» veberGreat
Digital Signature
Analysis
Files (246)
Related (77)

veberGreat

Publisher Information

veberGreat is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising.

Authority:

VeriSign, Inc.

Valid from:

9/19/2013 2:00:00 AM

Valid to:

9/20/2015 1:59:59 AM

Subject:

CN=veberGreat, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=veberGreat, L=San Diego, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

377d972bb16b6077e300ed74c9fa32c8

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Yontoo (M), Adware.Yontoo (M)

100.00%

1 / 68 (Adware)

{c1dce223-b13c-4922-b8de-f790deabb4f5}w64.sys (StdLib) (01f2bab3aac07f8d1ce6d8fbed46f91a)

1 / 68 (Adware)

{85280d41-aaff-423b-b5f7-c41996a73cad}gt.sys (StdLib) (cd8ca719fc028170efc8238d317871c3)

1 / 68 (Adware)

vebergreatun.exe (b28b395546a9b54e32bdce196cedc60c)

1 / 68 (Adware)

vebergreatbho.dll (veberGreat) (10a0e03f869f8a68131f6f7f649fc2c9)

1 / 68 (Adware)

{85280d41-aaff-423b-b5f7-c41996a73cad}.dll (XVRNT by TODO: <Company name>) (5ec18bb0c938daf3d6e81a7ed03c0051)

1 / 68 (Adware)

vebergreatbaapp.dll (c38ed870eae083d7d968e56e938523af)

1 / 68 (Adware)

vebergreat.browseradapter.exe (1e1a1ff9b04787fcd77173362c722a5e)

1 / 68 (Adware)

utilvebergreat.exe (3fdf0304984b47d150a4fe698f32e239)

1 / 68 (Adware)

updatevebergreat.exe (ed5ddc42339ad008b4c2e738c5f2c216)

1 / 68 (Adware)

maintainer.bak (c697e22f678eeeecb77aba0519a6a8fa)

1 / 68 (Adware)

{85280d41-aaff-423b-b5f7-c41996a73cad}64.dll (XVRNT by TODO: <Company name>) (e4fab82edfdfa7d0000a8cf77a654b41)

1 / 68 (Adware)

vebergreat.expextdll.dll (042360c870393b4b7ce58b189d56cec1)

1 / 68 (Adware)

c1dce223b13c4922b8de64.dll (ca6cbcf32d69775b51fbeb4ca327d58d)

1 / 68 (Adware)

85280d41aaff423bb5f764.dll (87cc34edeebd714b3ad274331e2fd692)

1 / 68 (Adware)

85280d41aaff423bb5f7.dll (d60b5e43ca736bf48afaabfeea6fd2d7)

1 / 68 (Adware)

{c1dce223-b13c-4922-b8de-f790deabb4f5}w.sys (StdLib) (2d5317d2eeceb3ec6e9d18a96e3595f8)

1 / 68 (Adware)

veberGreat.BrowserAdapterS.dll (49621be1dd36fef4e70a0d55de8c8ddc)

1 / 68 (Adware)

setup.exe (be35bd8c84421687691eea7ce3748708)

1 / 68 (Adware)

{c1dce223-b13c-4922-b8de-f790deabb4f5}w64.sys (StdLib) (80822232caec6235377c16b3482e6d35)

1 / 68 (Adware)

{51cce14c-adbe-400c-892c-ebd022c02a38}w64.sys (StdLib) (61558b183a93c3204544824356b81d85)

1 / 68 (Adware)

veberGreatBrowserFilter.exe (56434a32344b2d040dde08b3779175c2)

1 / 68 (Adware)

vebergreat.expextdll.dll (5ba258ca226b8aac58199ad2a284fba3)

1 / 68 (Adware)

c1dce223b13c4922b8de64.dll (b6cacff537a3994afe4299e192499403)

1 / 68 (Adware)

vebergreatbho.dll (veberGreat) (55ec7ceb3684d6e6f60b9d59bc488d92)

1 / 68 (Adware)

{c1dce223-b13c-4922-b8de-f790deabb4f5}w64.sys (StdLib) (b0521a2a2a364e62505d80ce412819f0)

1 / 68 (Adware)

{85280d41-aaff-423b-b5f7-c41996a73cad}w64.sys (StdLib) (e03f2fd901e706221221ef94633b9b5b)

1 / 68 (Adware)

{51cce14c-adbe-400c-892c-ebd022c02a38}64.dll (XVRNT by TODO: <Company name>) (dcf614a90aeb0b4b1df68e85f966ebd0)

1 / 68 (Adware)

{51cce14c-adbe-400c-892c-ebd022c02a38}.dll (XVRNT by TODO: <Company name>) (53319787ba1c46f534c1eb1062f5a923)

1 / 68 (Adware)

vebergreat.expextdll.dll (fa4b6cd337d24094225eeca26b595342)

1 / 68 (Adware)

c1dce223b13c4922b8de64.dll (920b64058981ae7ced94481ba92219b5)

Latest 30 of 246 files

The following publishers (by Authenticode signature organization name) are related.

30 of 77 publishers

* Note, the details and description above are based on the code signing digital signature issued to veberGreat by VeriSign, Inc. on September 19, 2013 with the serial number '377d972bb16b6077e300ed74c9fa32c8'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.