The A MEDIA

Publisher Information

The A MEDIA is a software developer located in GuroGU, Seoul in Korea*. The publisher primarily developes software that can be classified as adware. There is one additional code signing certificate issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
5/16/2011 9:00:00 AM

Valid to:
5/16/2014 8:59:59 AM

Subject:
CN=The A MEDIA, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=The A MEDIA, L=GuroGU, S=SEOUL, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
23374752fd9fe165b2e79b765d57b1ec

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Toolbar.TheAMEDIA.J, PUP.Toolbar.TheAMEDIA.K, PUP.TheAMEDIA.K, PUP.Toolbar.TheAMEDIA.G, PUP.Installer.TheAMEDIA.M, PUP.Toolbar.TheAMEDIA.M, PUP.TheAMEDIA.Toolbar (M), PUP.TheAMEDIA (M), PUP.TheAMEDIA.Installer (M)
100.00%

ESET NOD32
Win32/Adware.Winggo.AD (variant), Win32/Adware.Winggo.AA (variant), Win32/Adware.Winggo.AC (variant), Win32/Adware.WiseMop (variant)
53.19%

Malwarebytes
Adware.Winggo.K
51.06%

VIPRE Antivirus
Trojan.Win32.Generic
51.06%

AVG
MalSign.TheAMEDIA, Generic5
51.06%

Comodo Security
ApplicUnwnt, UnclassifiedMalware
46.81%

AhnLab V3 Security
PUP/Win32.MWManager, PUP/Win32.WingGo, PUP/Win32.WindManager, Trojan/Win32.Spnr
46.81%

McAfee
Artemis!B0D28DAA5048, Artemis!7D5A92284370, Artemis!BE3713233517, Artemis!F3CDEE51B48D, Artemis!2D64A691377B, Artemis!A124A958F9C2, Artemis!F72F5F48533D, Artemis!2E4E98FD7FB2, Artemis!7CE519531763
40.43%

McAfee Web Gateway
Artemis!B0D28DAA5048, Artemis!7D5A92284370, Artemis!BE3713233517, Artemis!PUP, Artemis!2D64A691377B, Artemis!3E7B17077BBD
40.43%

Agnitum Outpost
Packed/PECompact, PUA.Winggo, Adware.Winggo
38.30%

1 / 68      (PUP)
tabsyncs30.exe  (376bdf84a852275aeea2ee1b2478a0c8)

1 / 68      (PUP)
qzone5setup.exe  (73c82edb37b41eb77b84ecd1c20abeca)

1 / 68      (PUP)
windinu.exe  (647bb6e0480b940063c75b90be28f5a8)

1 / 68      (PUP)
windin.exe  (65ff050022fb97a509e09c233d2f6b86)

1 / 68      (PUP)
TabSyncu.exe  (4f972a9ac24b877c25f4ac04bbe7553e)

1 / 68      (PUP)
tabsyncu.bak  (8ae62ddcb6bd3eae3b76f6135afd35e1)

1 / 68      (PUP)
ucfucfsetup.exe  (e9b5b5a6b2319fb6c7334ff3bec7bccb)

1 / 68      (PUP)
winggom.exe  (1e631995b9d62944af34f71b537ab64e)

1 / 68      (PUP)
mwmanager_ucf.exe  (1d331685abbe3579880bd2f9058d8c8c)

1 / 68      (PUP)
winggo.dll  (61bb434323387f8059748e9a3e581766)

1 / 68      (PUP)
mwmanagers.exe  (8fa69ebc57028d119329ad8ea4301c3a)

1 / 68      (PUP)
winggou.exe  (2e2045125f25fb4afc1301d10fd14c8d)

1 / 68      (PUP)
mwmanagers.exe  (8e325a48ae6018d31e6be7229557731c)

1 / 68      (PUP)
mwmanagerm.dll  (6a0de3f51d3e397ff615f9652be5a48d)

1 / 68      (PUP)
mwmanager.000  (afa129c280f33b39b4c83d65089f83d8)

1 / 68      (PUP)
searchbarhelper.dll  (3bcea27ae588e609729c6f5b5b9e5ff7)

1 / 68      (PUP)
winggo.dll  (76ec66979a86744c3874fbe082d60f4b)

1 / 68      (PUP)
windin.exe  (f098c0083de61502a9f978092b510528)

1 / 68      (PUP)
portal.exe  (41df5f4d9e85dca6ee377c5a8143a264)

1 / 68      (PUP)
mwmanagers.bak  (61a859322043ba1a22f576c64e355e42)

19 / 68    (PUP)
mwmanagers.exe  (ad0b7b5a6576a1f7fea6c20a3ad14e45)

15 / 68    (PUP)
MWManager.exe  (0b27539308cd8d72e27abb5c44436e7b)

27 / 68    (PUP)
wkoreasetup.exe  (26aee7723f4a7dc4a1664ee41d8fe3e6)

30 / 68    (PUP)
TabSyncu.exe  (4e82de270c372fea7bf2028d430b8d30)

23 / 68    (PUP)
TabSync.exe  (7ce51953176348f3d233aacd5485e9da)

15 / 68    (PUP)
TabSyncHelper.dll  (870501b2d0d8873acd9e92b0fa15d954)

12 / 68    (PUP)
mwmtoolbar.000  (f51d3a03319894ca6702f4b68696cc6d)

17 / 68    (PUP)
mwmanager.000  (aaf576fae90664d569d31ea60d198b18)

14 / 68    (PUP)
mwmanager.000  (9d8af3cf69b8ea471b3a1f701593562d)

11 / 68    (PUP)
MWMToolbar.dll  (2e4e98fd7fb246a6ba71fafb6b61a9fe)

 
Latest 30 of 47 files

Downloads URLs for files signed by The A MEDIA.

15 / 68    (PUP)
http://down.subshop.net/.../portal.exe  (b0d28daa504867acc7f26635c660a6f3)

The following websites host and distribute files published by The A MEDIA.

The following certificate is also signed by The A MEDIA.

6CBA74D61BD6E1976AA4FC95686CB89B  (May 16, 2014 to Jul 15, 2017)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to The A MEDIA by VeriSign, Inc. on May 16, 2011 with the serial number '23374752fd9fe165b2e79b765d57b1ec'.