home

Knowledge Gains

Publisher Information

Knowledge Gains is a software developer located in San Diego, California in the United States*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs.
Authority:
VeriSign, Inc.

Valid from:
1/15/2015 7:00:00 AM

Valid to:
1/16/2016 6:59:59 AM

Subject:
CN=Knowledge Gains, O=Knowledge Gains, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
41a7e1bb4081a36a8282dcae1b2a3a14

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Yontoo (M), Adware.Yontoo (M)
100.00%

1 / 68      (PUP)
holdpage.repmon.dll  (a5c69831f495f8678bf54b1391284bc1)

1 / 68      (Adware)
holdpage.purbrowse.dll  (8c63f9fc826b60b7ae96005b7b2591bd)

1 / 68      (Adware)
holdpage.gcupdate.dll  (748d29e803b8c45c49880e726d45d4a6)

1 / 68      (Adware)
holdpage.ffupdate.dll  (067a8c63771960cfa7ace526ca94a725)

1 / 68      (PUP)
holdpage.expext.dll  (6144bc6f99f7085bcdcc19c0ad64238b)

1 / 68      (Adware)
holdpage.browseradapter.dll  (ff3cc23b2ca6f10e876e8693800655d5)

1 / 68      (PUP)
holdpage.purbrowse64.exe  (95b84ba8ba6577b239474d0b7ea639c0)

1 / 68      (Adware)
holdpage.expext.exe  (4aa177b7e1a46a037fa1a13aa0dfe7c1)

1 / 68      (Adware)
holdpage.browseradapter64.exe  (d037742fd56b34fc71904a2d4dbf5e9c)

1 / 68      (PUP)
holdpage.browseradapter.exe  (ad14d3fdadeae16aa05c65c6e6f60a88)

1 / 68      (PUP)
919764.dll (by TODO: <Company name>)  (a24d3a96cd03fd20bf6769c04425cf03)

1 / 68      (PUP)
91975f83f364.dll  (14024705978caf88769d8f9d3fb3e7fa)

1 / 68      (PUP)
91975f83f3.dll  (741b83562f622af5255a1a6cbd1aee29)

1 / 68      (PUP)
9197.dll (by TODO: <Company name>)  (63604102741dbc8bdb659df6b2c000da)

1 / 68      (PUP)
{91975f83-f39c-43cf-aad4-0b3396b0f6db}gw.sys (StdLib)  (c4fe92b43c4a8b44e54bda155dfd8fdc)

1 / 68      (PUP)
holdpage.repmon.dll  (441ecb4c88c93573aa0a85755132ee87)

1 / 68      (PUP)
holdpage.purbrowse.dll  (b60b04c85fae4ff1e3c897445f97876a)

1 / 68      (PUP)
holdpage.gcupdate.dll  (2006b0ce566b580f2ce7df755ef3abf2)

1 / 68      (PUP)
holdpage.ffupdate.dll  (ca20fe5e6ba3b470a349fba2cfed2778)

1 / 68      (PUP)
holdpage.expext.dll  (a81508b126a5df6d43bf0f37f5786621)

1 / 68      (PUP)
holdpage.browseradapter.dll  (7a62572883fdba12724eeaaa5f1b2a5d)

1 / 68      (Adware)
holdpage.browseradapter64.exe  (f0138eec7801349202a70e269e972368)

1 / 68      (PUP)
919764.dll (by TODO: <Company name>)  (7ad22027703b4b039bab1f757bd13d7e)

1 / 68      (PUP)
91975f83f364.dll  (cba8ff804e98a12e734544ab2d93d1c5)

1 / 68      (PUP)
91975f83f3.dll  (67c4b04b9e7c9f48ea1e2543280b13b6)

1 / 68      (PUP)
holdpage.repmon.dll  (1ec653f5ad53526969c053d57e304c9b)

1 / 68      (PUP)
{91975f83-f39c-43cf-aad4-0b3396b0f6db}w.sys (StdLib)  (5d8779d415d75f6c47222fecac3462fb)

1 / 68      (PUP)
{91975f83-f39c-43cf-aad4-0b3396b0f6db}w64.sys (StdLib)  (13b9c2cd4cb054153a60da893d0e3444)

1 / 68      (PUP)
{91975f83-f39c-43cf-aad4-0b3396b0f6db}w.sys (StdLib)  (8a5600d05fa1489baed1b96a73ca7ced)

1 / 68      (PUP)
{91975f83-f39c-43cf-aad4-0b3396b0f6db}gw.sys (StdLib)  (2640a3a5948361eb94f694493e18528c)

 
Latest 30 of 4,871 files

* Note, the details and description above are based on the code signing digital signature issued to Knowledge Gains by VeriSign, Inc. on January 15, 2015 with the serial number '41a7e1bb4081a36a8282dcae1b2a3a14'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.