home

WHENU.COM INC

Publisher Information

WHENU.COM INC is a software developer located in New York, United States*. The company is a primary distributor of unwanted software. Thre are 5 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
3/14/2005 1:00:00 AM

Valid to:
4/9/2006 1:59:59 AM

Subject:
CN=WHENU.COM INC, OU=Department, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=WHENU.COM INC, L=New York, S=New York, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
14553e9dbdeaa7c5d2e5d12e3c96b561

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.WHENUCOMINC.J, Threat.Installer.WHENUCOM, PUP.WHENUCOM.Installer (M), PUP.WHENUCOM (M), PUP (M)
100.00%

MicroWorld eScan
Gen:Adware.Heur.gq1@ReTqBUai, Adware.Generic.143998
11.11%

Quick Heal
AdWare.SaveNow.bo.n4 (Not a Virus), AdTool.WhenU.a.n4 (Not a Virus)
11.11%

Malwarebytes
Adware.WhenU
11.11%

Zillya! Antivirus
Adware.WhenU.Win32.31, Adware.WhenU.Win32.36
11.11%

NANO AntiVirus
Riskware.Win32.WhenUSave.gbrh, Riskware.Win32.SaveNow.dlnqxe
11.11%

F-Prot
W32/SaveNow.D
11.11%

Total Defense
Win32/WhenU
11.11%

Trend Micro House Call
ADW_WHENUSRCH.C, ADW_SAVENOW.AP
11.11%

avast!
Win32:Whenu-I [PUP], Win32:Adware-HT [PUP]
11.11%

1 / 68      (Adware)
Search.DLL (WhenUSearch Module by WhenU.com)  (7669c1fc40de6b5928f1ebb0ca1cead8)

1 / 68      (Adware)
uinstv.exe (Universal Installer by WhenU.com, Inc)  (29b0fd36a1b7800b4d370e6c07773e48)

1 / 68      (Adware)
a0142377.exe (Universal Installer by WhenU.com, Inc)  (44652c2ee063d75363160d4a8386222c)

1 / 68      (Adware)
Search.exe (WhenUSearch by WhenU.com)  (ab699ef45fb62e2b3d5b66bb3d6fc420)

1 / 68      (Adware)
topdownloads_whenusave_installerinst.exe (Universal Installer by WhenU.com, Inc)  (7922571efaa60a7dd82067546c019a2e)

1 / 68      (Adware)
sunnygames_whenusave_installerinst.exe (Universal Installer by WhenU.com, Inc)  (4a867e7c1f63daff1f50223092fdb6c1)

1 / 68      (Adware)
dtPlugin.dll (dtPlugin by WhenU)  (1423f3ecee56dcd4a88b38c2982c8b49)

1 / 68      (Adware)
aaascreensavers_whenusavenow_installerinst.exe (Universal Installer by WhenU.com, Inc)  (419bda5a306610ccc7c16702ad4c9418)

1 / 68      (Adware)
7art_whenusave_installerinst.exe (Universal Installer by WhenU.com, Inc)  (2e08960a370591506b39686bc7f88f15)

1 / 68      (Adware)
fungamesgalaxy.exe (Universal Installer by WhenU.com, Inc)  (f61f49629e325e2dc987ff49f7419ae6)

1 / 68      (Adware)
m3development_whenusave_installerinst.exe (Universal Installer by WhenU.com, Inc)  (4186c96dacc6af7962e59228aae02333)

1 / 68      (Adware)
vvsninst.exe (Universal Installer by WhenU.com, Inc)  (61e5ed11373609a34d783913e6d866da)

1 / 68      (Adware)
myplaycity_whenusave_installer.exe (Universal Installer by WhenU.com, Inc)  (491be3ff8a6ebbb424799f082f1c367b)

1 / 68      (Adware)
cliprex_whenusave_installerinst.exe (Universal Installer by WhenU.com, Inc)  (7f09964d7991ef176c970c458d034801)

1 / 68      (Adware)
ACM.dll (by WhenU)  (a0720782773ddb4e90ded10e77c5c5a3)

1 / 68      (Adware)
setupdtsb.exe (Universal Installer by WhenU.com, Inc)  (87186efdee358c203f410e00e9f344c7)

34 / 68    (Adware)
{ea961874-481b-4077-81a6-5bd2d72e5122} (Universal Installer by WhenU.com, Inc)  (f123981c00295ae5fa1e16b781ffb435)

34 / 68    (Adware)
setupdtsb.exe (Universal Installer by WhenU.com, Inc)  (59f19e34662eeb71d6d8d0a3b6e83d95)

The certificates below are also signed by WHENU.COM INC.

05269A0C2AC61E3CA4279A8536345F86  (Mar 07, 2007 to Apr 08, 2008)

3961E82457D32F54A770A098673031F5  (Feb 08, 2006 to Apr 09, 2007)

7C0FDD14AFF33B9E05AD4A6AE79E6F04  (Mar 18, 2004 to Apr 09, 2005)

593E7E15F9D1560AC008513510F02F8F  (Mar 09, 2003 to Apr 05, 2004)

5FBDD3BD7047BB143A8B113CF0999DF6  (Mar 31, 2002 to Apr 01, 2003)

* Note, the details and description above are based on the code signing digital signature issued to WHENU.COM INC by VeriSign, Inc. on March 14, 2005 with the serial number '14553e9dbdeaa7c5d2e5d12e3c96b561'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.