home

ZHANG YUAN YUAN

Publisher Information

ZHANG YUAN YUAN is a software developer located in JIANPING, Liaoning in China*. Thre are 3 additional code signing certificates issued to this publisher.
Authority:
COMODO CA Limited

Valid from:
10/14/2015 7:00:00 AM

Valid to:
9/24/2016 6:59:59 AM

Subject:
CN=ZHANG YUAN YUAN, O=ZHANG YUAN YUAN, STREET=NO. 202 UNIT 7 DUZHEN VILLAGE SHAHAI COUNTY, L=JIANPING, S=LIAONING, PostalCode=122400, C=CN

Issuer:
CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00d06cd323afb97b24b32d03a6bd7333b0

Scanner detections:
Detections  (60% detected)

Scan engine
Details
Detections

Sophos
Elex (PUA)
66.67%

Kaspersky
not-a-virus:AdWare.Win32.SearchProtect, Virus.Win32.Slugin
66.67%

Reason Heuristics
PUP.ZhuoLi
33.33%

Panda Antivirus
Generic Suspicious
33.33%

Fortinet FortiGate
Adware/SearchProtect
33.33%

AVG
Generic
33.33%

Dr.Web
Win32.Wplugin.2
33.33%

F-Prot
W32/Slugin.B
33.33%

ESET NOD32
Win32/Slugin.A virus
33.33%

Microsoft Security Essentials
Threat.Undefined
33.33%

10 / 68    (Malware)
installdowork.exe  (b6ee46e837898a18eba1112b6323ebd9)

5 / 68      (PUP)
installdowork.exe  (fe1866d15667cadb49a17e1e9f398366)

0 / 68
installdowork.exe  (2be93a4b5abeccbe959706abc2573bd3)

2 / 68      (PUP)
installdowork3.exe  (71018795047657fdf6e7de6b25db4163)

0 / 68
installdowork.exe  (c3a6c306faea1e488d41f04783421070)

The certificates below are also signed by ZHANG YUAN YUAN.

00E63E56465167101694D5E55F64F90A10  (Dec 04, 2015 to Sep 24, 2016)

009E8AA1F4262E894AF0828EA3010B4DE5  (Nov 16, 2015 to Sep 24, 2016)

00B87B078BE84D131E1E0AD44200A7F755  (Sep 29, 2015 to Sep 24, 2016)

* Note, the details and description above are based on the code signing digital signature issued to ZHANG YUAN YUAN by COMODO CA Limited on October 14, 2015 with the serial number '00d06cd323afb97b24b32d03a6bd7333b0'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.