home

TAOBAO (CHINA) SOFTWARE CO.,LTD.

Publisher Information

TAOBAO (CHINA) SOFTWARE CO.,LTD. is a software publisher located in Hangzhou, Zhejiang in China*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
5/22/2014 5:00:00 PM

Valid to:
6/21/2016 4:59:59 PM

Subject:
CN="TAOBAO (CHINA) SOFTWARE CO.,LTD.", OU=RDC, O="TAOBAO (CHINA) SOFTWARE CO.,LTD.", L=Hangzhou, S=Zhejiang, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
348a4d46c9a1a9edc2b4818465a66bed

Scanner detections:
Detections  (52% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Taobao (L)
83.33%

F-Prot
W32/Floxif.B
13.33%

ESET NOD32
Win32/Floxif.H virus
13.33%

MicroWorld eScan
Trojan.GenericKD.2988954
3.33%

McAfee
Artemis!D8409382F8D4
3.33%

K7 AntiVirus
Riskware
3.33%

Arcabit
Trojan.Generic.D2D9B9A
3.33%

Baidu Antivirus
Win32.Trojan-Downloader.Agent
3.33%

ESET NOD32
Win32/TrojanDownloader.Agent.BZN
3.33%

Trend Micro House Call
BKDR_ZEGOST.SM22
3.33%

2 / 68      (inconclusive)
update_task.exe (Update Task by UCWeb Inc)  (8064557c159151b54cb7cbddcd80be4e)

0 / 68
MSVCP71.DLL (Microsoft Visual Studio .NET by Microsoft)  (f963a096523e0f518a4bcfb64d98d7f5)

0 / 68
stats_uploader.exe  (4ce29093df9b9baedee8db46f1fa62eb)

0 / 68
MSVCP71.DLL (Microsoft Visual Studio .NET by Microsoft)  (6a6ef844b05a9b64a410de6c605e8a81)

0 / 68
ATL71.DLL (Microsoft Visual Studio .NET by Microsoft)  (4d9813c9e165081fbda90d408a99c2d6)

0 / 68
setup.exe  (0b18d9073594b35342b600e493db4111)

0 / 68
chrmstp.exe  (c1c1b6e0c032b252e6fb2a1f4cecf0d2)

0 / 68
stats_uploader.exe  (fcd9dcb40c42b9f4388b2aeb3080792a)

1 / 68      (PUP)
chrome_elf.dll (UC Browser by UCWeb)  (fb096129276596b07b871581bc2894c7)

1 / 68      (PUP)
UCBrowser.exe (UC Browser by UCWeb)  (94a180c3e9fbac24de35c93264b7dcd2)

2 / 68      (inconclusive)
update_task.exe (Update Task by UCWeb Inc)  (83f230f55075b0d22950a508901079d3)

1 / 68      (PUP)
ucservice.exe (UCBrowser Service by UCWeb)  (bfc5d780b4c0d1f3ee738f1192684bcd)

2 / 68      (inconclusive)
update_task.exe (Update Task by UCWeb Inc)  (1825be4fff5e3825abc3b92b0edc661b)

1 / 68      (PUP)
ucservice.exe (UCBrowser Service by UCWeb)  (6b1cedcab7d7e6eff933c55d6d70e051)

1 / 68      (PUP)
ucbrowser_v5.5.9936.1231_windows_pf101_(build16012716).exe (UC Browser by UCWeb)  (e01bd1852c35e7b9086f9f8729ef6942)

0 / 68
uninstall.exe  (d18ea63f9abe5f18013e9d79b208bd83)

0 / 68
aliworkbenchtask.exe  (2fb0f6dc9c5464cbbc989a3cb02f52d8)

0 / 68
AliWorkbench.exe (by Alibaba Group)  (5eaaae51b07f6c4c79e65cea9f0aef8f)

1 / 68      (PUP)
ucbrowser_v5.0.1104.0_windows_pf101_(build15051816).exe (UC Browser by UCWeb)  (8176315f58d04c833e50221f5cb1ae77)

0 / 68
MSVCP71.DLL (Microsoft Visual Studio .NET by Microsoft)  (f60e687e2cff2f6ad6fa8523e741d555)

1 / 68      (PUP)
UCBrowser.exe (UC Browser by UCWeb)  (2ff82e05fbd58efb594cceaf37276b8f)

1 / 68      (PUP)
UCBrowser.exe (UC Browser by UCWeb)  (fc413a995d5ade427e7b5b46bf39ab4d)

0 / 68
stats_uploader.exe  (1631ff23cf16bffa8ebe0cb99290a7bb)

1 / 68      (PUP)
ucbrowser_v5.5.9936.1231_windows_pf101_(build16012716).exe (UC Browser by UCWeb)  (a5650b709d614e4aa2e6e0808a7423bf)

0 / 68
stats_uploader.exe  (d2df21c3c8566a39547b97c0c0fb3f30)

1 / 68      (PUP)
browser_v3.2.2937.0_f_4070_(build14120411).exe (by UCWeb)  (bb40e31653c0b769a24a1209c1a228a1)

0 / 68
zlib1.dll (zlib)  (06edec8612319e768bc6448cae7d43c6)

1 / 68      (PUP)
ucbrowser_v5.2.3635.1033_windows_pf101_(build15081012).exe (UC Browser by UCWeb)  (4730276523f8cd666b67e3a83edb066c)

1 / 68      (PUP)
ucbrowser_v5.6.11651.1013_windows_pf101_(build16041307).exe (UC Browser by UCWeb)  (f65b19eed0353ebc0a7e4acc16f1c31a)

0 / 68
MSVCP71.DLL (Microsoft Visual Studio .NET by Microsoft)  (ff16453ef76d459069a02c543b75028b)

 
Latest 30 of 28,560 files

The certificates below are also signed by TAOBAO (CHINA) SOFTWARE CO.,LTD..

780A0032A6CE7D0B5D5452F5CDE520DC  (Jun 16, 2016 to Jul 15, 2018)

26C758FE12D58707860F51C3DBD97BAD  (Feb 19, 2016 to Jun 22, 2016)

* Note, the details and description above are based on the code signing digital signature issued to TAOBAO (CHINA) SOFTWARE CO.,LTD. by VeriSign, Inc. on May 22, 2014 with the serial number '348a4d46c9a1a9edc2b4818465a66bed'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.