home

Qiwang Computer

Publisher Information

Qiwang Computer is a software developer located in Nanning, Guangxi in China*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
5/30/2007 8:00:00 PM

Valid to:
5/30/2008 7:59:59 PM

Subject:
CN=Qiwang Computer, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Qiwang Computer, L=Nanning, S=Guangxi, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
502228010cfce690e807ab1a1a2a72b9

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.QiwangComputer.S, PUP.QiwangComputer.Installer (M), PUP.QiwangCo.Installer (M), PUP (M)
100.00%

ESET NOD32
Win32/Adware.RegistryEasy (variant)
20.00%

Norman
RegistryEasy.DI, W32/Troj_Generic.AOZFY
13.33%

avast!
Win32:Adware-gen [Adw]
13.33%

Comodo Security
UnclassifiedMalware
13.33%

Sophos
Sus/Behav-269
6.67%

Panda Antivirus
Suspicious file
6.67%

Prevx
Heuristic: Suspicious Self Modifying File
6.67%

VIPRE Antivirus
Trojan.Win32.Generic
6.67%

Avira AntiVirus
TR/Drop.Agent.twa.60
6.67%

1 / 68      (Adware)
evidencesmart_setup.exe (by EvidenceSmart)  (8e7935ed2461558f9c52b483911374df)

1 / 68      (Adware)
unp263975056.tmp (by RegistryEasy)  (baeb28b074668c26ccc4e2f70e62544d)

1 / 68      (Adware)
registrymighty_setup.exe (Registry Mighty by RegistryMighty.com)  (77371b48f4f4c89521cc9111419fdd1b)

1 / 68      (Adware)
registryeasy v4.0.exe (by RegistryEasy)  (fae999c19c62b03f66a91dd8e4bc84e8)

1 / 68      (Adware)
perfectuninstall_setup.exe (Perfect Uninstaller by www.PerfectUninstaller.com)  (454577d998c31fed7e868a78f706482a)

1 / 68      (Adware)
registryeasy.exe (by RegistryEasy)  (2b0718385f29174f99adb0d54ef33b38)

1 / 68      (Adware)
registrygenius.com_setup.exe (Registry Genius by RegistryGenius.com)  (2fa8f9fe4e66e0fcd07903e97fa1144d)

1 / 68      (Adware)
registryfast v4.0.exe (by RegistryFast)  (d9915538be1c134c10e2c0d690cb5540)

1 / 68      (Adware)
perfectuninstaller_setup.exe (Perfect Uninstaller by www.PerfectUninstaller.com)  (d22b83771c146d36742d9a767db8e19a)

1 / 68      (Adware)
perfectuninstaller_setup.exe (by www.PerfectUninstaller.com)  (caff35e175e7aff84db8dbd9f3a96f8b)

1 / 68      (Adware)
perfectuninstaller_setup.exe (Perfect Uninstaller by www.PerfectUninstaller.net)  (8e68768f5dd9980e2ec811d7234ae3a8)

6 / 68      (Adware)
registryeasy.exe (by RegistryEasy)  (bc50445671a0ceab2e43cc9f29ee1f46)

10 / 68    (Adware)
registrygenius.com_setup.exe (by RegistryGenius)  (144d0c163e4394c437a634e2f463fce8)

2 / 68      (Adware)
registryfast_setup.exe (by RegistryFast)  (32949725f78090301bfbd476e2b04f64)

5 / 68      (Adware)
registrywell_setup.exe (Registry Well by RegistryWell.com)  (81f0a14d6b36dfee27fcfcb62cc8ed85)

The following certificate is also signed by Qiwang Computer.

19E46BDB66FF71931FE43DB54F76BE4F  (Jun 15, 2008 to Jun 13, 2011)

* Note, the details and description above are based on the code signing digital signature issued to Qiwang Computer by VeriSign, Inc. on May 30, 2007 with the serial number '502228010cfce690e807ab1a1a2a72b9'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.