home

TGSM Inc.

Publisher Information

TGSM Inc. is a software developer located in "Haeundae-gu ", Busan in Korea*. The company is a primary distributor of unwanted software. Thre are 4 additional code signing certificates issued to this publisher.
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
1/9/2009 3:48:02 PM

Valid to:
1/9/2010 3:48:02 PM

Subject:
CN=TGSM Inc., OU=Dev Team, O=TGSM Inc., L="Haeundae-gu ", S=Busan, C=KR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
3cf28bf78b7d2c503c83f61ab56bafa8

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OpenShopper.TGSM.Installer (M), PUP.OpenShopper.TGSM (M), PUP.OpenShopper (M)
100.00%

Malwarebytes
Adware.ShareBox
5.00%

VIPRE Antivirus
Trojan.Win32.Generic
5.00%

Norman
Downloader
5.00%

Clam AntiVirus
Adware.Openshopper-2
5.00%

NANO AntiVirus
Trojan.Win32.Kraddare.ctyrgy
5.00%

Comodo Security
UnclassifiedMalware
5.00%

Avira AntiVirus
Adware/OpenShopper.E.39
5.00%

McAfee
Artemis!25B67FA48ECC
5.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
5.00%

1 / 68      (Adware)
StudyFileCtrl.dll (by TGSM)  (bbf65d00bd26c7a971b1b87a6bcf6e07)

1 / 68      (Adware)
112289.exe (by http://studyfile.co.kr)  (c26d509584d33b771c018641222f06f5)

1 / 68      (Adware)
ShareBoxUpdate.exe (SHAREBOX UPDATE by TGSM)  (fcfe0bf5e37ee185da0da5c6cd4e1908)

1 / 68      (Adware)
nPrivacyRC.exe (nPrivacyRC by TGSM)  (d589d8fe20f887c136e74aacd0925279)

1 / 68      (Adware)
nPrivacyC.exe (nPrivacyC by TGSM)  (d99b507db0ad5e4cfa340364e34c45f9)

1 / 68      (Adware)
nPrivacy.exe (nPrivacy by TGSM)  (3406bd91971bdb38ef3c24dbdd6969b4)

1 / 68      (Adware)
WizzonUpdate.exe (Wizzon)  (d6af3b47045084629c7b5d34128f2a25)

1 / 68      (Adware)
wizzon.exe (Wizzon)  (b4d59271c56d720da923babcea79ef00)

1 / 68      (Adware)
Wizzon.dll (Wizzon)  (c7535f4905c6fea395ebabc379431d52)

1 / 68      (Adware)
Update.exe (Wizzon by TGSM)  (dad09c8188f0536253047213c13b7c7f)

1 / 68      (Adware)
WizzonUpdate.exe (Wizzon)  (f60c1775ea5e371ca139f19672aadbd3)

1 / 68      (Adware)
wizzon.exe (Wizzon)  (5c0f3752b5810f7485cb2191931258dc)

1 / 68      (Adware)
studyfileshotcut.exe  (8a60930cf5136ea1acf1f4e68681388d)

1 / 68      (Adware)
npupdate.exe (nPrivacy by http://nprivacy.co.kr)  (8baad0ee28bae005eaaffe3474c0d7ce)

1 / 68      (Adware)
StudyFileC.exe (STUDYFILE UPDATE by TGSM)  (899dea8c8745c8f058aecb49c36ee6eb)

1 / 68      (Adware)
shareboxshortcut.exe  (b451f8942af44dde178597ef68702963)

1 / 68      (Adware)
npupdate.exe (nPrivacy by http://nprivacy.co.kr)  (491cfd8b944b1043fb82940f42bdc097)

1 / 68      (Adware)
nomgameshortcut.exe  (e77663d96e396da45d00700bc1fa9dd1)

1 / 68      (Adware)
nomcartoonshortcut.exe  (7d79ce3f7d004f326e51448388b9a83b)

15 / 68    (Adware)
setup.exe (by http://studyfile.co.kr)  (25b67fa48ecc6e2014e2550a554046b9)

The certificates below are also signed by TGSM Inc..

7D8725772359BB44707B7E208AE915C2  (Mar 17, 2013 to May 17, 2014)

7193DB486426289A17603DC315513E28  (Mar 05, 2012 to Apr 05, 2013)

5110A6616204B0264E74F3527FA2AA76  (Feb 10, 2011 to Mar 12, 2012)

655F3EAF0D3E7A560B415FFE5611AFDD  (Dec 14, 2009 to Feb 13, 2011)

* Note, the details and description above are based on the code signing digital signature issued to TGSM Inc. by Thawte Consulting (Pty) Ltd. on January 09, 2009 with the serial number '3cf28bf78b7d2c503c83f61ab56bafa8'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.