yearsoft

Publisher Information

yearsoft is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising. There is one additional code signing certificate issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
7/17/2013 9:00:00 AM

Valid to:
7/18/2014 8:59:59 AM

Subject:
CN=yearsoft, OU=IT Team, O=yearsoft, L=Ansan-si, S=Gyeonggi-do, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
028fb214e3c57f518427378946e58ba7

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Service.yearsoft.N, PUP.yearsoft.M, PUP.yearsoft.N, PUP.Yontoo.yearsoft (M), PUP.Yontoo (M)
100.00%

AhnLab V3 Security
PUP/Win32.TopBar
5.71%

Trend Micro House Call
Suspicious_GEN.F47V1203
2.86%

avast!
Win32:Tabstation-A [Trj]
2.86%

G Data
Win32.Trojan.Agent.W77TQQ
2.86%

McAfee
Artemis!F63EE2937BD5
2.86%

IKARUS anti.virus
Win32.Tabstation
2.86%

1 / 68      (Adware)
zouyeahs.exe (Tab Station by tabstation)  (8596a6e1cac570b8068c83eec653113e)

1 / 68      (Adware)
zouyeah.exe (Tab Station by tabstation)  (d9e05e53563626a263e17f8421ee94d8)

1 / 68      (Adware)
willianu.exe (Tab Station by tabstation)  (2ed2b6cde6ae7879984fc373730c1d73)

1 / 68      (Adware)
pascoalu.exe (Tab Station by tabstation)  (7efb2b9bc4ba0773f4c37dd5f312c84d)

1 / 68      (Adware)
pascoals.exe (Tab Station by tabstation)  (80fe17c2f08bff9f8b2d21616e0dbce4)

1 / 68      (Adware)
pascoal.exe (Tab Station by tabstation)  (5a94d548acf8fad899ef9f051e7350ee)

1 / 68      (Adware)
tabstationt.exe (TabStation)  (29d7ecadd01609319f495bce30d3666b)

1 / 68      (Adware)
henadoru.exe (Tab Station by tabstation)  (66625df22bba47eaccb9934d21b0fee0)

1 / 68      (Adware)
qasposeu.exe (Tab Station by tabstation)  (2c7b7749d095e799ac58d6f980327a48)

1 / 68      (Adware)
qasposes.exe (Tab Station by tabstation)  (0cc2012103a9a581e379996f656a69b2)

1 / 68      (Adware)
qaspose.exe (Tab Station by tabstation)  (cea4f0bc9b9f1e216661fd3de4e2381c)

1 / 68      (Adware)
promoderu.exe (Tab Station by tabstation)  (e854b6f9d3636e3c8f38637b8bd87648)

1 / 68      (Adware)
promoder.exe (Tab Station by tabstation)  (dc41889fe4ff4aac42a60b51cdf01f5c)

1 / 68      (Adware)
steveleyu.exe (Tab Station by tabstation)  (912ee029df0af31f9f3ff0c6a2487da4)

1 / 68      (Adware)
steveley.exe (Tab Station by tabstation)  (e6d215caf43d2a0b5231df1a0efea719)

1 / 68      (Adware)
promoders.exe (Tab Station by tabstation)  (c53cfad12ec1f953a7437554c171675d)

1 / 68      (Adware)
ruhasiu.exe (Tab Station by tabstation)  (838077ba2598223daed602fff417d130)

1 / 68      (Adware)
ruhasis.exe (Tab Station by tabstation)  (c54c018aa82e29cf1397bb661a3314c1)

1 / 68      (Adware)
ruhasi.exe (Tab Station by tabstation)  (4a8fd1e2d663076e85fc4e3d69522f56)

1 / 68      (Adware)
steveleys.exe (Tab Station by tabstation)  (26cc4a66a2fafc442efcc28c882596c9)

1 / 68      (Adware)
henadors.exe (Tab Station by tabstation)  (724c87d5512c754720d42fb62d27d518)

1 / 68      (Adware)
henador.exe (Tab Station by tabstation)  (7f60c02325e036f36c2e79c87abd543c)

1 / 68      (Adware)

1 / 68      (Adware)
vsshungu.exe (Tab Station by tabstation)  (b38290ad498070c95dc759cf47c969a1)

1 / 68      (Adware)
vsshung.exe (Tab Station by tabstation)  (2c84fa4e83b70336179ce68fcda785f7)

1 / 68      (Adware)
vsshungs.exe (Tab Station by tabstation)  (506300b6c96efb114ab7276c49cc372f)

1 / 68      (Adware)
xriyanks.exe (Tab Station by tabstation)  (9dfa6dfb4c23ecd8306d25d557fb6e54)

1 / 68      (Adware)
zacobciucu.exe (Tab Station by tabstation)  (22ac1e886969fe1fbba12985f94902c0)

1 / 68      (Adware)
zacobciuc.exe (Tab Station by tabstation)  (4d2ae6200604438cbb418876835321f4)

1 / 68      (Adware)
zacobciucs.exe (Tab Station by tabstation)  (bd0a6c295b05adde6e43f9f275216ea1)

 
Latest 30 of 35 files

The following certificate is also signed by yearsoft.

1D640099747B7B0113E4E8A226D9C798  (Jun 21, 2013 to Jun 22, 2014)

* Note, the details and description above are based on the code signing digital signature issued to yearsoft by Thawte, Inc. on July 17, 2013 with the serial number '028fb214e3c57f518427378946e58ba7'.