Bright circle investments Ltd. is a software publisher located in Nicosia, CY*. The company is a primary distributor of unwanted software. Bright Circle (also known as Motoko Group, Evangelion Group, Robokid, etc,) that utilizes the free Crossrider extension platform to develope and distribute a number of adware software programs (SavePass, PlusHD, HQVideo, etc.) for the web browser that deliver advertisements. There is one additional code signing certificate issued to this publisher.
Authority:
COMODO CA Limited
Valid from:
6/19/2014 2:00:00 AM
Valid to:
6/20/2015 1:59:59 AM
Subject:
CN=Bright circle investments Ltd., O=Bright circle investments Ltd., STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Nicosia, PostalCode=2025, C=CY
Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Serial number:
00ef90fef9ac8e258e5d30d0e08c84d37e
Scanner detections:
Detections (100% detected)
Scan engine
Details
Detections
Reason Heuristics
PUP.Brightcircleinvestments.G, PUP.Brightcircleinvestments.Q, PUP.Crossrider.Brightcircleinvestments.AA, PUP.Brightcircleinvestments.h, Adware.Crossrider.Brightcircle (M), PUP.Brightcircle.Brightcircleinvestments.Installer (M), Adware.BrightCircle.Brightcircleinvestments (M), Adware.BrightCircle.Brightcircleinvestments.Installer (M), Adware.BrightCircle.Installer (M), PUP.Brightcircle (M), Adware.BrightCircle (M), Adware.BrightCircle.setup (M), Adware.BrightCircle.PlusHDV1 (M), Adware.Crossrider (M)
100.00%
NANO AntiVirus
Riskware.Nsis.Downware.yrefc, Riskware.Win32.CrossRider.dbkrkz, Riskware.Win32.AdLoad.dblrre, Riskware.Win32.AdLoad.dbjxuu
16.00%
G Data
Script.Application.Plush, Win32.Application.Plush, Gen:Variant.Adware.Kazy.374109, Gen:Variant.Adware.Kazy.374062, Adware.Generic.959304
16.00%
VIPRE Antivirus
Crossrider, Threat.4789396
14.00%
Avira AntiVirus
Adware/CrossRider.A.11566, Adware/CrossRider.A.11353, Adware/CrossRider.A.11433, Adware/CrossRider.A.11940, Adware/CrossRider.A.14863
14.00%
Qihoo 360 Security
Win32/Virus.Adware.15b, Win32/Virus.Adware.560, Win32/Virus.Adware.c3a, Win32/Virus.Adware.162, Win32/Virus.Adware.440, Win32/Virus.Adware.6c0
14.00%
Trend Micro House Call
Suspicious_GEN.F47V0704, TROJ_GEN.F47V1224, ADW_CROSSRID, Suspicious_GEN.F47V0703, TROJ_GEN.R0CBC0OG814, Suspicious_GEN.F47V0623
14.00%
Fortinet FortiGate
Riskware/Toolbar_CrossRider
14.00%
MicroWorld eScan
Gen:Variant.Kazy.19680, Gen:Variant.Adware.Kazy.374109, Gen:Variant.Adware.Kazy.374062, Adware.Generic.959304, Gen:Adware.Plush.1, Adware.Generic.956974
14.00%
Bitdefender
Gen:Variant.Kazy.19680, Gen:Variant.Adware.Kazy.374109, Gen:Variant.Adware.Kazy.374062, Adware.Generic.959304, Gen:Adware.Plush.1
14.00%
Downloads URLs for files signed by Bright circle investments Ltd..
Distribution
The following websites host and distribute files published by Bright circle investments Ltd..
The following certificate is also signed by Bright circle investments Ltd..
The following publishers (by Authenticode signature organization name) are related.
* Note, the details and description above are based on the code signing digital signature issued to Bright circle investments Ltd. by COMODO CA Limited on June 19, 2014 with the serial number '00ef90fef9ac8e258e5d30d0e08c84d37e'.