home

Wolters Kluwer U.S Corporation

Publisher Information

Wolters Kluwer U.S Corporation is a software publisher located in Riverwoods, Illinois in the United States*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
Symantec Corporation

Valid from:
1/26/2016 7:00:00 PM

Valid to:
10/24/2017 7:59:59 PM

Subject:
CN=Wolters Kluwer U.S Corporation, OU=Tax and Accounting, O=Wolters Kluwer U.S Corporation, L=Riverwoods, S=Illinois, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
6e43eb1e8eef2372ed52161a3e4b475b

Scanner detections:
Malware distribution  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.WoltersK (M), PUP (M)
100.00%

1 / 68      (Malware)
IntelliConnect.single.exe (CCH IntelliConnect Browser Search by Wolters Kluwer)  (ef45fe98d22e8acf8621231a12755a9c)

1 / 68      (Malware)
uninstall.exe (CCH IntelliConnect Browser Search by Wolters Kluwer)  (918ac8b126bb959ac4995c2def06c628)

1 / 68      (PUP)
scripthost64.dll (by Wolters Kluwer)  (386478447733048405aa2e1b41e2a2f1)

1 / 68      (Malware)
registryhelper64.dll (Internet Explorer Toolbar)  (4b7f9f6aae37a2a356d4c7444d339b04)

1 / 68      (Malware)
icschrome.exe  (bbd011c51c3b15ac40e453515aa07999)

1 / 68      (Malware)
buttonsite64.dll  (1a295e577b047109503ec67c441c37d0)

1 / 68      (Malware)
buttonsite.dll  (946b04e5d9d0eab4a54c8fc235c960f0)

1 / 68      (Malware)
backgroundhost64.exe  (d0e718e63700433c1baa50a88ec64c93)

1 / 68      (PUP)
backgroundhost.exe  (f9462cd79e9c164b650bc09061033806)

1 / 68      (Malware)
addonsframework.typelib64.dll  (2a4de3968422c95aa493fc7d72e9780d)

1 / 68      (Malware)
addonsframework.typelib.dll  (cc55a0edf554c673552193ad572b43ec)

1 / 68      (Malware)
RegistryHelper.dll (Internet Explorer Toolbar)  (5462e01a325973f12ed5c305793d16df)

1 / 68      (PUP)
scripthost.dll (by Wolters Kluwer)  (2d88da74c07c7dd19619d79436587584)

Downloads URLs for files signed by Wolters Kluwer U.S Corporation.

1 / 68      (Malware)
http://cchconnect.cch.com/.../downloadextension  (intelliconnect.single.exe)

The certificates below are also signed by Wolters Kluwer U.S Corporation.

17F693486AFB477418267B3B011DBD93  (Aug 25, 2014 to Oct 24, 2017)

2F9E53FA481802756658FD00E69311B0  (Sep 20, 2011 to Oct 01, 2014)

* Note, the details and description above are based on the code signing digital signature issued to Wolters Kluwer U.S Corporation by Symantec Corporation on January 26, 2016 with the serial number '6e43eb1e8eef2372ed52161a3e4b475b'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.