home

icreinstall_frozen-font-programas-gratis-net.exe

Installer Internet Web

AgileMax (New Media Holdings Ltd.)

The installer utilizes InstallCore which may bundle about 3-4 offers for various ad-supported toolbars, extensions and utilities. The application icreinstall_frozen-font-programas-gratis-net.exe, “Installer Internet Web Setup ” by AgileMax (New Media Holdings) has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the installCore installer. It is also typically executed from the user's temporary directory. The file has been seen being downloaded from www.giftbulkstock.com and multiple other hosts. While running, it connects to the Internet address os.solvefile.com on port 80 using the HTTP protocol.
Publisher:
Software   (signed by AgileMax (New Media Holdings Ltd.))

Product:
Installer Internet Web

Description:
Installer Internet Web Setup

Version:
3.4.4.8

MD5:
8d05607c71a56a5b98f3a944fe458168

SHA-1:
d8715095c538bff3b542ea3ecefd720d28e96f32

SHA-256:
5506aee069f45aaaf0de86de6b7c39497925b1cd657ffdc3baa7db4db80c3a9e

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Utilizes the InstallCore download manager that may bundle various adware-type offers.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
12/26/2024 2:28:11 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.NewMedia.NMH.Bundler (M)
16.2.27.8

File size:
958.3 KB (981,304 bytes)

Product version:
3.1.5

File type:
Executable application (Win32 EXE)

Bundler/Installer:
installCore (using Inno Setup)

Common path:
C:\users\{user}\appdata\local\temp\icreinstall_frozen-font-programas-gratis-net.exe

Digital Signature
Signed by:
AgileMax (New Media Holdings Ltd.)

Authority:
GlobalSign nv-sa

Valid from:
12/16/2015 9:04:31 AM

Valid to:
10/30/2016 12:53:45 PM

Subject:
CN=AgileMax (New Media Holdings Ltd.), O=AgileMax (New Media Holdings Ltd.), L=Tel Aviv, C=IL

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112186313590F7C0AF7C143BC6BDE6200476

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:RKSxgTgYTb5VISBjR4+UL5WwuLCv9yUQ3YuEjHyq8pU:RreTgmVVH/U9WwWCv9yJ3aZI

Entry address:
0x9C40

Entry point:
55, 8B, EC, 83, C4, C4, 53, 56, 57, 33, C0, 89, 45, F0, 89, 45, DC, E8, 86, 94, FF, FF, E8, 8D, A6, FF, FF, E8, 1C, A9, FF, FF, E8, BF, A9, FF, FF, E8, 5E, C9, FF, FF, E8, C9, F2, FF, FF, E8, 30, F4, FF, FF, 33, C0, 55, 68, FC, A2, 40, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, C5, A2, 40, 00, 64, FF, 32, 64, 89, 22, A1, 14, C0, 40, 00, E8, 96, FE, FF, FF, E8, C9, FA, FF, FF, 8D, 55, F0, 33, C0, E8, 83, CF, FF, FF, 8B, 55, F0, B8, 24, CE, 40, 00, E8, 32, 95, FF, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, 24, CE...
 
[+]

Packer / compiler:
Inno Setup v5.x - Installer Maker

Code size:
37 KB (37,888 bytes)

The file icreinstall_frozen-font-programas-gratis-net.exe has been seen being distributed by the following 36 URLs.

