Ziggy Networks (Bright Circle Investments Ltd)

Publisher Information

Ziggy Networks (Bright Circle Investments Ltd) is a software publisher located in Nicosia, CY*. The company is a primary distributor of unwanted software. Part of the Brightcircle group of adware web browser extensions that utilize the Crossrider framework. These extensions are also known as Freven and are designed to utilize the framework in order to inject advertising banners in the underlying web browsers white space or by overlaying new ads over existing ones. Brightcircle distributes its software through malvertising practices such as displaying web pages taht tell the user that various core Windows software is out-dated and needs updating as well as drive-by downloads.
Authority:
COMODO CA Limited

Valid from:
12/16/2014 1:00:00 AM

Valid to:
12/17/2015 12:59:59 AM

Subject:
CN=Ziggy Networks (Bright Circle Investments Ltd), O=Ziggy Networks (Bright Circle Investments Ltd), STREET=Athinodorou 3, STREET=Dasoupoli Strovolos, L=Nicosia, S=Nicosia, PostalCode=2025, C=CY

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00bbb0e0273de6cdfef0992b8f1f6be5c9

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.BrightCircle.Installer, Adware.BrightCircle.ZiggyNetworksBrightCircleInvestments, Adware.BrightCircle.ZiggyNetworksBrightCircleInvestments.Installer (M), Adware.BrightCircle.ZiggyNetworksBrightCircleInvestments (M), Adware.BrightCircle.ZiggyNet.Installer (M), Adware.BrightCircle (M)
100.00%

VIPRE Antivirus
Crossrider, Threat.4789396
22.58%

Baidu Antivirus
PUA.Win32.CrossRider
22.58%

Malwarebytes
PUP.Optional.DrPC.A
19.35%

Trend Micro House Call
Suspicious_GEN.F47V0123, Suspicious_GEN.F47V0126, Suspicious_GEN.F47V0121
12.90%

ESET NOD32
Win32/Toolbar.CrossRider.BM (variant), Win32/Toolbar.CrossRider.BM potentially unwanted (variant)
12.90%

Bkav FE
W32.HfsAdware
12.90%

ESET NOD32
Win32/Toolbar.CrossRider.BM potentially unwanted application
9.68%

Dr.Web
Trojan.Crossrider1.13625
6.45%

F-Secure
Win32.Sality.3
3.23%

1 / 68      (Adware)
updater.exe (Doctor PC)  (f5fd0998dbb4bba003fd4f800e7540ba)

1 / 68      (Adware)
Splash.exe (Splash)  (d61b3e2c21bfacd394e5d1abb8f703bb)

1 / 68      (Adware)
InstAct.exe  (d670d23b7a77adbfc8c89007be0c76f8)

1 / 68      (Adware)
doctorpc.msi  (3b43027d8c057551472b70f14358747f)

1 / 68      (Adware)
DoctorPC.exe (Doctor PC)  (a9a2cb6c17647e47d43d201744cc4fb4)

1 / 68      (Adware)
DoctorPCSetup.exe (Doctor PC)  (bb69baba5c153e8ce9786bda731d6660)

1 / 68      (Adware)
doctorpc.msi  (2050d3bc5f11ca08fecebb5dd1ba13c4)

1 / 68      (Adware)
updater.exe (Doctor PC)  (370fcc4cf8a2c3d7076c88841086d197)

1 / 68      (Adware)
Splash.exe (Splash)  (c06b09f1351bd46db3ed0049e227f4d9)

1 / 68      (Adware)
InstAct.exe  (71bf1caaf3fcccf1fe9c897b54bd5404)

1 / 68      (Adware)
doctorpc.msi  (ca5f7735cbeb75fc940d03998df52197)

1 / 68      (Adware)
updater.exe (Doctor PC)  (363747bb15c43da6b466742fb7215242)

1 / 68      (Adware)
Splash.exe (Splash)  (c440b9bc9b6ef27dc3793b9e6902678e)

1 / 68      (Adware)
InstAct.exe  (c67652217d94b2d8090d6f845ff0dfa8)

1 / 68      (Adware)
doctorpc.msi  (7366e6785a0544bea69a0406bcceffd0)

1 / 68      (Adware)
DoctorPC.exe (Doctor PC)  (92f12ae1088c1cc827d1b8f33c4a9691)

1 / 68      (Adware)
updater.exe (Doctor PC)  (bf67004f84a5303346217f4682bdef5e)

1 / 68      (Adware)
Splash.exe (Splash)  (142443bd423de0ee995d2b0e92f0eb8a)

1 / 68      (Adware)
DoctorPC.exe (Doctor PC)  (f6cafad972ee67efa5d16c4443478583)

1 / 68      (Adware)
doctorpc_setup.exe (Doctor PC)  (123da1b9bf2e58ef07ca8054b867195e)

1 / 68      (Adware)
15014.exe.exe (Doctor PC)  (04617bed997f51d413c810b9cf8a3d4e)

1 / 68      (Adware)
doctorpcsetup.exe (DoctorPC)  (afe29f57a79fa6302c279e6f5a436346)

1 / 68      (Adware)
DoctorPC.exe (Doctor PC)  (958608b3d986135512ad380d5575b218)

9 / 68      (Adware)
DoctorPCSetup.exe (Doctor PC)  (3bc48abbe0803b22456bbb47fdeeabbe)

6 / 68      (Adware)
DoctorPCSetup.exe (Doctor PC)  (3ffd0c512c24ac5e70922ca3bb2a762e)

7 / 68      (Adware)
updater.exe (Doctor PC)  (77cc8e129cfa9a1bb790e671a5cb27bd)

7 / 68      (Adware)
Splash.exe (Splash)  (a7391ec0d256994fbe12eead8b86853f)

5 / 68      (Adware)
InstAct.exe  (159a6475ec84ca738a33dccd0e67d83f)

1 / 68      (Adware)
doctorpc.msi  (da188c00e2b9993830f79e1eacc6e9ff)

7 / 68      (Adware)
DoctorPC.exe (Doctor PC)  (7d912f633d9aac7626cd79de14a3a645)

 
Latest 30 of 31 files

Downloads URLs for files signed by Ziggy Networks (Bright Circle Investments Ltd).

6 / 68      (Adware)

The following websites host and distribute files published by Ziggy Networks (Bright Circle Investments Ltd).

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Ziggy Networks (Bright Circle Investments Ltd) by COMODO CA Limited on December 16, 2014 with the serial number '00bbb0e0273de6cdfef0992b8f1f6be5c9'.