» TasticSurf
Digital Signature
Analysis
Files (63)
Downloads (1)
Related (54)

TasticSurf

Publisher Information

TasticSurf is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising. There is one additional code signing certificate issued to this publisher.

Authority:

VeriSign, Inc.

Valid from:

11/4/2014 1:00:00 AM

Valid to:

1/4/2016 12:59:59 AM

Subject:

CN=TasticSurf, O=TasticSurf, L=San Diego, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

6d2c37bf960997763055ac9274c52d6c

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.TasticSurf.T, Adware.Yontoo.TasticSurf.V, PUP.Service.TasticSurf.K, PUP.TasticSurf.Q, PUP.TasticSurf.m, PUP.TasticSurf.N, PUP.Yontoo.TasticSurf (M), Adware.Yontoo.TasticSurf (M), PUP.Yontoo.TasticSu (M), Adware.Yontoo.TasticSu (M), PUP.Yontoo (M)

100.00%

VIPRE Antivirus

Threat.4741131, Yontoo, Threat.4150696, Trojan.Win32.Generic

16.00%

ESET NOD32

MSIL/BrowseFox (variant), Win32/BrowseFox, Win64/BrowseFox.CG (variant)

14.00%

K7 AntiVirus

Trojan , Unwanted-Program

12.00%

F-Prot

W32/A-6768115d, W32/A-44ec90a9, W32/A-de841313, W64/A-59c9c70a

12.00%

Baidu Antivirus

Adware.MSIL.BrowseFox, Adware.Win32.BrowseFox

12.00%

McAfee

BrowseFox-SJ, Artemis!1950EB5702B3

10.00%

G Data

Win32.Adware.BrowseFox, Gen:Variant.Adware.SwiftBrowse, Adware.SwiftBrowse.CH

10.00%

Avira AntiVirus

ADWARE/BrowseFox.Gen7

8.00%

IKARUS anti.virus

PUA.MSIL.BrowseFox, AdWare.SwiftBrowse, not-a-virus:AdWare.Yotoon

8.00%

1 / 68 (Adware)

AdvanceElite.PurBrowseG.dll (8c85d589622c86a679b0af3261d2e935)

1 / 68 (Adware)

{51b9c91c-8e38-40ae-80de-58a590512b6b}gt.sys (StdLib) (cf1789935b9d7a3067d3bf5c5d5641e7)

1 / 68 (Adware)

{51b9c91c-8e38-40ae-80de-58a590512b6b}t.sys (StdLib) (dc19038cadf1bc813f4c5464a2f85a3c)

1 / 68 (Adware)

AdvanceElite.BrowserFilter.dll (91c1af8f8c89422669625b14aef6ba45)

1 / 68 (Adware)

AdvanceEliteBrowserFilter.exe (6f4e778b512a2bf40c0610cb437cb137)

1 / 68 (Adware)

advanceelite.browserfilter.helper.dll (8e0c609ccd59854ebd0e38d3e8518d24)

1 / 68 (Adware)

advanceelite.browseradapter.exe (969cd7e159350e2258b057fdea7620e6)

1 / 68 (Adware)

AdvanceElite.GCUpdate.dll (5494c52070de24221af161128b580a23)

1 / 68 (Adware)

{51b9c91c-8e38-40ae-80de-58a590512b6b}gw.sys (StdLib) (9dce13cc1afb639a225dba4b2198dd95)

1 / 68 (Adware)

advanceelite.purbrowse64.exe (1d69c4eaf1af5be7a7f5866cff394bd2)

1 / 68 (Adware)

advanceelitebho.dll (AdvanceElite) (f5762cd1c88c76c3d60a4f5cff3c17ff)

1 / 68 (Adware)

advanceelite.purbrowse64.exe (dc4e23bdf88e33a520fe4bb45f8cd8a2)

1 / 68 (Adware)

advanceeliteun.exe (eda927f78ddb019626d0992a92ac448b)

1 / 68 (Adware)

advanceelite.brt.helper_1.exe (c8f2a4793ea4c982013c3c24c5b9e552)

1 / 68 (Adware)

advanceelite.browseradapter64.exe (42adfc9165b7a5b2ff5a6bd52ba33b17)

1 / 68 (Adware)

AdvanceElite.Repmon.dll (c23680d25d3529ba7b40e8a65aed97a4)

1 / 68 (Adware)

AdvanceElite.BRT.dll (8a711cd756c575014f91f80365fd9be0)

1 / 68 (Adware)

advanceelite.purbrowse64.exe (efbafc88e093fb2bff4b903a934392dc)

1 / 68 (Adware)

{51b9c91c-8e38-40ae-80de-58a590512b6b}gw64.sys (StdLib) (4a869286c70d0c448b0602450aa4f74d)

1 / 68 (Adware)

{51b9c91c-8e38-40ae-80de-58a590512b6b}w.sys (StdLib) (d02a6c52d6c379b16f9fbec619670a2a)

1 / 68 (Adware)

{51b9c91c-8e38-40ae-80de-58a590512b6b}t.sys (StdLib) (847ac3b6e1681d4e5109f23ca68eab35)

1 / 68 (Adware)

{51b9c91c-8e38-40ae-80de-58a590512b6b}64.dll (XVRNT by TODO: <Company name>) (799af8ad5721a8eef2a6446bc4492874)

1 / 68 (Adware)

{51b9c91c-8e38-40ae-80de-58a590512b6b}.dll (XVRNT by TODO: <Company name>) (5b51984f14dd1a5786abbf54a3af2ae8)

1 / 68 (Adware)

51b9c91c8e3840ae80de64.dll (77d256ec05881c2ee59592ce0639f0c4)

1 / 68 (Adware)

51b9c91c8e3840ae80de.dll (30bf39778c3e785221652a6bd13dc62a)

1 / 68 (Adware)

AdvanceElite2014111821.exe (63c783eb04317e6fba32e03f74ce7375)

1 / 68 (Adware)

AdvanceElite.PurBrowse.dll (c4f3ced8d1e042d0d80f58a41182a0f3)

1 / 68 (Adware)

AdvanceElite.OfSvc.dll (c045ddf6e6ac940500eb90fba5841bec)

1 / 68 (Adware)

AdvanceElite.GCUpdate.dll (fc264afa6445c20936b3123822447dbf)

1 / 68 (Adware)

AdvanceElite.FFUpdate.dll (c5d877253e5112ce8e521e9e40ed1478)

Latest 30 of 63 files

Downloads URLs for files signed by TasticSurf.

1 / 68 (Adware)

http://install.advanceelite.com/ud (advanceeliteun.exe)

The following certificate is also signed by TasticSurf.

7A9A017A31DB5E88B561FEDAF60E6163 (Nov 27, 2013 to Nov 28, 2014)

The following publishers (by Authenticode signature organization name) are related.

30 of 54 publishers

* Note, the details and description above are based on the code signing digital signature issued to TasticSurf by VeriSign, Inc. on November 04, 2014 with the serial number '6d2c37bf960997763055ac9274c52d6c'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.