http://www.giftbulkstock.com/c?x=alRGqHN/kB0s 8xAGesxoqnu6Rhi8SVMLRIrRrTtW U=&c=JJgJ/dyxekUBBUKTpCT4T3tHJL9m0ISoGOAVUBM/FBIb3 6fd6RBtMeBwS488lvQJ9NS01bjJxgkoicDr8Z4mYCfCvLSorX6tSj2r4U/8uyBB1SG0maA5T9Q45 TIAb0dI/CnC0uao PuTj99GlhIt/ViL5wO1I8SerNU2i/eD4=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x=f5c0wi5c 3Y1OjhXNWV ug6HsOuQlK1R70OpmQeTPG0=&c=y4lqWKZo8zGB29oS3z lqjbRQRl9pTavh2rLfzFgkjUiEccvPi2HYg45x9k U 4xL6eTpP8eJlIMe C1v1yhzz 3aRlQ05CfT/0JLZSYGGZt8miryb oFNjA9M7ls4FMZejCr3wusNaeDQz2tN9w2Yy4Yp1pAsT9xqiy/C6QyEP5YRLxw/XrEQ ypz7R0hqJ&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.bundlecentralbulk.com/c?x=DmluraZn3q00rO6IqKUiaP4JRxEk46/6m6dOC1WG5Xw=&c=TnCiDhAd698xPYkDoJNFlr dZIkV69xaJTzMZxtYZZXn5FoGlx1f9RonV9wdzcQoGVZ/RqQTFBFLpdyMUzZc24Us2xuU5Ui0ToJFD9kg1y7s2KhbuPB3vm5xcGlWaQU7tu/4mfk/cnX8EoVkskid82/g4xU4sVEGffiYEG9ND8I=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.bundlecentralbulk.com/c?x=MWwwB9oNd20B1Tou3OAty9lRfTLyMNMxmVh26nMcxcU=&c=pQZBEFtBYqB2k3xrKNffdcqM8be/k526GXWvNAfxdBQXILBSlEVBQw66cMFVIx3nfHzhHLLF/4YHv2eLe05pEW6ZO zlGR8T0yzSqklWiQZgAPQcdpoU1YwrQH2mdM5q khYOxj8qEqThn98sbH75P06hsQtdrnbJ7IVCqlBfXY=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.farmflashtour.com/c?x=Eisj/RFN1iAj QfiWJ65KgydrGgbYzYlCA1zGk3UzV8=&c=lYGkJS5F9usLPhPkCtIsPKJdp01DsE22r0aTe1sOaT0CZ/GD1f5zHPdzY/bbRwsCFHGYEd487u7DjsRNQ1UQkNUHDYMtgMHCZGZzVqDJzDjq58ihhG260Kz1ehgCCDHG7PuxQFuHd6PzQ3HcJmAtd1NoAn//vsE58RuZoGss2nSvCa9T4HCMkWHNuR9/rJHv&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.headsignchuckle.com/c?x=4FCJNm3n5nKZNMaYzIgTD1dLOHtT1NJaeCRunkwJPO8=&c=Vulmv2XNWHfXae0Boaeb83t9wkvXkstn5F29men9KVNJbHDSFTFWF31xPAFEKOFXZQWnIFcw2OTze1 UNE9eyX7mpQwTuYyEVAO176PLYwnwqKszRkXOFN2fK7OK0edteES5BDh2Ru9fOCHNC43wBO2eEXWipyVt9wnaahMz8rc=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x=Wdk/GoPQwHHewmTXoSBmtO/WA txhI2j6Rui4noVmm0=&c=M/qiWg50FGkYQ4fbXKoLBxg5r0/NWaFo/Ts4XAl7NxScknPuNSHJ2rYCpjtO2ay4EyAHg4ZySkJYs1f/CLOheNHSHcMwtoCLbOfGEuiNVKfjIukgB6I F3qkoTK6uZCiIoUfkmryJVNGBK/EYSB9LA2hAwBjww1yLKmyWZTXGUjYmAWgg3x4eOSQuhlcRG5C&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.bundlecentralbulk.com/c?x=ZQRoC2NTtHAc0gdbQRMaXk1/Fei9ub1qjjOTghceS5I=&c=qiBaRc Reac5j0Tq5St9iHhoKMJuW9ykMd1i5vxMkwNk/uwr14uEzs6U9K69C9YVjBCk3YaFtc/Doo5UrU08W1C7aYl/RLa8FvSBOOI4bFZ8tXwMcZGBNZYiAHlENvXFceVTnTvSeoO6uZ9nJ6/k9CGm 9/gT2ezajkR0VTL4oE=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.bundlecentralbulk.com/c?x=0VnVyFEYq1xl7lEm1u8HRmW wq/QyExJUJDFHiX0MTc=&c=QxFyeIM5g8Uu hWn837UVQNAoKtQPWuVHsb6TwUGj93MyoW1Zam1/iKleoaAMT1h6SOCo6ZYcqodFqvQCnxoqOpbaFsASBsBZcn1R1XiZXS2SsqNiTs/ze4qSe/JkVP1J9uVri6eLmFLA7IAt9niXVnxZOiJUbD9MHwTkzljNcM=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.bundlecentralbulk.com/c?x=NvQltqdQ3d32 K133QUj/hPvh/uDnNb9P9 2M5UEeFA=&c=YJ/mChQ8L HLiXMfpqg99bax/tekKTgNNmxF8LW0uwMrwRidiVtpPQf7GhemptFhwS8AabP07fVPMLa8bPQwtbutKAVizrFhLGU0ertYSl5nTjMvV0uGMzAHhCexmvDJfN1USoFhLeWFR D iH aD5LRbROddMKmJQCEY4LSYjw=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x=EZvwLPY6fUi7Lwclwia8UnM0kLRheqOATYaEx4YbsJ8=&c=1EpcppEHA8oNB73HDFmX6vAJCFaCYtpC9hliuFz8OfyzopnuT4bnd2SEx2YE8cJXWmyH8OMNhIQv38hIWKmShoYCsfJiZWLTtnabkSA/v8lzHT3bAWnhbB4B6YUdeID/ucljQTy4 zeMRRpAIrlYs5R1OnkPd9JtT7wv/DEdtsA=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.bundlecentralbulk.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

