home

Xionix

Publisher Information

Xionix is a software publisher located in Provo, Utah in the United States*. Thre are 4 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
11/6/2012 7:00:00 PM

Valid to:
11/12/2013 6:59:59 PM

Subject:
CN=Xionix, O=Xionix, L=Provo, S=Utah, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
13027e07fe6bbff6fccbd99df64b35bf

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

ESET NOD32
Win32/Adware.RegDefense (variant)
60.00%

Comodo Security
ApplicUnwnt, UnclassifiedMalware
40.00%

Dr.Web
riskware program Program.Unwanted.160, is riskware program Program.Unwanted.160
40.00%

Trend Micro House Call
TROJ_GEN.F47V0519
20.00%

K7 AntiVirus
Backdoor
20.00%

ESET NOD32
Win32/Adware.RegDefense application
20.00%

1 / 68      (inconclusive)
c990f7c9fda68ee847c8efe932e790f82c394c43 (RegServe by Xionix)  (4ab4a96d0e37837804c910077ace3c19)

0 / 68
e80ca62d8cd02493eca0daf23604ffa1cb6f7897 (DriverHound by Xionix)  (a403578b9a850c2abb69e05dffb5465b)

0 / 68
RDFNSListener.exe (RDListener)  (010a0a59397608a3f2bf8939957175c0)

0 / 68
driverhound-setup.exe (DriverHound by Xionix)  (7b4b08fd3fc9b6f766b8ccf9ee8d58eb)

0 / 68
driverhound-setup.exe (DriverHound by Xionix)  (174ceb9fdd08c6acdaca95855bb44816)

0 / 68
xippitcon.sfx (Xippit by Xionix)  (547f1f0455f504eaac048f03c100535e)

0 / 68
xip.sfx (Xippit by Xionix)  (3281872a6e82ffc4aee58d018a158a06)

0 / 68
xippitcon.sfx (Xippit by Xionix)  (59d3047592c411a3354a3cb2364517e2)

0 / 68
xip.sfx (Xippit by Xionix)  (d62a758b213f3de4f797639bf6a583e0)

3 / 68      (PUP)
regdefense-install.exe (RegDefense by Xionix)  (0141642e1099651185cc93940244bfa9)

1 / 68      (inconclusive)
RSAgent.exe (RSAgent)  (3cc55d09deaecb3e7c919e645a895b69)

0 / 68
xip.dll (Xippit by Xionix)  (3d4258abb6b42bf2590c446b07937a74)

0 / 68
XippitFM.exe (Xippit by Xionix)  (62f3db4e8b1d8f21926e87d50ed87953)

0 / 68
xipg.exe (Xippit by Xionix)  (4e62aa0feb22627c27ba8a1a4ea31cb7)

0 / 68
xip.exe (Xippit by Xionix)  (353e05e407619dc90fa1de0fc5c9f668)

0 / 68
Xippit.dll (Xippit by Xionix)  (571fd134b4eab365b4e70d5fbaf49888)

0 / 68
driverhound-setup.exe (DriverHound by Xionix)  (3edda3a64cd47ed1a0f2321e2f196154)

0 / 68
UpdatableRSUtil.dll (UpdatableRSUtil by Microsoft)  (42902c49166ae78fdbb51bcd8a3d278a)

0 / 68
RSRestorer.dll (Restorer)  (536d6a92eab124522571e63a42c18d4e)

3 / 68      (inconclusive)
RSRegistryUtil.dll (RegistryUtil)  (9e3c87e60d31038c1ae50bb39fdb4618)

0 / 68
RSIgnore.dll (Ignore)  (406b4465d192f77abc1e8920b418da5a)

0 / 68
RegServeControls.dll (RegServeControls)  (be240dd2b2b73b11382a81a7f5c2dffa)

0 / 68
RegScanner.dll (RegScanner)  (3c728b47993167a27808502a50c81724)

0 / 68
FastListView.dll (FastListView)  (a8067f843a0926538f62e4d94d5b3568)

0 / 68
RSStarter.exe (RDStarter)  (f768fb7e536b64acf31f2bd891b3684a)

0 / 68
rssr.exe (sr)  (16712124a5889b5a4c2f2128366043c8)

0 / 68
RSRegister.exe (RSRegister by Microsoft)  (14b7658aa34eb6924bf07a10c30b90b6)

0 / 68
RSHelp.exe (RSHelp by Microsoft)  (a44acec5332ddb5a8da50970ad5ea091)

0 / 68
RSAgent.exe (RSAgent)  (8879235500ef102dcad4fb5679233a5a)

0 / 68
RExit.exe (RExit)  (d906e938da4e472ba7fc45a78c6c25f0)

 
Latest 30 of 86 files

Downloads URLs for files signed by Xionix.

3 / 68      (PUP)
http://www.xionix.com/.../regdefense-install.exe  (0141642e1099651185cc93940244bfa9)

0 / 68
http://www.xionix.com/.../driverhound-setup.exe  (3edda3a64cd47ed1a0f2321e2f196154)

0 / 68
http://www.xionix.com/.../xippit-setup.exe  (a82bd4d6927e657eb1763d39fb8d99db)

0 / 68
http://www.editors-top-choice.com/software/driver-updaters/.../driverhound-setup.exe  (3edda3a64cd47ed1a0f2321e2f196154)

0 / 68
http://www.editors-top-choice.com/software/.../driver-updater.php?product=DRIVERHOUND&method=DOWNLOAD  (driverhound-setup.exe)

The following websites host and distribute files published by Xionix.

www.xionix.com

www.editors-top-choice.com

The certificates below are also signed by Xionix.

6705FE563A0DEC1681709E30EC888DEC  (Oct 03, 2011 to Nov 12, 2012)

1C7E45922618DA4C7E36358ED8E0D06D  (Nov 22, 2010 to Nov 13, 2011)

2CAD7A38062AF58EB4D47711E35160C7  (Oct 13, 2009 to Nov 13, 2010)

6537F88142A3518F779F1055FAC264AD  (Nov 17, 2008 to Nov 14, 2009)

The following publishers (by Authenticode signature organization name) are related.

Paretologic Inc

PC Drivers HeadQuarters, Inc

* Note, the details and description above are based on the code signing digital signature issued to Xionix by Thawte, Inc. on November 06, 2012 with the serial number '13027e07fe6bbff6fccbd99df64b35bf'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.