home

onlysetup.exe

OPTI ADS LTD

The executable onlysetup.exe has been detected as malware by 1 anti-virus scanner. This is a setup and installation application and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program Only-search by onlysearch. This file is typically installed with the program Only-search by Pay-by-Ads Ltd which is a potentially unwanted software program.
Publisher:
OPTI ADS LTD  (signed and verified)

Version:
1.3.0.0

MD5:
1486ea27288acb41ecc49fc9460fb613

SHA-1:
4c21bb59ab2df13373575798da1835dc93fce903

SHA-256:
541f8f5f7cb0a0855555e8923dc87d402b77a3d313b782b804375483aab653c3

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
12/28/2024 10:20:21 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.2.10.23

File size:
445.4 KB (456,096 bytes)

Copyright:
All rights reserved.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\onlysearch\onlysearch\1.3.27.3\onlysetup.exe

Digital Signature
Signed by:
OPTI ADS LTD

Authority:
DigiCert Inc

Valid from:
3/12/2015 7:00:00 PM

Valid to:
3/23/2016 7:00:00 AM

Subject:
CN=OPTI ADS LTD, O=OPTI ADS LTD, L=Tel Aviv, S=Tel Aviv, C=IL

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
019E7E421DD92BB6922755CD51B3A65C

File PE Metadata
Compilation timestamp:
8/2/2015 1:31:59 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x37A2A

Entry point:
E8, 63, 84, 00, 00, E9, 89, FE, FF, FF, B8, D7, 09, 44, 00, A3, 30, 54, 46, 00, C7, 05, 34, 54, 46, 00, CD, 00, 44, 00, C7, 05, 38, 54, 46, 00, 81, 00, 44, 00, C7, 05, 3C, 54, 46, 00, BA, 00, 44, 00, C7, 05, 40, 54, 46, 00, 23, 00, 44, 00, A3, 44, 54, 46, 00, C7, 05, 48, 54, 46, 00, 4F, 09, 44, 00, C7, 05, 4C, 54, 46, 00, 3F, 00, 44, 00, C7, 05, 50, 54, 46, 00, A1, FF, 43, 00, C7, 05, 54, 54, 46, 00, 2D, FF, 43, 00, C3, 8B, FF, 55, 8B, EC, E8, 96, FF, FF, FF, 83, 7D, 08, 00, 74, 05, E8, 51, 8F, 00, 00, DB...
 
[+]

Code size:
313 KB (320,512 bytes)

Program Uninstaller
Program name:
Only-search

Display publisher:
onlysearch

Uninstall string:
"C:\users\{user}\appdata\local\onlysearch\onlysearch\1.3.27.3\onlysetup.exe" \uninstl


The file onlysetup.exe has been discovered within the following program.

Only-search  by Pay-by-Ads Ltd
OnlySearch is an web browser advertisement extension that delivers ads to the user's web browser. Ads are in the form of traditional banners as well as context-hyper links.
81% remove it
 
Powered by Should I Remove It?

Remove onlysetup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.