home

Savepath Deals

Publisher Information

Savepath Deals is a software publisher located in West Hollywood, California in the United States*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.
Authority:
COMODO CA Limited

Valid from:
6/9/2014 5:00:00 PM

Valid to:
6/9/2016 4:59:59 PM

Subject:
CN=Savepath Deals, O=Savepath Deals, STREET=8923 W Sunset blvd, L=West Hollywood, S=CA, PostalCode=90069, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
56ea9ce76728f55e8f87b7f0683773b7

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.SavepathDeals (M), PUP.Savepath (M), PUP.Savepath.Installer (M), PUP (M)
100.00%

1 / 68      (Adware)
sdd.exe  (d8a2b56a573cc3f40e9d3aec1e885e0e)

1 / 68      (Adware)
spdcertificateservice.exe (Savepath Deals)  (9318b519b792f08a28c18a07d025ad33)

1 / 68      (Adware)
spdsetup.exe  (af5d4fcc51e6c13c144a358575045c26)

1 / 68      (Adware)
pt.exe  (6f145ea2f905b974bb08b9844ee364c7)

1 / 68      (Adware)
spd.exe  (7c0b98ef6632ff1aaf675dac9103c714)

1 / 68      (Adware)
spd.exe  (fa216a15494d3366e9818efc271ca417)

1 / 68      (Adware)
pt.exe  (8b5c33b054d94da031198e63eb0822b4)

1 / 68      (Adware)
uninstall.exe  (847db1a869539384a7c9fa905a756111)

1 / 68      (Adware)
spd.exe  (9f2335d44362db61c4bb421051c491e6)

1 / 68      (Adware)
updater.exe  (813fe71f20324ae87512311a227aaddd)

1 / 68      (Adware)
updater.exe  (89a5d64c83bb483c0170454ef0ee2c63)

1 / 68      (Adware)
updater.exe  (dc9689328c3f6298e0595af707f246a4)

1 / 68      (Adware)
uninstall.exe  (84faf818c64e291024906941ef5cfc76)

1 / 68      (Adware)
sdd.exe  (ea0c88432cb539f15bd72f95c16cebe2)

1 / 68      (Adware)
updater.exe  (15f018f32708c0753860ad61c9053b44)

1 / 68      (Adware)
singleformdownloaderupdater.exe  (857825f4b9c7650e4e9d60bc1b89624d)

1 / 68      (Adware)
singleformdownloader.exe  (f6352604ffb47a0452ac7c22ae848048)

1 / 68      (Adware)
updater.exe  (ca8b80ed62abb15d5b8b06079c6c22ac)

1 / 68      (Adware)
_pt.exe  (8c6c18dcb6c621910afbd198dfc0f647)

1 / 68      (Adware)
_silent_pcw_signed4.exe (TODO: <Product name> by TODO: <Company name>)  (978d04660d77508f41632cf03f4eece1)

1 / 68      (Adware)
_silent_pcw_signed.exe (TODO: <Product name> by TODO: <Company name>)  (509c1c0e04f0d0fbeb45f36a1ad3d0f0)

1 / 68      (Adware)
_spd.exe  (b8b994f515ddca176d0243af017ea9fe)

1 / 68      (Adware)
taskutil.exe  (07f1303bf65060bcd8968f3d453bcd7c)

1 / 68      (Adware)
uninstaller.exe  (7113179a7248482e0ee1f37bb7017679)

1 / 68      (Adware)
uninstaller.exe  (a99dff6ebb0ec8cb48c3e534b9971b77)

1 / 68      (Adware)
pcw_downloader.exe  (dec5a301208dc2b95bae5d3be478e7f3)

1 / 68      (Adware)
dw_util.exe  (2c4566fea4cbd7d2fa346b7743b7314c)

1 / 68      (Adware)
singleformdownloaderupdater.exe  (e303721918e81d42f51263f3588101e6)

1 / 68      (Adware)
singleformdownloader.exe  (3ffb636c1aa92cf7674a5b06c5c24045)

1 / 68      (Adware)
updater.exe  (6e57722edace913594eefcc7825e779f)

 
Latest 30 of 210 files

Downloads URLs for files signed by Savepath Deals.

1 / 68      (Adware)
http://cdn.soft-200.com/downloads/offers/.../_silent_pcw_signed4.exe  (978d04660d77508f41632cf03f4eece1)

1 / 68      (Adware)
http://prod.productsystem.s3.amazonaws.com/FormRunner_prod.exe  (ec812692dbd40b13d86811ac9f14f622)

1 / 68      (Adware)
http://prod.productsystem.s3.amazonaws.com/FormRunner_prod.exe  (f33db50fddf20a923f3e5103a6281504)

1 / 68      (Adware)
http://prod.productsystem.s3.amazonaws.com/FormRunner_prod.exe  (7d1d5c9b970df7eb29862022f30fb338)

The following websites host and distribute files published by Savepath Deals.

cdn.soft-200.com

prod.productsystem.s3.amazonaws.com

The following certificate is also signed by Savepath Deals.

0080BC518A6FEE7C80D4DA50F0F5EEB4DA  (May 17, 2013 to May 18, 2014)

The following publishers (by Authenticode signature organization name) are related.

1NSTALL (383 MEDIA, INC.)

Secure Installer Inc

Web Bar Media

* Note, the details and description above are based on the code signing digital signature issued to Savepath Deals by COMODO CA Limited on June 09, 2014 with the serial number '56ea9ce76728f55e8f87b7f0683773b7'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.