http://www.sendtowersnew.com/c?x=mfutoZRyNXoRiVk9BkHRJbVXeoFgUB1Ydv1NRyCfYpY=&c=Xs3DrTmYePz12ND1xTcC7N9AYugkoOWNwSMkv2zbH/7ifD5Axj94kdglisT gSdc7K6 ysqUugQWpuCh4XUWaJc1NPpF21nwcoDIYgsXcUCZa1/cowy0za//zFtL66xHxj2ggb0lxGOsRLvYzal8wMD7f05qbEJa2Pdgza ij0ZA5lysc/EyKv6TzUr1ioiL&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.bundlecentralbulk.com/c?x=UQ3Ut7UavUTZvTkaS0y9DJj0Lr0HvzAnyg98BfG7QeY=&c=o9BngLOR5rRMsGWoi4pkfx5ZnopH3dUxIVXxf0AbOjOL3GR1kdVCxbi1xDYR Z5DFBZIvpm1Iosles0F7ZMAjdAj xM pjexCG4MsVk7zitYvm050sSJzWeQ17ZfNlpbWPs11QTnZ5HQwcaWhGW6c0jKAbJsIqg1JCZrhZ0gHw=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.bundlecentralbulk.com/c?x=n07AECoqA45Dhjti C5AkzNRCWxV0355MNtvFMr6FI4=&c=tGLiRfZGftgpSYG1KPsOXQ3Vl/m4KDts3KwpU37p9p/3NPM4z2TQbhL0xg3LCNfpAukuN4qhDjJdd HDEAPl89NU9VlelVkXYOpUH2 3DhTsDsTnRq1MpHvWVSSuHFlfJmuQWiDAd0TIY6AY WD1DN0EGecew0WQrxf2hux76ZY=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.besttoursvaults.com/c?x=fraTzbppEbazAnrdge8W9nDfHuSIaB9AvMGv14wi4VY=&c=x/dGxfXU8JXBw2jeITeGXZAba/fT8f3LK9Sr673HlK9Wm2s90XuVMgyt00zH7kjarlzWC9WXvVNOyID/vonlbI4esO1fh9wrsIB1MP2Cv3nd89wuRKv12woeh2piKjSUVKW fW8RPPRTrD 4d25LVI3eogWZYJMFnbQbIL4Weeo=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.besttoursvaults.com/c?x=KnDMuzJfJ/rt8Fr3LzK5IUCvpf4XGiSQgAVCZnpqHmw=&c=v43U6Pxm1Y1jY4eyhjIAk/D8M00cM2vTxMvQ64gpmtXHPj9koeFiqZlUVPm9N2DgQXCpLx2Cc9 Ipz3iu4gBb7j982b4vN851oU4DcRO4EEcKosSuzBnSkR3yHUn5jp/hNPZbiNOBnmhtOsRuYwRr9r1D2dvbQbRLVxwJUqzpNw=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.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

