Plain Savings

Publisher Information

Plain Savings is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising.
Authority:
VeriSign, Inc.

Valid from:
3/9/2015 9:00:00 PM

Valid to:
3/9/2016 8:59:59 PM

Subject:
CN=Plain Savings, O=Plain Savings, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3278fba8062f9f07cfb8af40eed9d7b1

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.Yontoo (M), PUP.Yontoo (M)
100.00%

1 / 68      (Adware)
plainsavings.purbrowse.dll  (abe955cf65bd03fb84834a7a48c114e6)

1 / 68      (Adware)
plainsavings.gcupdate.dll  (2ed35bc327f827d78ac7ec21294d230f)

1 / 68      (Adware)
plainsavings.ffupdate.dll  (56a8e3884f76006dd890a9c5ae44e37a)

1 / 68      (Adware)
plainsavings.expext.dll  (74f981b2ba45162b9b760f06375dc5ff)

1 / 68      (Adware)
plainsavings.compatibilitychecker.dll  (a24013421a8c2e3397eae788e832aa95)

1 / 68      (Adware)
plainsavings.browseradapter.dll  (08d4484810a4ef1a89903158c6d86b76)

1 / 68      (Adware)
plainsavings.purbrowse64.exe  (0dacabd6bb4934babcd7a1f9ff1cf9cf)

1 / 68      (Adware)
plainsavings.browseradapter64.exe  (090d2243f13519ae35c839d78c46e950)

1 / 68      (Adware)
plainsavings.browseradapter.exe  (a8872741eb9b653e3224e8f886ac9dcf)

1 / 68      (Adware)
plainsavings.purbrowse.dll  (56b65156255fa238e2967206595c6fcd)

1 / 68      (Adware)
plainsavings.browseradapter.exe  (3efbbf94f21da358f9f1483d6dbb3806)

1 / 68      (Adware)
{71c9b7dc-1f5d-4014-9bf0-177c55755ef2}w64.sys (StdLib)  (21d2e90b278a2f9eafceb88d65790b40)

1 / 68      (Adware)
plainsavings.expext.exe  (0437f814dd5d75ff16781f848923ffbc)

1 / 68      (Adware)
{6c4bdd62-fe1f-4858-a234-1d0044f56017}w64.sys (StdLib)  (3c970757017e25f4b29018fa28e5724f)

1 / 68      (Adware)
plainsavings.purbrowseg.dll  (967f0800695f223cc620608045981f3b)

1 / 68      (Adware)
plainsavings.gcupdate.dll  (890d698a3bbc58aef3869fa1d7560333)

1 / 68      (Adware)
plainsavings.ffupdate.dll  (dbcd16d0f999ce840c3af02a153c9ae9)

1 / 68      (Adware)
plainsavings.expext.dll  (23f8d5fd029bd7f991ae63542209ee16)

1 / 68      (Adware)
plainsavings.browseradapter.dll  (01eab9b278644fd94fc428fec1699878)

1 / 68      (Adware)
plainsavings.purbrowse64.exe  (cbe79a9770daf357f2d507a9515e252a)

1 / 68      (Adware)
plainsavings.browseradapter64.exe  (d7548611184696566b8deeb0433933d0)

1 / 68      (Adware)
plainsavings.browseradapter.exe  (301e1a7904338c3b00a582aeba5e0a77)

1 / 68      (Adware)
71c9b7dc1f64.dll  (43d60642af1211032fcf51a64b3d7d3e)

1 / 68      (Adware)
71c9b7dc1f.dll  (f0564aa85fbb9ecaf62f03fcd2293e49)

1 / 68      (Adware)
71c964.dll (by TODO: <Company name>)  (f09efcb724fa33732aed0eae7ea4f7bd)

1 / 68      (Adware)
71c9.dll (by TODO: <Company name>)  (692f32ea7ca00fcddf5e782d2daa2f09)

1 / 68      (Adware)
plainsavingsuninstall.exe  (d910a8238e7060f177e95e99ed0216cb)

1 / 68      (Adware)
plainsavingsuninstall.exe  (22e9cff8ad5648c11ac9f51b4dc45405)

1 / 68      (Adware)
plainsavingsun.exe  (9063917005a59beb37b5943174a19674)

1 / 68      (Adware)
{71c9b7dc-1f5d-4014-9bf0-177c55755ef2}gw.sys (StdLib)  (fdc8eab63ba0aeb1c1aab68de92d9b81)

 
Latest 30 of 12,780 files

The following publishers (by Authenticode signature organization name) are related.

30 of 131 publishers

* Note, the details and description above are based on the code signing digital signature issued to Plain Savings by VeriSign, Inc. on March 09, 2015 with the serial number '3278fba8062f9f07cfb8af40eed9d7b1'.