home

United Backup

Publisher Information

United Backup is a software developer located in West Hollywood, California in the United States*.
Authority:
DigiCert Inc

Valid from:
5/11/2016 8:00:00 PM

Valid to:
7/16/2018 8:00:00 AM

Subject:
CN=United Backup, O=United Backup, L=West Hollywood, S=California, C=US

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0d6547dc9a02b5668c07752e46d7e5db

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

ESET NOD32
multiple threats, Win32/Adware.Gertokr.Q application, Win32/Adware.Gertokr.R application, Win32/Adware.Gertokr.S application
100.00%

Dr.Web
Adware.Gertokr.2, - infected archive c:\users\test\appdata\local\temp\506651429be1741f52193816e8ce6e7d67662dae\script, - infected archive c:\users\test\appdata\local\temp\3af3f650430a0ac273c8d58f6c79d539e1c1e2c7 Win32.
52.94%

F-Secure
Variant.Razy.70349, Variant.Symmi.60305, Variant.Razy.76966
47.06%

Norman
Gen:Variant.Razy.42903, Win32.Floxif.A
17.65%

Reason Heuristics
Adware.Bundler (M), Adware.Downloader
14.71%

avast!
Win32:Adware-gen [Adw], Win32:Pioneer-C
11.76%

Emsisoft Anti-Malware
Gen:Variant.Strictor.110023, Win32.Floxif
5.88%

MicroWorld eScan
Gen:Variant.Symmi.60305
2.94%

Malwarebytes
Adware.Gertokr
2.94%

K7 AntiVirus
Adware
2.94%

3 / 68      (PUP)
uninstaller.exe  (8f72c1d3f117609fe1fdabbc3f069f64)

1 / 68      (inconclusive)
ct_2030.exe  (4b3406635d72114e625ed7b8feb1976b)

0 / 68
taskutil.exe  (a0971e08687424d539751b115f339dc3)

4 / 68      (PUP)
pcw_downloader.exe  (733f0febad436ff8ad25282c83101c7d)

0 / 68
dw_util.exe  (cc7f346b3a50e2d49e885e525bb1c176)

0 / 68
pcw_downloader.exe  (18c14f2ca82722a4dcf71955eff36f20)

8 / 68      (Malware)
unvnhwkuuilf.exe  (bde75d9be6c3a508f389bfc5ca1032d0)

3 / 68      (PUP)
updater.exe  (a8137a664ef55089043ba9793ab13c66)

4 / 68      (Malware)
_silent_pcw_signed.exe (TODO: <Product name> by TODO: <Company name>)  (cba36cb745512ba6fddf8ccbf2674a30)

3 / 68      (PUP)
updater.exe  (fa73a9de620bfb5a3beeb3ea07f6efbc)

4 / 68      (Malware)
_silent_pc360_signed.exe (TODO: <Product name> by TODO: <Company name>)  (c4757f630712b6fbd81fae8324234374)

2 / 68
xmuhtpfp.exe  (aa1cb862b795335b93d3b4b84f01b82e)

0 / 68
_silent_pcw_signed13.exe (TODO: <Product name> by TODO: <Company name>)  (f3c9bc567f676b0100f99361551b9f94)

0 / 68
obyjfxjhmld.exe  (f7908de20cfd0c2b8493865204062de7)

3 / 68      (PUP)
updater.exe  (dc06dbec3a7519f089111d72f83d1937)

1 / 68      (inconclusive)
sbgbyzx.exe  (cbdf0f01869d1bad004b7785ddb1bbec)

3 / 68      (PUP)
_silent_pcw_signed.exe (TODO: <Product name> by TODO: <Company name>)  (5eaf063387f350cd9c4245dab73318bb)

1 / 68      (inconclusive)
zbhrnpsyxvl.exe  (ecf2ffdfadb37ad3db5989fc85bd89d0)

3 / 68      (PUP)
updater.exe  (884b12f6ae570329e7bdef739bd802cb)

2 / 68      (inconclusive)
_silent_pc360_signed.exe (TODO: <Product name> by TODO: <Company name>)  (7ac074656020ff6ff062de124c27d6a9)

0 / 68
uninstaller.exe  (726ff8362418f0536c9f830a41c0ba78)

2 / 68      (inconclusive)
qoeqtwql.exe  (d62165fba01b953daf83ffc83867ecc5)

3 / 68      (PUP)
uninstaller.exe  (457188cfddba5e393ebc6993d5695004)

0 / 68
taskutil.exe  (e22adc84e2030b73dfa774aae60641e2)

10 / 68    (PUP)
updater.exe  (0a24327123d6f75115811b0ffb5de125)

3 / 68      (inconclusive)
kqycnjbbcrpdwvp.exe  (5c9a11e0b6b9d59d3b942633d6828a19)

3 / 68      (PUP)
_silent_pcw_signed.exe (TODO: <Product name> by TODO: <Company name>)  (3b75dbd247542276fff84625c4fdc506)

3 / 68      (PUP)
updater.exe  (ddc4945f82e63ed1a62e3e885991fc0e)

0 / 68
dw_util.exe  (b71b5700e5d02a66e2c4c8fda2595090)

0 / 68
pcw_downloader.exe  (c6c340d37bc7117e471d2e837f379b93)

 
Latest 30 of 172 files

Downloads URLs for files signed by United Backup.

0 / 68
http://cdn.off-soft-3.com/downloads/offers/.../_silent_pcw_signed13.exe  (f3c9bc567f676b0100f99361551b9f94)

2 / 68      (inconclusive)
http://s3.amazonaws.com/.../FormRunner_prod_v2.exe  (1e125ea948dc7a0e2fac447c88600979)

2 / 68      (inconclusive)
http://cdn.soft-200.com/downloads/offers/.../_silent_pcw_signed12.exe  (c75b0e49b3692dc1600803ebce0b855c)

0 / 68
http://cdn.soft-200.com/downloads/offers/.../_silent_pcw_signed13.exe  (f3c9bc567f676b0100f99361551b9f94)

The following websites host and distribute files published by United Backup.

cdn.soft-200.com

The following publishers (by Authenticode signature organization name) are related.

Uniblue Systems

1NSTALL (383 MEDIA, INC.)

Emme

ADV Publishing

Secure Installer Inc

Clever Systems Sp. Zo.o.

CS Support Network Limited

Rainmaker Software Group, LLC

CompuClever Systems Inc.

Web Bar Media

Savepath Deals

* Note, the details and description above are based on the code signing digital signature issued to United Backup by DigiCert Inc on May 11, 2016 with the serial number '0d6547dc9a02b5668c07752e46d7e5db'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.