» trolatunt
Digital Signature
Analysis
Files (8,256)
Related (184)

trolatunt

Publisher Information

trolatunt is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising.

Authority:

VeriSign, Inc.

Valid from:

8/20/2013 7:00:00 PM

Valid to:

8/20/2015 6:59:59 PM

Subject:

CN=trolatunt, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=trolatunt, L=San Diego, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

16e5b55bc9746e627e43f6a38dde3e80

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

Adware.Yontoo (M), PUP.Yontoo (M)

100.00%

1 / 68 (Adware)

trolatunt2015050601.exe (fbc144edb9fe0c35a041e20152ae9da2)

1 / 68 (Adware)

trolatunt.DspSvc.dll (efbb56614b95bb5b6695ede554af768d)

1 / 68 (Adware)

trolatunt.BRT.dll (60efa4514f69337eb031f42a0c690f10)

1 / 68 (Adware)

trolatunt.BrowserAdapter.dll (c43e3ee4b343d15ffd1adb242d7e189e)

1 / 68 (Adware)

trolatunt.expextdll.dll (2ced4ec3e58c49196f7a5caaa3b2641f)

1 / 68 (Adware)

{0c0bb4a8-45a4-4685-9c1d-08d98af4b926}64.dll (XVRNT by TODO: <Company name>) (456e769b8bb0e3e95877cb47d136ee57)

1 / 68 (Adware)

{0c0bb4a8-45a4-4685-9c1d-08d98af4b926}.dll (XVRNT by TODO: <Company name>) (a3f90acc9a7aff2271fc3c6ea3836f82)

1 / 68 (Adware)

c2c9f61a93f4406288bd64.dll (0cc0d725c6a097955d62303f5a28f602)

1 / 68 (Adware)

0c0bb4a845a446859c1d64.dll (67152cf94454b01af4818a0a328770fa)

1 / 68 (Adware)

0c0bb4a845a446859c1d.dll (125ff44f5ceed1f9103c3feb7142a922)

1 / 68 (Adware)

maintainer.bak (37342d5f6f565438226a5debc0c0184e)

1 / 68 (Adware)

{c2c9f61a-93f4-4062-88bd-1922a7842068}gw.sys (StdLib) (ead320656818e47220e729c3483ad1b7)

1 / 68 (Adware)

trolatuntbaapp.dll (8681def5fb24a5941e27bb179fa322de)

1 / 68 (Adware)

trolatunt2015060916.exe (926cce080dea978eed78a16c66806466)

1 / 68 (Adware)

{0c0bb4a8-45a4-4685-9c1d-08d98af4b926}w64.sys (StdLib) (4170e57aa70faf4aab1c09e21d3f92df)

1 / 68 (Adware)

{0c0bb4a8-45a4-4685-9c1d-08d98af4b926}.dll (XVRNT by TODO: <Company name>) (094d7d29575f3970d3357cce4c5d3cc3)

1 / 68 (Adware)

trolatuntbaapp.dll (160258d0b69d3f8d9c845a805b670bb3)

1 / 68 (Adware)

trolatunt.IEUpdate.dll (04f7b815bc54a8a38bd9223e9f52c111)

1 / 68 (Adware)

trolatunt.FFUpdate.dll (975bf5f884e29a282b011b68bd508205)

1 / 68 (Adware)

{0c0bb4a8-45a4-4685-9c1d-08d98af4b926}.dll (XVRNT by TODO: <Company name>) (8c74c587dc26fa8eab7193c19b0d691c)

1 / 68 (Adware)

{c2c9f61a-93f4-4062-88bd-1922a7842068}w.sys (StdLib) (233bcfb9533de731ad733e2f3d40a17d)

1 / 68 (Adware)

{0c0bb4a8-45a4-4685-9c1d-08d98af4b926}w.sys (StdLib) (cd619a6f157e56c08a4f05fc4a96f08b)

1 / 68 (Adware)

maintainer.bak (20599f9882530beb23d780a81535126d)

1 / 68 (Adware)

{0c0bb4a8-45a4-4685-9c1d-08d98af4b926}64.dll (XVRNT by TODO: <Company name>) (5934d1a3a4f684bcd32a5272fa3dd13e)

1 / 68 (Adware)

{0c0bb4a8-45a4-4685-9c1d-08d98af4b926}.dll (XVRNT by TODO: <Company name>) (78a2c744ae91667e4d0b46af2c570ecb)

1 / 68 (Adware)

0c0bb4a845a446859c1d64.dll (5174e067ebcc5ce7ebdd6b927b5439c0)

1 / 68 (Adware)

0c0bb4a845a446859c1d.dll (8d647b0f346e0ad6085d2b1d282d3271)

1 / 68 (Adware)

c2c9f61a93f4406288bd64.dll (38c945a5c8c15167edc1921743a5c933)

1 / 68 (Adware)

maintainer.bak (6adcfe3bd1e08aaacd507a7c0b0dbfb2)

1 / 68 (Adware)

{c2c9f61a-93f4-4062-88bd-1922a7842068}w64.sys (StdLib) (55ff84381e16967c9d4e9604c8a2341d)

Latest 30 of 8,256 files

The following publishers (by Authenticode signature organization name) are related.

30 of 184 publishers

* Note, the details and description above are based on the code signing digital signature issued to trolatunt by VeriSign, Inc. on August 20, 2013 with the serial number '16e5b55bc9746e627e43f6a38dde3e80'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.