home

Wuhan Weijun Keji Co.,Ltd.

Publisher Information

Wuhan Weijun Keji Co.,Ltd. is a software publisher located in 湖北, China*.
Authority:
Thawte, Inc.

Valid from:
3/14/2014 8:00:00 AM

Valid to:
3/15/2015 7:59:59 AM

Subject:
CN="Wuhan Weijun Keji Co.,Ltd.", O="Wuhan Weijun Keji Co.,Ltd.", L=武汉, S=湖北, C=CN

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6ab1dd3a280f27edf66bb99818653407

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

K7 AntiVirus
Unwanted-Program
100.00%

VIPRE Antivirus
BehavesLike.Win32.Malware.bsw (vs), Trojan.Win32.Generic, Backdoor.Rbot
66.67%

McAfee
Artemis!FA428563F416, Artemis!33B8328FA898, Artemis!98C1501BC322
50.00%

Trend Micro House Call
Suspicious_GEN.F47V0116, Suspicious_GEN.F47V1226
33.33%

Vba32 AntiVirus
Backdoor.DarkKomet
33.33%

ViRobot
Adware.AppDownloader.1941752[h]
16.67%

Sophos
Mal/Emogen-R
16.67%

AVG
Skodna.Generic_c
16.67%

MicroWorld eScan
Trojan.Generic.6561016
16.67%

Lavasoft Ad-Aware
Trojan.Generic.6561016
16.67%

0 / 68
yongzhedouelong4.1403506120.exe (by www.962.net)  (b085215761d469892508f0484a4a5c37)

0 / 68
sanguoqunying8.exe (by www.962.net)  (58966dafca4c0bd781ab2de0361fbc48)

0 / 68
clxxz (by www.962.net)  (6e532b15867f4fae31ff836b2097acba)

0 / 68
jjdjrsrb.exe (by www.962.net)  (63dd9207903510fb98d5f8cf68a1f843)

0 / 68
bh2002.exe (by www.962.net)  (3a96dc982b995d9b8c5f77208bd9053e)

0 / 68
bianlishangdian1.exe (by www.fxxz.com)  (111fc590385b464480afb337c4a57ce5)

0 / 68
diablo2.exe (by www.962.net)  (36a6f9a15e2bcea9f96e9a4afb509d5d)

0 / 68
jihuangzsb.exe (by www.fxxz.com)  (f3cedfd0174adddc5dda3b2e51c9c16b)

0 / 68
terratech.exe  (5f74de8511a4220f92eaa6c2f2b5ec5f)

0 / 68
xianjianqixiazhuan4.exe (by www.962.net)  (1e09ab548dafaf58c62e48dd31c283b6)

0 / 68
koudaiyaoguaiqhdmy.exe (by www.fxxz.com)  (6b226a4efa719e4b092b78ae3590b162)

0 / 68
tunshitiandifcb.exe (by www.fxxz.com)  (f564c54702274a998739695e6df5beba)

0 / 68
star2000.exe  (5638f1684801ba3865e68662e85f1ff7)

0 / 68
tjrjlfny.exe (by www.962.net)  (b4747391473fc8755e30867463342337)

0 / 68
mhmnz5.exe (by www.962.net)  (48916e00da63b39744d23b8cda900636)

0 / 68
beachhead2002.exe  (9cc31e44cc9587e9a3c44295eb468dd2)

0 / 68
adsgz2014.exe (by www.962.net)  (3cc204c45ce35079080c531c13a0f3f5)

0 / 68
witcheslegacyslumberingdarkness.exe  (504cf7e44e35bcd6662548a611888b4c)

0 / 68
prisontycoon4  (4441a960e3365537753e8d1bcd85f7d7)

0 / 68
trz4883.tmp (by www.fxxz.com)  (c5feb620e54cc83ee67ea7cf92591861)

0 / 68
sanguoqunxz1.exe (by www.fxxz.com)  (cf964366aee9835f602128ec6c8e173d)

0 / 68
hongloumeng.exe (by www.962.net)  (73a6e063230ee63bd0da4d203169cac9)

0 / 68
shahe.exe (by www.fxxz.com)  (ea40368f82988c5ad4a1a8d7588a13a7)

0 / 68
wm3k2.exe  (c12080a1777aeeb647ab73e96eae5574)

0 / 68
cfxiaoyong1.2.exe (by www.962.net)  (7933d2fea068f132fe03aa95bc75f17a)

0 / 68
baiguiyeyanzw.exe (by www.fxxz.com)  (1157e66624d6e608df2e3c55ae93a9c7)

0 / 68
~UP8832.tmp (by www.fxxz.com)  (7df7215680692c438cf0bdedc261b07e)

0 / 68
adb.exe  (5a23a239f5270fef934e361e84bd7a2c)

6 / 68      (inconclusive)
haiyandownladtag_21221_7515.exe (by www.fxxz.com)  (004147a6d920dc21be8daf330eb38417)

0 / 68
maou.exe (by www.962.net)  ()

 
Latest 30 of 43 files

Downloads URLs for files signed by Wuhan Weijun Keji Co.,Ltd..

7 / 68      (inconclusive)
http://172.16.1.139/1Q2W3E4R5T6Y7U8I9O0P1Z2X3C4V5B/xzq.ahguizhen.tv/.../setup_pc6_58954.exe  (fa428563f4162ac3865b27e8a19ba95c)

7 / 68      (inconclusive)
http://xzq.ahguizhen.tv/.../setup_pc6_58954.exe  (fa428563f4162ac3865b27e8a19ba95c)

7 / 68      (inconclusive)
http://down.t071.com/.../setup_0_22935.exe  (fa428563f4162ac3865b27e8a19ba95c)

The following websites host and distribute files published by Wuhan Weijun Keji Co.,Ltd..

xzq.ahguizhen.tv

down.t071.com

* Note, the details and description above are based on the code signing digital signature issued to Wuhan Weijun Keji Co.,Ltd. by Thawte, Inc. on March 14, 2014 with the serial number '6ab1dd3a280f27edf66bb99818653407'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.