home

TGSM Inc.

Publisher Information

TGSM Inc. is a software developer located in Haeundae-gu, Busan in Korea*. The company is a primary distributor of unwanted software. Thre are 4 additional code signing certificates issued to this publisher.
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
12/14/2009 9:00:00 AM

Valid to:
2/13/2011 8:59:59 AM

Subject:
CN=TGSM Inc., OU=Dev Team, O=TGSM Inc., L=Haeundae-gu, S=Busan, C=KR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
655f3eaf0d3e7a560b415ffe5611afdd

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.OpenShopper (M)
100.00%

1 / 68      (Adware)
OpenShopper.dll (OPENSHOPPER by TGSM)  (497c44241aff13ea06ff052967d603ba)

1 / 68      (Adware)
OpenShopperC.exe (OpenShopperC by MONE)  (0e82671683a1e54abd2eba3dcf9aa033)

1 / 68      (Adware)
2435253.exe (by http://nomgame.co.kr)  (44690b66c820f61ad7bea6e8874f6293)

1 / 68      (Adware)
style_shortcut.exe  (8a8e61245f34274cfd6b0631cc1e55af)

1 / 68      (Adware)
nomgame_sharebox.exe  (e3b4670e4349aea09fc0a84cbe12f654)

1 / 68      (Adware)
gmarket_sharebox.exe (afreeca)  (72165e1801fea6ef01ead113f6840395)

1 / 68      (Adware)
btguide_install.exe  (90716e44085ca71d262053b00a4380e6)

1 / 68      (Adware)
39688541.exe  (5bb2cd18052b2f09ff5f322da38b5e13)

1 / 68      (Adware)
36348.exe  (f2a8905fac644cd1b48e2e77a49cc688)

1 / 68      (Adware)
setup.exe (by http://sharebox.co.kr)  (268af3363f739df9c10da8b8233b4450)

1 / 68      (Adware)
setup.exe (by http://jjangq.co.kr)  (55e52edbaa606a280ec5fa84c4371011)

1 / 68      (Adware)
SBoxSearchBar.exe (SBoxSearchBar by TGSM)  (59e036c629ba06c018577a7786640160)

1 / 68      (Adware)
setup.exe (by http://sharebox.co.kr)  (bf035eddcacc5a2cd68b74405d8f7644)

1 / 68      (Adware)
TGridManager.exe (TGridManager by TGSM)  (932687eef7389071a77c80a5c719d0b0)

1 / 68      (Adware)
dssupdate.exe (Downs Searchbar by http://downs.co.kr)  (e1a16ba331f7fb32f09a29b155c0e4f1)

1 / 68      (Adware)
setup.exe (by http://sharebox.co.kr)  (ae86ef9ac6b6a1add3d198be0da23e5e)

1 / 68      (Adware)
SBoxIEButtonC.exe (SBoxIEButtonC by MONE)  (dd9ec2d007ed8194819faaa5bc994bf4)

1 / 68      (Adware)
SBoxIEButton.dll (SBoxIEButton by TGSM)  (d795ad8a80a17af7d4c280b082e23b5f)

1 / 68      (Adware)
install.exe  (31aeffcf66959717f44a49fd4d017edd)

1 / 68      (Adware)
nPrivacyC.exe (nPrivacyC by TGSM)  (bc047cc36de6df04be964a3536b4bb57)

1 / 68      (Adware)
dssupdate.exe (Downs Searchbar by http://downs.co.kr)  (1332f7263b678e509534b4e7167641c1)

1 / 68      (Adware)
downs_setup.exe (by http://downs.co.kr)  (c5f2c62e4bceb2dba684c54a48e69f42)

1 / 68      (Adware)
jjangqupdate.exe (by http://jjangq.co.kr)  (7bbb01140e875695c8d3707e683673f7)

1 / 68      (Adware)
setup.exe (by http://downs.co.kr)  (09ba0ffd22ed6008db415d1033765a23)

1 / 68      (Adware)
589512.exe (PrivacyPlus by http://www.privacyplus.co.kr)  (1bb9b35fa2439fce43b457adb1c09b82)

1 / 68      (Adware)
583303.exe (PrivacyPlus by http://www.privacyplus.co.kr)  (33d6dccd4cf0f9cebd81ca9153460063)

1 / 68      (Adware)
dssupdate.exe (Downs Searchbar by http://downs.co.kr)  (8b95098c3c4c5c36f84c7928280b8efd)

1 / 68      (Adware)
sboxsupdate.exe (ShareBox SearchBar by http://sharebox.co.kr)  (d62e8da0a1c7a52488db4d0af3863697)

1 / 68      (Adware)
jjangqsupdate.exe (JJangQ SearchBar by http://sharebox.co.kr)  (075de9836254108ee5e3a7b7d704a78c)

1 / 68      (Adware)
setup.exe (by http://jjangq.co.kr)  (f4d18e2d0f12e1ddca57c817fbd25083)

 
Latest 30 of 165 files

The certificates below are also signed by TGSM Inc..

7D8725772359BB44707B7E208AE915C2  (Mar 17, 2013 to May 17, 2014)

7193DB486426289A17603DC315513E28  (Mar 05, 2012 to Apr 05, 2013)

5110A6616204B0264E74F3527FA2AA76  (Feb 10, 2011 to Mar 12, 2012)

3CF28BF78B7D2C503C83F61AB56BAFA8  (Jan 09, 2009 to Jan 09, 2010)

* Note, the details and description above are based on the code signing digital signature issued to TGSM Inc. by Thawte Consulting (Pty) Ltd. on December 14, 2009 with the serial number '655f3eaf0d3e7a560b415ffe5611afdd'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.