TGSM Inc.

Publisher Information

TGSM Inc. is a software developer located in Haeundae-gu, Busan in Korea*. The company is a primary distributor of unwanted software. Thre are 4 additional code signing certificates issued to this publisher.
Remove TGSM Inc. Malware - Powered by Reason Core Security
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
12/14/2009 9:00:00 AM

Valid to:
2/13/2011 8:59:59 AM

Subject:
CN=TGSM Inc., OU=Dev Team, O=TGSM Inc., L=Haeundae-gu, S=Busan, C=KR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
655f3eaf0d3e7a560b415ffe5611afdd

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.TGSM.H, PUP.TGSM.K, PUP.TGSM.G, PUP.TGSM.L, PUP.TGSM.J, PUP.OpenShopper.TGSM.Installer (M), PUP.OpenShopper.TGSM (M)
100.00%

ESET NOD32
Win32/Adware.OpenShopper (variant)
19.51%

VIPRE Antivirus
Trojan.Win32.Generic!SB.0
14.63%

avast!
Win32:Tgsm-A [PUP]
12.20%

Qihoo 360 Security
Win32/Trojan.Adware.37e
12.20%

Malwarebytes
Trojan.Agent, Adware.ShareBox, Adware.KorAd
7.32%

Trend Micro House Call
TROJ_GEN.F47V1005, TROJ_GEN.RCBH1JJ, TROJ_GEN.F47V1008
7.32%

ViRobot
Adware.BomulBox.375344, Adware.BBoxSearchBar.396240, Adware.BBoxSearchBar.357216
7.32%

Clam AntiVirus
Adware.Openshopper-2
7.32%

Norman
W32/DLoader.AKWES, W32/Killav.NEM
4.88%

1 / 68      (Adware)
sqliteencrypt.dll  (1244c452127947d0f9ca03b5b9da2967)

1 / 68      (Adware)
sqliteencrypt.dll  (48101ec4d9cb79123727a340d49a6d72)

1 / 68      (Adware)

1 / 68      (Adware)
TGridManager.exe (TGridManager by TGSM)  (8ffb1de41bc350b031b356313bd60094)

1 / 68      (Adware)
nPrivacyRC.exe (nPrivacyRC by TGSM)  (f96e5955376d5495bed85e4031537698)

1 / 68      (Adware)
nPrivacyC.exe (nPrivacyC by TGSM)  (e454d7e4d58f2340fd2a477ddebd0946)

1 / 68      (Adware)
nPrivacy.exe (nPrivacy by TGSM)  (4b739d1890a088c4a199ed920d9ad690)

1 / 68      (Adware)
NomGameUpdate.exe (NOMGAME UPDATE by TGSM)  (8b2b6274fe746845626a52b4713ce8a8)

1 / 68      (Adware)
setup.exe (by http://nomgame.co.kr)  (621e55e9d428f6da932b0045038f93a8)

1 / 68      (Adware)
12493636.exe (nPrivacy by http://nprivacy.co.kr)  (ec51b39d0cfee9be129201b37b5658c8)

1 / 68      (Adware)
12425869.exe (nPrivacy by http://nprivacy.co.kr)  (60e2becd497b7d3fa4fa69276614c819)

1 / 68      (Adware)
NomGameCtrl.dll (NomGame by MONE)  (2c620619cd7e32cc77a40aa5d00865ab)

1 / 68      (Adware)
setup.exe (by http://jjangq.co.kr)  (1b88875799a3bceff42cba89a55a21cd)

1 / 68      (Adware)
JJangQSearchBar.exe (JJangQSearchBar by TGSM)  (f96cbf6a6e1b615a67afc73e4747c283)

1 / 68      (Adware)
JJangQSearchBarC.exe (JJangQSearchBarC by TGSM)  (e0731b2d5e29a7adb792e10d2e046d44)

1 / 68      (Adware)
JJangQSearchBarHK.dll (JJangQSearchBarHK by TGSM)  (6d81bcd15e4503538277589b2eda746a)

1 / 68      (Adware)
DownsCtrl.dll (by TGSM)  (34c09b5be1bed632eb55471130dbde63)

1 / 68      (Adware)
DownsCtrl.dll (by TGSM)  (2d60c48ad1c05b8ee0519a7b224b8b08)

2 / 68      (Adware)
downsck.exe (DOWNSC by TGSM)  (b646ebb6f9deba2b46c90a7c27356d43)

9 / 68      (Adware)
313462387.exe (by http://jjangq.co.kr)  (786b40bcc2321a1dc31011b3423bbc36)

1 / 68      (Adware)
WebhardAddon.dll (WebhardAddon.dll by WebhardAddon)  (ac6e577a465987296caadd7758c54536)

1 / 68      (Adware)
TGridService.exe (TGridService by TGSM)  (d53071cc19cd75f33540cde8bed729d1)

1 / 68      (Adware)

1 / 68      (Adware)
HoleAddon.dll (HoleAddon by Innogrid)  (dad0ffa58c8eca4f0087009e884764d4)

1 / 68      (Adware)
dsup.exe (by TGSM)  (b0551c9535b378443256262354dea471)

1 / 68      (Adware)
dsdown2.exe (by TGSM)  (82dc0c6f4486ef197c60360726f59aa5)

1 / 68      (Adware)
dsdown.exe (by TGSM)  (e66396471b1e97bb7489f49c88718f7d)

7 / 68      (Adware)
dssupdate.exe (Downs Searchbar by http://downs.co.kr)  (8b758ef3df23760a6be656f85d8f90fa)

7 / 68      (Adware)
SBoxSearchBarC.exe (SBoxSearchBarC by TGSM)  (c50d79fbfcc75b52e90678a45b1035e2)

1 / 68      (Adware)
WebhardAddon.dll (WebhardAddon.dll by WebhardAddon)  (9575437f89f30b3b8ba69c14d3217cdf)

 
Latest 30 of 41 files

The certificates below are also signed by TGSM Inc..

7D8725772359BB44707B7E208AE915C2  (Mar 17, 2013 to May 17, 2014)

7193DB486426289A17603DC315513E28  (Mar 05, 2012 to Apr 05, 2013)

5110A6616204B0264E74F3527FA2AA76  (Feb 10, 2011 to Mar 12, 2012)

3CF28BF78B7D2C503C83F61AB56BAFA8  (Jan 09, 2009 to Jan 09, 2010)

Remove TGSM Inc. Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to TGSM Inc. by Thawte Consulting (Pty) Ltd. on December 14, 2009 with the serial number '655f3eaf0d3e7a560b415ffe5611afdd'.