home

yssoft

Publisher Information

yssoft is a software publisher located in Guro-gu, Seoul in Korea*. The publisher primarily developes software that can be classified as adware. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
4/18/2014 9:00:00 AM

Valid to:
4/18/2016 8:59:59 AM

Subject:
CN=yssoft, O=yssoft, L=Guro-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
7fb2d2278ac1a204482539f930e81a6c

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP (M)
100.00%

1 / 68      (PUP)
luckyinstall.exe (luckytool)  (c8d8f25e7fd76811cb46db5ab1c36faa)

1 / 68      (PUP)
dreaminst.exe (dreamprime)  (c40ce8514463ff490f2f5c876d71cede)

1 / 68      (PUP)
vartanovup.exe (dreamprime)  (3d4221092b8443bee21d7982c7e1a7fa)

1 / 68      (PUP)
wolferup.exe (dreamprime)  (3524d85c9e6c209dc4724c566d415330)

1 / 68      (PUP)
wolfer.exe (dreamprime)  (dff33b3890090959ec7b8389191f7f62)

1 / 68      (PUP)
dreaminst.exe (dreamprime)  (755f6c51829b210a30eae6cb6426d466)

1 / 68      (PUP)
luckyinstall.exe (luckytool)  (ac0804e24d64879d7790b22b6eacd6f6)

1 / 68      (PUP)
luckyinstall.exe (luckytool)  (0632f6211afc269149da742d489c5630)

1 / 68      (PUP)
wingad.dll (wingad)  (559dc0d750219e2f9cfd40c957e4f97c)

1 / 68      (PUP)
subpop.dll (subpop)  (3d0da5263801e3e572ac009656686c97)

1 / 68      (PUP)
luckyinstall.exe (luckytool)  (ef0df3b47b608585eca420d0ad09bf5f)

1 / 68      (PUP)
rnasconiup.exe (dreamprime)  (aef7232200567ac387edd8ed077271b3)

1 / 68      (PUP)
rnasconivc.exe (dreamprime)  (a2cfe8ca7bd7448e2a6bbada05fb89db)

1 / 68      (PUP)
joedfvc.exe (dreamprime)  (b054061e034a02bbc13ce557e2337672)

1 / 68      (PUP)
fenderistup.exe (dreamprime)  (a9a8b9af7d3a41940335fdd40d603f6a)

1 / 68      (PUP)
fenderist.exe (dreamprime)  (b000f99b3a86facbb59e839355a807fc)

1 / 68      (PUP)
plywooda.exe (luckytool)  (0377bcdb1350b49a4e2690ca4e5e28ac)

1 / 68      (PUP)
saraswathvc.exe (dreamprime)  (a0df4552da4b6f298b6e9250a22bed6e)

1 / 68      (PUP)
dreaminst.exe (dreamprime)  (54c789026a9461ecaf748aebb7de465d)

1 / 68      (PUP)
luckyinstall.exe (luckytool)  (4b2a7b678a990cb65f7edac5a46dc105)

1 / 68      (PUP)
cleancookup.exe (dreamprime)  (258f537312a1983399ba0bcf5332e8c5)

1 / 68      (PUP)
cleancook.exe (dreamprime)  (fed0a0fd632ef38fb4efc51bbd6c1741)

1 / 68      (PUP)
dreaminst.exe (dreamprime)  (f73e987c14e84a0e4ffd7d1951293bbe)

1 / 68      (PUP)
dreaminst.exe (dreamprime)  (fcb8d83f4c59ef22b346dbae6c59d680)

1 / 68      (PUP)
mstaskb.exe (luckytool)  (a65a7192e5db02a62ed6b545431910a8)

1 / 68      (PUP)
jamjonup.exe (dreamprime)  (412ca6df3d86e83ba61f0578a8cc5cd2)

1 / 68      (PUP)
jamjon.exe (dreamprime)  (808eb378368f6a7993c8b489980c8494)

1 / 68      (PUP)
rafathanup.exe (dreamprime)  (f47cb780264bc8039668717b270142c7)

1 / 68      (PUP)
rafathan.exe (dreamprime)  (79da80ea4b2d3567f1870d49c6595280)

1 / 68      (PUP)
fenderistvc.exe (dreamprime)  (910a8ce49adc4752dcece240cb9debb6)

 
Latest 30 of 535 files

The certificates below are also signed by yssoft.

4FFD8833DCF52D25418DA64CD58D741A  (Mar 24, 2016 to May 24, 2018)

05D7F2D305A278EEE71E58403E0621F3  (Jan 19, 2016 to Apr 18, 2016)

The following publishers (by Authenticode signature organization name) are related.

dreamprime

* Note, the details and description above are based on the code signing digital signature issued to yssoft by Thawte, Inc. on April 18, 2014 with the serial number '7fb2d2278ac1a204482539f930e81a6c'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.