home

Phrase Professor

Publisher Information

Phrase Professor is a software publisher located in San Diego, California in the United States*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs.
Authority:
GlobalSign nv-sa

Valid from:
6/23/2015 12:12:16 AM

Valid to:
6/23/2017 12:12:16 AM

Subject:
E=support@phraseprofessor.com, CN=Phrase Professor, O=Phrase Professor, L=San Diego, S=California, C=US

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
11212eccbe8a08cd220dfdb8df22d0081744

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Malwarebytes
PUP.Optional.WordAnchor.A, PUP.Optional.PhraseProfessor.A
69.23%

AVG
Generic
65.38%

Reason Heuristics
PUP.PhraseProfessor (M), Threat.Win.Reputation.IMP, PUP.PhraseProfessor.Installer (M), PUP (M)
61.54%

ESET NOD32
Win32/Adware.Vitruvian (variant), Win64/NetFilter.A potentially unsafe (variant), Win32/NetFilter.A potentially unsafe (variant)
53.85%

Dr.Web
Adware.Plugin.1136, Threat.Undefined, Adware.Plugin.1181
46.15%

herdProtect (fuzzy)
a variant of d5ff205d26e83739e37b22015c4357b3aadc566b, a variant of 362d46c4c39dcbac26e5d2746e6711f47adf934b, a variant of c45e1c44ad7d2c57a02ebcc67f957a2f4c1cf9ae
34.62%

Kaspersky
not-a-virus:AdWare.Win32.Vitruvian, not-a-virus:NetTool.Win64.NetFilter
30.77%

Baidu Antivirus
Hacktool.Win32.NetFilter, Hacktool.Win64.NetFilter, Adware.Win32.Solimba, Adware.Win32.Vitruvian
30.77%

Panda Antivirus
Generic Suspicious
23.08%

Bkav FE
W32.HfsAdware, W64.HfsAdware
23.08%

1 / 68      (Malware)
ppsvc.exe (PP Client Service by PhraseProfessor)  (596500f9fefbff1cc0fa9d2bfff2524f)

1 / 68      (PUP)
uninstall.exe (PP by PhraseProfessor)  (6445ffe40c738862982e5af4a13ad6ad)

10 / 68    (PUP)
ppfd_vt_1_10_0_24.sys (PP TDI Driver x64 by PhraseProfessor)  (63637b775224ea2798e70c6ffeb4f3de)

5 / 68      (PUP)
ppfd_vt_1_10_0_24.sys (PP TDI Driver x86 by PhraseProfessor)  (b158dbf202c448c3a201d257d4ff870e)

6 / 68      (PUP)
ppfd_vw_1_10_0_24.sys (PP WFP Driver x86 by PhraseProfessor)  (5f39cda8ec8f190cd7647fc57088b94c)

7 / 68      (PUP)
ppfd_vw_1_10_0_24.sys (PP WFP Driver x64 by PhraseProfessor)  (4ad96d0e6a99488023d09f7a7eb08b51)

3 / 68      (PUP)
PhraseProfessor-setup.exe (PP by PhraseProfessor)  (2de86cf62edd4a7ad7552e2a44c3b686)

17 / 68    (PUP)
ppsvc.exe (PP Client Service by PhraseProfessor)  (38b5e276f25564f4c21cff84304e26b6)

4 / 68      (PUP)
PhraseProfessorAutoUpdateClient.exe (PP AutoUpdate Client by PhraseProfessor)  (7b5784de7b9066b45537386ba6ea60c7)

16 / 68    (PUP)
465.exe (PP by PhraseProfessor)  (565359c69eaf59feac843cca7ee6d82f)

5 / 68      (PUP)
ppfd_vt_1_10_0_22.sys (PP TDI Driver x86 by PhraseProfessor)  (28a0023eda95b36d9b685b42db1a3469)

15 / 68    (PUP)
ppfd_vt_1_10_0_22.sys (PP TDI Driver x64 by PhraseProfessor)  (3a5127f5fa5c9e5c05bf36b05f114f6d)

5 / 68      (PUP)
ppfd_vw_1_10_0_22.sys (PP WFP Driver x64 by PhraseProfessor)  (84ddc77e11c52ccbfcb65dad3dd55288)

11 / 68    (PUP)
ppsvc.exe (PP Client Service by PhraseProfessor)  (596500f9fefbff1cc0fa9d2bfff2524f)

4 / 68      (PUP)
PhraseProfessorAutoUpdateClient.exe (PP AutoUpdate Client by PhraseProfessor)  (57cf0eac17677767c773610729e0326c)

6 / 68      (PUP)
ppfd_vw_1_10_0_22.sys (PP WFP Driver x86 by PhraseProfessor)  (dafcb14f399791fecfe91e030dbcf8a5)

3 / 68      (PUP)
PhraseProfessor-setup.exe (PP by PhraseProfessor)  (1fccc5cbe0126a03fe973e5adcd2700b)

10 / 68    (PUP)
setup.exe (PP by PhraseProfessor)  (fc54f894428adc803692213642756a89)

9 / 68      (PUP)
ppfd_vw_1_10_0_21.sys (PP WFP Driver x86 by PhraseProfessor)  (c83ad7a3630dfe4db4fa62006161a64a)

5 / 68      (PUP)
ppfd_vt_1_10_0_21.sys (PP TDI Driver x86 by PhraseProfessor)  (fe0d9bcda174e3c706473c8cdc3aaa8c)

5 / 68      (PUP)
465.exe (PP by PhraseProfessor)  (5408f592543c9a41ca9c4e08f5134663)

13 / 68    (PUP)
ppfd_vt_1_10_0_21.sys (PP TDI Driver x64 by PhraseProfessor)  (d242fc81042747b8bd7fee727eae0633)

1 / 68      (PUP)
uninstall.exe (PP by PhraseProfessor)  (10ff1903f6e9b3577fa14278bf22dd2c)

3 / 68      (PUP)
ppfd_vw_1_10_0_21.sys (PP WFP Driver x64 by PhraseProfessor)  (f610c1a86b1423cbef27951ccd3b907a)

15 / 68    (PUP)
ppsvc.exe (PP Client Service by PhraseProfessor)  (68df41ddab5ee81355f55cb5962a763d)

1 / 68      (PUP)
PhraseProfessorAutoUpdateClient.exe (PP AutoUpdate Client by PhraseProfessor)  (cf63731f152f14de3c28b2c9adabc4bb)

Downloads URLs for files signed by Phrase Professor.

10 / 68    (PUP)
http://d3il7h8kq18h01.cloudfront.net/.../PhraseProfessor-setup-1.10.0.22.exe  (fc54f894428adc803692213642756a89)

16 / 68    (PUP)
http://d3il7h8kq18h01.cloudfront.net/.../PhraseProfessor-setup-1.10.0.24.exe  (565359c69eaf59feac843cca7ee6d82f)

16 / 68    (PUP)
http://cdn.o100o.com/downloads/offers/.../PhraseProfessor-setup3.exe  (565359c69eaf59feac843cca7ee6d82f)

The following websites host and distribute files published by Phrase Professor.

d3il7h8kq18h01.cloudfront.net

cdn.o100o.com

The following publishers (by Authenticode signature organization name) are related.

Candle Jar

SwiftSearch

Get a Clip

* Note, the details and description above are based on the code signing digital signature issued to Phrase Professor by GlobalSign nv-sa on June 23, 2015 with the serial number '11212eccbe8a08cd220dfdb8df22d0081744'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.