../copytoy.exe  (ceea87a3b9bd7b8c8d749e402950847d)

1 / 68
http://software-files-a.cnet.com/s/software/13/58/25/.../copytoy.exe  (ceea87a3b9bd7b8c8d749e402950847d)

The following websites host and distribute files published by Suzhen Zhou.

candysoft.com

software-files-a.cnet.com

* Note, the details and description above are based on the code signing digital signature issued to Suzhen Zhou by VeriSign, Inc. on October 17, 2012 with the serial number '13a691b148e6d8d0891f888e6605e0dd'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.