http://www.sendtowersnew.com/c?x=VJljQKekjMFNJdcxkBjwDSD0ITvAnQttAbqWXwJTF8M=&c=4tHXNo iuoTtDE5n3FuhcYutS69CNZpb/PlKnZQURadbp6Og2YTUTpjM0j9BUM9jaupywDfTgY/PSi8FEb0uL4QygtNZHKYScDXP5s4iQ2rBp7eCiUAmob22OzYba48qhl1KHMyp3EpPwv7k3d2qPiWNgmxbx aw7Q25fJkAVTo=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x=c57q/dVA1VQwCVQ9w6ASXkV0nXJalSDepn8nQO8eRp4=&c=qOLGd0GdOZiv91gRjVmSSSxoon xHkoBS1z91MF5WPbstZMRtaGr4iKdVQiF saoBs1MzJhfSsSP/zhO3k4iO8BF3n5u1K08B3tBjHEuYdT/6qL9jV5Lr4h8wMGUYSjZt1s4jNaOL 06lCfN6cMYRnvDsfrLWQ7isNs9KiPu6uUKn6zR3q 7X7/CfTsWrr1A&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x=e1Lgf9hYWPyio6thBRpqFuW75x8XKbHrWCAg51FnqeI=&c=1kWpbZQPoScH8sDysZEt1UVG4ZY/ES/8yxrjwP1VACL7m0FEJ2Tgv5QljO1rPjs/1401f5PGm mbS6qjhrkkGdZk7a8rnC4hcU8hqkUW1bACsEl7Q9G3MzEl3k3Cr4o1eTJCjOtu5qPxMHlh/lV82o8nEZCKovhpFtifEgpoKL0=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x=n7Ooa9qwFTqibonz7Zznbn5gTywfWrVBHDK sYHBGSA=&c=GtMdEeDdwrNF/JURtSC4cT/hiyf1EeIakzgh//C3Wu3FlwwvGdZA8Pcnbp2rMYiAUC/dW1miPMZrXgkC4JEFw35U4G2Z9t8PWmjhzqt4WqKPAbXNsEhaZjDr2AZZTP0NUJcE825N0jdzvm4qH8aPbbgvFUX72/aeWU/wfI4u8yu4lSJnfS9oC5Fa7cMszQcM&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x=zzw 2igrfwBPXU2swlSdCSLdvgFSaxav64eJuPQ4E1w=&c=Q67XmAtdyHZCDpOWx4J6KvT6xZaZYNycppaay35vYWsk9R4rD1XXj7YExiMtiRAQn4uicSZpCglEFRAVHepm3x2hdpzw5aJD6gxg3QZhK02CqgfNoPIkG70FLOSzFpVO5Cz4FTXFSIKGy6dC5efsYDOrAmE5Rc4kFmI3UhhgY3iO6CJjMAUun6vEL wIVV j&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x= iHigDQ/lcfCVIddLAg3AkKr1XHkmv00XSewkrGgKcM=&c=xtdoOGcQQqynDu5rx 3maEUXhsSvh1wRsPomZqraL9d HyrQ5 Vmn96FaZlfB2TVB/aN9v9XsdjmDEEiN8InKh9lLYMoe9UN3b1bfk2aOwaLbFl1hVSe3bJEzOexD4q9IsA 50PQ5vLlYGFE7934XXaqan4kuCNivcvCFlwemMA=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x=ukCFhaN17A4A7uvXOCZsr5rWRTQJ/3tI096HHFBfGMA=&c=2OONWT 28aDFd2mNSOTDoK4PY6cP/N8kxeSWiJr5FNqQr061V1LLu57CTh3nic 42VPOVKv1oFtWUGh7zkX8UDRRmL5nEMhNzO2BxVBD6xcUo4RCjHQfpWTOwtscv76L43M