home

herdprotect__2309_il720783.exe

Warning, this is an illegal version of herdProtect (repackaged and distributed without Reason Software Company's permission) by a company that bundles adware. Please make sure that you uninstall this version and download a legitimate copy from our site.
The application herdprotect__2309_il720783.exe has been detected as a potentially unwanted program by 21 anti-malware scanners. This is a setup program which is used to install the application. The setup program bundles adware offers using the Amonetize, a Pay-Per-Install (PPI) monetization and distribution download manager. The software offerings provided are based on the PC's geo-location at the time of install.
Version:
1.1.5.26

MD5:
8e7fb15f0222a31cb74cb8d4c2103f3b

SHA-1:
878dd01644ee390e05888eb66e42064bc75827e1

SHA-256:
f35ad1af9a1f747e1621e4654216c141a46f43aad98ecde110ea6e8537c9a579

Scanner detections:
21 / 68

Status:
Potentially unwanted

Analysis date:
11/27/2024 12:12:45 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.Amonetize
7.1.1

AhnLab V3 Security
PUP/Win32.Amonetiz
14.03.22

Avira AntiVirus
ADWARE/Adware.Gen2
7.11.138.108

avast!
Win32:PUP-gen [PUP]
2014.9-140322

AVG
Generic_r
2015.0.3528

Baidu Antivirus
Adware.Win32.Amonetize
4.0.3.14322

Comodo Security
ApplicUnwnt
17975

Dr.Web
Adware.Downware.2250
9.0.1.081

ESET NOD32
Win32/Amonetize.AI (variant)
8.9577

Fortinet FortiGate
Riskware/Amonetize
3/22/2014

G Data
Win32.Trojan.Agent.AGYREV
14.3.24

herdProtect (fuzzy)
variant of fraps__2497_il54555.exe (Adware)
2014.5.21.4

Kaspersky
not-a-virus:HEUR:AdWare.Win32.Amonetize
14.0.0.4134

Malwarebytes
PUP.Optional.Amonetize.A
v2014.03.22.04

McAfee
Adware-Amonetize!DC035ED17CF1
5600.7184

NANO AntiVirus
Riskware.Win32.Amonetize.cvojeb
0.28.0.58491

Qihoo 360 Security
Win32/Virus.Adware.932
1.0.0.1015

Sophos
Generic PUA GM
4.98

Trend Micro House Call
TROJ_GEN.F47V0320
7.2.81

VIPRE Antivirus
Amonetize
27652

XVirus List
Win.Detected
2.3.31

File size:
322.5 KB (330,240 bytes)

Product version:
1.1.5.26

Original file name:
setup.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\herdprotect__2309_il720783.exe

File PE Metadata
Compilation timestamp:
3/20/2014 5:03:59 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:wiR+/9HMChrH2h7vMFSHyYFBRTEWO3g+eTc8R/UgcjAAS9xp3aGmyDM8EQj:wiR+1HMCZ2h7kcHyYPRTMIRfckAS9xpj

Entry address:
0x27146

Entry point:
E8, BA, 95, 00, 00, E9, 89, FE, FF, FF, 53, 56, 8B, 44, 24, 18, 0B, C0, 75, 18, 8B, 4C, 24, 14, 8B, 44, 24, 10, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 0C, F7, F1, 8B, D3, EB, 41, 8B, C8, 8B, 5C, 24, 14, 8B, 54, 24, 10, 8B, 44, 24, 0C, D1, E9, D1, DB, D1, EA, D1, D8, 0B, C9, 75, F4, F7, F3, 8B, F0, F7, 64, 24, 18, 8B, C8, 8B, 44, 24, 14, F7, E6, 03, D1, 72, 0E, 3B, 54, 24, 10, 77, 08, 72, 07, 3B, 44, 24, 0C, 76, 01, 4E, 33, D2, 8B, C6, 5E, 5B, C2, 10, 00, 57, 8B, C6, 83, E0, 0F, 85, C0, 0F, 85, C1, 00, 00, 00...
 
[+]

Code size:
229 KB (234,496 bytes)

The file herdprotect__2309_il720783.exe has been seen being distributed by the following 21 URLs.

http://www.effortlessdownload.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Pokemon X And Y Rom Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1864743133.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Pokemon X And Y Rom Downloader&instid[thankyoupage]=http://.../?success&instid[interrupted]=http://.../?cancel&ti1=1864743133

http://www.prudentdownload.com/download.php?version=1.1.5.26&campid=6183&instid[appname]=Candy Crush Saga Kurulum&instid[appsetupurl]=http://www.tvce.net/dosyalar/New-Version.exe&instid[cmdline]=&instid[appimageurl]=http://.../resim/files.png&prefix=Candy Crush Saga&instid[thankyoupage]=http://.../git.php?k=tamoyun.web.tr

http://www.averagedownload.com/download.php?version=1.1.5.26&campid=3062&instid[appname]=setup file&instid[appsetupurl]=http://www.downloadfullcracks.com/download/file.exe&instid[cmdline]=/S&instid[appimageurl]=http://www.myutility.com/images/product.jpg&prefix=Realtek ALC662 Intel 82801GB ICH7 High Definition Audio Controller A 1 PCI.zip&instid[thankyoupage]=http://.../hxfqf4aaqr86w3h.html

http://dl-gate.net/?id=t198&subid=IfewmTkVt214yLqLBq5AmIGQg4vlIUaIU-8oaxBPfylF&name=japan pictures glossmen nm133 no mask

