home

TGSM Inc.

Publisher Information

TGSM Inc. is a software developer located in Haeundae-gu, Busan in Korea*. The company is a primary distributor of unwanted software. Thre are 4 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
3/5/2012 9:00:00 AM

Valid to:
4/5/2013 8:59:59 AM

Subject:
CN=TGSM Inc., OU=EC Team, O=TGSM Inc., L=Haeundae-gu, S=Busan, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7193db486426289a17603dc315513e28

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OpenShopper (M), PUP.OpenShopper.Installer
100.00%

1 / 68      (Adware)
837562.exe  (86c167a3f0d09b6352fd7df7a85d7054)

1 / 68      (Adware)
834359.exe (by http://openkeyword.co.kr)  (9401c0f726b5b444731403468725aa69)

1 / 68      (Adware)
svc_setup.exe (Network Advanced Technology Service by interhouse Co,.Ltd)  (32b5eeb3ef8141bca32dd511b3769807)

1 / 68      (Adware)
BomulBoxUp.exe (by TGSM)  (6317d2a6dffc4f10d39b500fd7c9d8e6)

1 / 68      (Adware)
tmp00012c91 (ButtonGuideC by TGSM)  (f4378db2047151e6a8b563b1e2f15586)

1 / 68      (Adware)
setup.exe (by http://bomulbox.co.kr)  (ea7a89c2e7ede306895e25b78bacab52)

1 / 68      (Adware)
WindInSe.exe  (438a38c11ab6c3cbf2dc2e1df5dd0e73)

1 / 68      (Adware)
WindInD.exe (WindInD by TGSM)  (3c9cdc8a449a65ccb7fa0d2e4b5af19b)

1 / 68      (Adware)
WindInC.exe (WindInC by INTERPLANET)  (336812bb9da86256fbf24f23600dcdd6)

1 / 68      (Adware)
setup.exe (by http://jjangq.co.kr)  (1ad1503e2824bb895d3fd63e28256f54)

1 / 68      (Adware)
WindInSe.exe  (48fdc53e6180e9f083f576b980021334)

1 / 68      (Adware)
WindInD.exe (WindInD by TGSM)  (a2af81d57135ea26241db02673d04fcc)

1 / 68      (Adware)
WindInC.exe (WindInC by INTERPLANET)  (5019428e5d4b4c171a75ffeb16688044)

1 / 68      (Adware)
setup.exe (by http://downs.co.kr)  (f1dd704cfa9fe86f37c09b910989874b)

1 / 68      (Adware)
downs_setup.exe (by http://downs.co.kr)  (a396b2080c31e5e7592ccd7e91379143)

1 / 68      (Adware)
setup.exe (by http://jjangq.co.kr)  (811e4f0dcb3f5e81f01e67c2460994a9)

1 / 68      (Adware)
setup.exe (by http://sharebox.co.kr)  (d0b5b5a877aa43eb6cb7cb52ab2c8f4c)

1 / 68      (Adware)
ShareBoxUp.exe (by TGSM)  (796f0cf66cced1ea7f138c89ef0b217c)

1 / 68      (Adware)
tmp_0.exe (by http://openshopper.co.kr)  (2349dc038ea150700d8208ad9a1b556e)

1 / 68      (Adware)
jjangqsupdateu.exe (JJangQ SearchBar by http://jjangq.co.kr)  (145c295c5fe3d79652a29d61c3ede102)

1 / 68      (Adware)
dssupdateu.exe (Downs Searchbar by http://downs.co.kr)  (c8ce690b8c7e84156fe51c10be5eba3c)

1 / 68      (Adware)
setup.exe (by http://jjangq.co.kr)  (949e8eda2717476a7058faf5a7833e45)

1 / 68      (Adware)
setup.exe (by http://sharebox.co.kr)  (ee26e344686a861024264de1c9ebca83)

1 / 68      (Adware)
SmartTipS.exe (SmartTipS by TGSM)  (b6724bcc7b84f60ed46050ede22ac23e)

1 / 68      (Adware)
JJangQUp.exe (by TGSM)  (d8089de2dfaeed107b1fe7b205e241f1)

1 / 68      (Adware)
setup.exe (by http://jjangq.co.kr)  (39b1d4442a77d712cbd188f2156fef7c)

1 / 68      (Adware)
setup.exe (by http://jjangq.co.kr)  (ddb4253e1a2cba95334e7749aac327ce)

1 / 68      (Adware)
4385968.exe (SmartWeb Control)  (737a284e28aeb633ff2e897b1747596b)

1 / 68      (Adware)
4382146.exe (SmartWeb Control by http://smartw.co.kr)  (e849630390382de3a860130723b635e8)

1 / 68      (Adware)
19749.exe (SmartWeb Control)  (e762f153ffc97e05d92fefd544beed39)

 
Latest 30 of 289 files

The certificates below are also signed by TGSM Inc..

7D8725772359BB44707B7E208AE915C2  (Mar 17, 2013 to May 17, 2014)

5110A6616204B0264E74F3527FA2AA76  (Feb 10, 2011 to Mar 12, 2012)

655F3EAF0D3E7A560B415FFE5611AFDD  (Dec 14, 2009 to Feb 13, 2011)

3CF28BF78B7D2C503C83F61AB56BAFA8  (Jan 09, 2009 to Jan 09, 2010)

* Note, the details and description above are based on the code signing digital signature issued to TGSM Inc. by Thawte, Inc. on March 05, 2012 with the serial number '7193db486426289a17603dc315513e28'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.