D2b8VOQHnNxBZB8wxUl/amSbmkBwe0spkfD33dY=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x=eUBGbqwAjWmbDw5K0ie3j9HpNiTax0Rf4nuzA8f2nro=&c=WAD3HW8oHxasCDU0ozBBCpQCulnffm/p50pV52oh8dt8x7DTNdB5N2Ln1m8trA4DCvlzSeqZ4UFzsrF9n8XPjC0OqmU1O8 6y7NmlpqGCv4o642Ain8a8JTtBmtPBo7j Wnnd fVZQDP2sgsYk9AyqR7yymqsyS8h7XNbUG5qDtBKZpnqkaKAvgNO7 vgJL5&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x=MjGfJyZu3f5Y/7FHXuQdNrzTOkvVsTRFw15UERAdNkY=&c=mEWWflKkpoDfj0k8fw9IshhjgRY4yugd4jtpXdmJ0S5H1pzgqd3NO7dkBFbexJ2 14cLLbjs ezcE3vqSg30wRL 5pW2Cugvz QGEWPPNoaTNiwYZpWdGSuBlnmTMSjLuRq53b l27Sx78ShkRX22SJQlsKqX 3Mk0ULVULtE=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x=NwulJ7Zo2Yk6KkbJI1a2g6pZqBRRXHL9JWXkT2aaDjw=&c=/Romo246NhRUetuE/GyrBF3ICnjGIHNQMx5fSgeJUaKbCB0UdeZpYrMkw6TYt5H6c EJab8fFKMRkGOL23wHd ItOGhA2wIsy6TCw/712pZQLtni7nQz7wGOvg9LJ/qmTcL4F1z3GyC4PRMoBqhm82QxGZpGiDaR9nyNJRZ80cvom/qYgwnm3LKrAJKYU6Qw&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x=IkAsAO4pBQAETbHxayo w/eNTq1TVtAO/myVw8gq2J8=&c=S8Ti0sTiKBcEFeLEsitsFs3QPuZARZQiOnbAt8DwFXkoQkAazHBGxslu/LiRMoir x/szmIC4BKyoKq7PkEUq0ICiQ60dcclcxCUKQC1K ZbFgp 0TdoMrFc4q/Si4Qs6F0MQn1pR QlqMSi8zibjbHDZc0Dwfhg2u/D6yVAuUM=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

http://www.sendtowersnew.com/c?x=3GjmSvLYSz2f/MJ6eXw2oZbW61W5stNSAYta3jHUSJU=&c=YwTjDhdxEM/ogV3Wa8Dsqp1yH36CdLtH 25s31ZOvQTZop1sUmYNTqfg3zfK7Yx J5VnOZrCI/4IRbe7AR7eWDDXZV0kcUjtpxm7hL7Fx9ascD5t1OD3eDAB Mi5X ox31fp/rel2vsRtjDt1atjlI6hrhoYGI9k9EJXP84DV A=&e=0&downloadAs=frozen-font-programas-gratis-net.exe&fallback_url=http://descargas.downloadspg.com/.../Frozen_Font.zip

Latest 30 of 36 download URLs

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP):
Connects to os.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdnus.solvefile.com  (207.189.109.121:80)

TCP (HTTP):
Connects to cdneu.webfilescdn.com  (65.254.40.36:80)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.