Thanksoft

Publisher Information

Thanksoft is a software developer located in Dnepropetrovsk, N/a in Ukraine*. The publisher primarily developes software that can be classified as adware. Thre are 4 additional code signing certificates issued to this publisher.
Remove Thanksoft Malware - Powered by Reason Core Security
Authority:
VeriSign, Inc.

Valid from:
9/25/2011 3:00:00 AM

Valid to:
11/11/2012 2:59:59 AM

Subject:
CN=Thanksoft, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Thanksoft, L=Dnepropetrovsk, S=n/a, C=UA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
601a58a2017f0d20aff0e14b7204977f

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Thanksoft.G, PUP.Thanksoft.D, PUP.Thanksoft.I, PUP.Thanksoft.R, PUP.Installer.Thanksoft.O, PUP.Installer.Thanksoft.R, PUP.Thanksoft.L, PUP.Thanksoft (M), PUP.Thanksoft.Installer (M)
100.00%

Antiy Labs AVL
NetTool/Win32.Tor, HackTool[NetTool:not-a-virus]/Win32.Tor
27.27%

Kaspersky
not-a-virus:NetTool.Win32.Tor
27.27%

Dr.Web
Tool.Tor.2, Trojan.DownLoader9.51728
22.73%

Rising Antivirus
PE:Malware.XPACK/RDM!5.1, PE:Trojan.Win32.Generic.12DD6032!316497970, PE:Trojan.Win32.Generic.12BCA67D!314353277
13.64%

Agnitum Outpost
Riskware.NetTool
13.64%

NANO AntiVirus
Riskware.Win32.Tor.coeaxd, Trojan.Win32..ccngbu
9.09%

Zillya! Antivirus
Tool.Tor.Win32.12
9.09%

ByteHero BDV
Trojan.Malware.KillAV.Gen.001
4.55%

Trend Micro House Call
TROJ_GEN.F47V0204
4.55%

1 / 68      (PUP)
msesetup.exe  (44bb7ed3a4fda3d7409b8f5a2f3fc1a8)

1 / 68      (PUP)
mse.sys (NetFilter SDK by NetFilterSDK.com)  (5a2738441d25ce2cbe0363840bb398db)

6 / 68      (PUP)
ws1257f790.dat  (dac3ca5b7b4c0b8899c9ca7c4b5b63e4)

1 / 68      (PUP)
masksurf.exe (Mask Surf by Thanksoft)  (e969fe476fba7b7994b4936ba9deaa03)

9 / 68      (PUP)
masksurf_setup.exe  (fc927f846f17574a2edf67bbb28f3e3e)

1 / 68      (PUP)
masksurf.exe (Mask Surf by Thanksoft)  (5dcb6b60f23d3140a93139e5c1fec3aa)

1 / 68      (PUP)
masksurf.exe (Mask Surf by Thanksoft)  (aefd216465bd639bc44b9a069608196f)

1 / 68      (PUP)
masksurf_setup.exe  (1beac101f53a0b0d78bb2685c420fd63)

1 / 68      (PUP)
mse.exe (Mask Surf Everything by Thanksoft)  (e5c48b18ed34b70c487ce83d88444601)

1 / 68      (PUP)
LicenseInfo.exe (Info)  (bd152d00f902a59618af30e2a73805d6)

3 / 68      (PUP)
msesetup.exe  (56a58e723e4fec693f0edf18e809f130)

3 / 68      (PUP)
masksurf_setup_3.2.exe  (49f7029fc9b8fa0970d92dabd6a3da7a)

1 / 68      (PUP)
masksurf_setup.exe  (cdf8dc4676a79b7c506c6785aabeb248)

2 / 68      (PUP)
masksurf_setup.exe  (de7a563ed219edd0d74d69a52638d53b)

6 / 68      (PUP)
mask-surf-lite_3.1.exe  (76b5288daa867bcdd6d138738cef767a)

4 / 68      (PUP)
tor.exe  (d4113cd28c49797f97ea93647855c4f2)

1 / 68      (PUP)
masksurf.exe (Mask Surf by Thanksoft)  (0fbc68ad9269680ed29904f86da08592)

1 / 68      (PUP)
masksurf.exe (Mask Surf by Thanksoft)  (ddd71fdcd44482e93f867296eef3cf35)

1 / 68      (PUP)
masksurf.exe (Mask Surf by Thanksoft)  (3df436782314f882e6d298bca6ea125a)

7 / 68      (PUP)
tor.exe  (e1c4906372f01893b781681ed19116dd)

1 / 68      (PUP)
mse.sys (NetFilter SDK by NetFilterSDK.com)  (d21ec5119957aeae15cbb1728f0e79c4)

1 / 68      (PUP)
mse.sys (NetFilter SDK by NetFilterSDK.com)  (f5c6ddc523d9a058d99ed4a077d1327c)

Downloads URLs for files signed by Thanksoft.

6 / 68      (PUP)

The following websites host and distribute files published by Thanksoft.

The certificates below are also signed by Thanksoft.

3B50069E945D4934FDF6546BCA6CCF5A  (Apr 15, 2015 to Apr 15, 2016)

6C1556EB6266C79DF482A0471E0F4004  (Jan 31, 2014 to Feb 01, 2015)

76708538C402831E2762FB5792D7BCDB  (Nov 21, 2012 to Dec 22, 2013)

6C32D085F123AC99B7049016B3E96710  (Nov 09, 2010 to Nov 10, 2011)

Remove Thanksoft Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Thanksoft by VeriSign, Inc. on September 25, 2011 with the serial number '601a58a2017f0d20aff0e14b7204977f'.