home

Wetelecommunication

Publisher Information

Wetelecommunication is a software developer located in Gangseo-gu, Seoul in Korea*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
7/1/2015 9:00:00 AM

Valid to:
7/31/2016 8:59:59 AM

Subject:
CN=Wetelecommunication, O=Wetelecommunication, L=Gangseo-gu, S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
539bfee371628ead87f4423cfc3d9f26

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Wetelecommunication (M), PUP.Wetelecommunication.Installer (M), PUP.Weteleco (M)
81.25%

ESET NOD32
Win32/Adware.PopAd.AH (variant)
37.50%

Baidu Antivirus
Adware.Win32.PopAd
37.50%

Avira AntiVirus
TR/BHO.Gen5, TR/ATRAPS.Gen, TR/Crypt.XPACK.Gen8, ADWARE/PopAd.2011560
31.25%

avast!
Win32:Adware-gen [Adw]
18.75%

VIPRE Antivirus
Trojan.Win32.Generic
18.75%

Fortinet FortiGate
Riskware/PopAd
18.75%

K7 AntiVirus
Adware
12.50%

Sophos
Mal/Generic-S, Generic PUA PJ (PUA)
12.50%

AVG
Clicker, Generic
12.50%

1 / 68      (PUP)
Lemon.dll  (20330a6cd6fe1e50f3ac8d03429204bf)

1 / 68      (PUP)
karbf9c.tmp  (cbf5507755e521feec1fdc1cbea353d4)

1 / 68      (PUP)
unins000.exe  (9b5c98ddc1194656d44ab30f758cb4e2)

1 / 68      (PUP)
PopClick.exe  (abd4772101eb4a601e2c7ded982bbae7)

1 / 68      (PUP)
unins000.exe  (0e101c8884eb4f5537f81b8be93fc0ee)

1 / 68      (PUP)
PopClick.exe  (240454ef61938eca916b939c47624c29)

1 / 68      (PUP)
popclickinstall_7.exe  (a3705d9a2aaed5a6b3f972f8773ec447)

20 / 68    (PUP)
Lemon.dll  (62574da2cb8ee08d015940ec5bc4f7ab)

3 / 68      (PUP)
9605677b1c8cf939ce3dd5a2f3b6c849  (9605677b1c8cf939ce3dd5a2f3b6c849)

3 / 68      (PUP)
Lemon.dll  (8d3b1b145437ceb28b08d13decabbca0)

10 / 68    (PUP)
lemoninstall2.exe  (8b238ad269a5c2e227f82d7570521a2d)

2 / 68      (PUP)
Lemon.dll  (799ba91505b1c12dafc3bf7ee70b74c3)

3 / 68      (PUP)
Lemon.dll  (371d56dbce7201bd1de390b41e457dce)

3 / 68      (PUP)
unins000.exe  (61559c740c975b89ed03e2b02ffe6e87)

4 / 68      (PUP)
Lemon.exe  (29ca6ba4c0131da8ac1c92c0f8f1b87e)

9 / 68      (PUP)
popclickinstall_5.exe  (213f5e1b5f9a524df33f097de06a36b2)

Downloads URLs for files signed by Wetelecommunication.

3 / 68      (PUP)
http://down.luckytool.net/lemon/.../Lemon.dll  (9605677b1c8cf939ce3dd5a2f3b6c849)

3 / 68      (PUP)
http://down.luckytool.net/lemon/.../Lemon.dll  (lemon.dll)

3 / 68      (PUP)
http://down.luckytool.net/lemon/.../Lemon.dll  (lemon.dll)

2 / 68      (PUP)
http://down.luckytool.net/lemon/.../Lemon.dll  (lemon.dll)

The following websites host and distribute files published by Wetelecommunication.

down.luckytool.net

The certificates below are also signed by Wetelecommunication.

12D45AFCDDF4F7C11C754A87D29DF4AE  (Jun 05, 2014 to Jul 06, 2015)

0E437FA8839B30B62B7C342FDFA1EC47  (May 03, 2013 to Jun 03, 2014)

052A19867537D6415E7D6FB0B523C332  (Feb 17, 2010 to Mar 20, 2011)

The following publishers (by Authenticode signature organization name) are related.

yssoft

jncmarketing inc.

* Note, the details and description above are based on the code signing digital signature issued to Wetelecommunication by VeriSign, Inc. on July 01, 2015 with the serial number '539bfee371628ead87f4423cfc3d9f26'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.