http://1phads.com/ck.php?oaparams=2__bannerid=71318__zoneid=8633__OXLCA=1__cb=7a2754400e__oadest=http://.../?id=p191&sub=ar&name=Flash.Player&nor=1&subid=${SUBID}

q=http://bit.ly/MN1sTx

http://www.accuratedownload.com/download.php?version=1.1.5.26&campid=3818&instid[appname]=E-40_Lil_John_Lil_Jon_Sean_Paul_-_Snap_Yo_Fingers_(get-tune.net).mp3&instid[appsetupurl]=http://stream.get-tune.net/mail/101372783/34893551/3627102611/2f23636247e3bfae/E-40_Lil_John_Lil_Jon_Sean_Paul_-_Snap_Yo_Fingers_(get-tune.net).mp3&instid[appimageurl]=http://get-tune.net/.../site_prw.png&prefix=E 40 Lil John Lil Jon Sean Paul Snap Yo Fingers

http://www.accuratedownload.com/download.php?version=1.1.5.26&campid=3818&instid[appname]=John_Mayer_-_John_Mayer-Slow_Dancing_In_A_Burning_Room_(get-tune.net).mp3&instid[appsetupurl]=http://stream.get-tune.net/mail/81211725/91575757/3627102611/2f23636247e3bfae/John_Mayer_-_John_Mayer-Slow_Dancing_In_A_Burning_Room_(get-tune.net).mp3&instid[appimageurl]=http://get-tune.net/.../site_prw.png&prefix=John Mayer John Mayer Slow Dancing In A Burning Room

http://stream.get-tune.net/file/81211725/91575757/418589166/.../John_Mayer_-_John_Mayer-Slow_Dancing_In_A_Burning_Room_(get-tune.net).mp3

http://www.singulardownload.com/download.php?version=1.1.5.26&campid=6629&instid[appname]=SoundCloudDownloader&instid[appsetupurl]=http://download.freesoftindex.com/software/SoundCloudDownloader_Setup.exe&instid[cmdline]=/S&instid[appimageurl]=http://download.freesoftindex.com/img/150x150/soundcloud.png&prefix=SoundCloudDownloader&instid[thankyoupage]=http://.../finish.php&ti1=4951-0-soundcloud

http://www.downloadsoundcloud.net/.../49510

http://stream.get-tune.net/file/119000189/2343245/2536117493/.../Man_At_Work_-_Land_down_under_(get-tune.net).mp3

http://stream.get-tune.net/file/101372783/34893551/1899852535/.../E-40_Lil_John_Lil_Jon_Sean_Paul_-_Snap_Yo_Fingers_(get-tune.net).mp3

http://www.accuratedownload.com/download.php?version=1.1.5.26&campid=4051&instid[appname]=FVD Converter&instid[appsetupurl]=http://fvdspeeddial.com/amonetize/fvdconverter.exe&instid[cmdline]=/verysilent&instid[appimageurl]=http://fvdspeeddial.com/icons/fvdconverter.png&prefix=Pref_FVD_Converter&instid[thankyoupage]=http://fvdconverter.com/.../welcome

http://fvd-converter.com/download

http://www.singulardownload.com/download.php?version=1.1.5.26&campid=6131&instid[appname]=Pazera Free Audio Extractor&instid[appsetupurl]=http://www.pazera-software.com/files/Pazera_Free_Audio_Extractor_AM.exe&instid[cmdline]=&instid[appimageurl]=http://www.pazera-software.com/img/.../audio_extractor_icon_128.png&prefix=PazeraFreeAudioExtractorSetup&instid[thankyoupage]=

http://www.singulardownload.com/download.php?version=1.1.5.26&campid=6131&instid[appname]=Pazera Free Audio Extractor&instid[appsetupurl]=http://www.pazera-software.com/files/Pazera_Free_Audio_Extractor_AM.exe&instid[cmdline]=&instid[appimageurl]=http://www.pazera-software.com/img/.../audio_extractor_icon_128.png&prefix=PazeraFreeAudioExtractorSetup&instid[thankyoupage]=

http://www.optiondownload.com/download.php?version=1.1.5.26&campid=2963&instid[appname]=SpyHunter 4.1.11.0 Full Crack&instid[appsetupurl]=&instid[cmdline]=&instid[appimageurl]=http://www.people-solutions.co.uk/files/3213/2576/.../download-icon.png&prefix=SpyHunter 4.1.11.0 Full Crack

http://www.accuratedownload.com/download.php?version=1.1.5.26&campid=3687&instid[appname]=Steam Key Generator Downloader&instid[appsetupurl]=http://fastmediadownloads.com/download/Prompt-Downloader-1641187259.exe&instid[cmdline]=&instid[appimageurl]=http://.../logo.png&prefix=Steam Key Generator Downloader&instid[thankyoupage]=http://.../?success&instid[interrupted]=http://.../?cancel&ti1=1641187259

http://www.specificdownload.com/download.php?version=1.1.5.26&campid=2299&instid[appsetupurl]=&instid[appname]=DownloadSetup&instid[appimageurl]=http://.../dl.png&prefix=DownloadSetup&ti1=p191.dw3.0.download3.3226c240d15&ti2=4831468126

http://www.inndir.com/inndir.php?id=50587&inndir=c10606b7b63862691c538bba0f790c79&alt=

Remove herdprotect__2309_il720783.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.