WooJung ITS

Publisher Information

WooJung ITS is a software developer located in Gangnam-gu, Seoul in Korea*. Thre are 2 additional code signing certificates issued to this publisher.
Remove WooJung ITS Malware - Powered by Reason Core Security
Authority:
Thawte, Inc.

Valid from:
4/11/2012 9:00:00 AM

Valid to:
5/12/2013 8:59:59 AM

Subject:
CN=WooJung ITS, O=WooJung ITS, L=Gangnam-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7f9271cf4de60de37a832ff7c03aa9de

Scanner detections:
Detections  (57% detected)

Scan engine
Details
Detections

Comodo Security
UnclassifiedMalware
83.33%

VIPRE Antivirus
Trojan.Win32.Generic
83.33%

ESET NOD32
Win32/Adware.Kraddare.GN (variant), probably unknown NewHeur_PE
83.33%

SUPERAntiSpyware
Trojan.Agent/Gen-FraudScan
66.67%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud)
66.67%

AVG
Generic5, Downloader
66.67%

nProtect
Adware/W32.KrAdword.174792, Adware/W32.KrAdword.296240
50.00%

Baidu Antivirus
Trojan.Adware.Win32.Kraddare
50.00%

Malwarebytes
Adware.Korad, Adware.WHelp
50.00%

ViRobot
Adware.Agent.296240.A, Adware.WHelp.51280[h]
50.00%

0 / 68
WHelp.EXE (WHelp by WooJung ITS)  (cedd5e14859bf61382d53b3c250398af)

22 / 68    (PUP)
WHelp.EXE (WHelp by WooJung ITS)  (1cf151adda115ad868f2dc0bb5c4ea8e)

0 / 68
kcleaner.exe  (647e357df843391ebdf4242c09dd2785)

18 / 68    (PUP)
사이드바.exe (WHelp by WooJung ITS)  (e8b88a86c9bd65fd2defba2e88d41803)

4 / 68      (inconclusive)
kcleaner.exe  (9da4eeb9d1d0f5fdf0bc8f7d9f481803)

11 / 68    (PUP)
whelp_wh25.exe (WHelp by WooJung ITS)  (6d2b2e6e70e2a33c20be301b37da6a02)

9 / 68      (PUP)
WHelp.DLL (WHelp Module by WooJung ITS)  (c0dc9c305dd26e3c54cd2541b2239ec9)

Downloads URLs for files signed by WooJung ITS.

4 / 68      (inconclusive)

4 / 68      (inconclusive)

4 / 68      (inconclusive)

4 / 68      (inconclusive)

4 / 68      (inconclusive)

The following websites host and distribute files published by WooJung ITS.

The certificates below are also signed by WooJung ITS.

721A6B3BA96AECA4FE6AFF3EA99B3DCB  (Mar 18, 2011 to Apr 17, 2012)

4D2AAB16F6D4B6BBA36AE03604B21FA9  (Mar 26, 2010 to Mar 27, 2011)

The following publishers (by Authenticode signature organization name) are related.

Remove WooJung ITS Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to WooJung ITS by Thawte, Inc. on April 11, 2012 with the serial number '7f9271cf4de60de37a832ff7c03aa9de'.