» webfettisetup2.3.50.22.zkfox000.exe
Overview
Analysis
File Details

webfettisetup2.3.50.22.zkfox000.exe

My Web Search Bar Installer

Fun Web Products

The application webfettisetup2.3.50.22.zkfox000.exe by Fun Web Products has been detected as adware by 23 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This version of the installer will bundle a Mindspark/MyWebSearch Toolbar, a potentially unwanted web browser extension.

File name:

Publisher:

MyWebSearch.com (signed by Fun Web Products)

Product:

My Web Search Bar Installer

Version:

2, 0, 0, 4

MD5:

48fd30e33a67e6d9f7f7acf4b06c1ed0

SHA-1:

421c8d07d83b6e6588f9c996afc077521aab823f

SHA-256:

86ba88597a8b6d81ab4f5c52efc62832a6c0e3a552df94ff0db76b87c7d93943

Scanner detections:

23 / 68

Status:

Adware

Explanation:

Bundles the Mindspark (MyWebSearch/Ask) toolbar, a web browser extension that will modify a user's search and home pages.

Analysis date:

12/24/2024 11:15:35 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Adware.Agent

7.1.1

avast!

Win32:Mywebsearch-R [PUP]

2014.9-140926

Clam AntiVirus

Suspect.Adware.MWS

0.98/18011

Comodo Security

Application.Win32.AdWare.MyWebSearch.~AA

9752

Dr.Web

Adware.Bho.3695

9.0.1.0269

Emsisoft Anti-Malware

Riskware.AdWare.MyWebSearch!IK

8.14.12.08.04

ESET NOD32

Win32/Toolbar.MyWebSearch (variant)

8.6377

Fortinet FortiGate

Misc/Mywebsearch

9/26/2014

F-Prot

W32/Mywebsearch.A.gen

v6.4.6.2.117

F-Secure

Adware:W32/MyWebSearch

11.2014-26-09_6

herdProtect (fuzzy)

2014.12.8.9

IKARUS anti.virus

not-a-virus.AdWare.MyWebSearch

t3scan.1.1.107.0

K7 AntiVirus

Unwanted-Program

13.105010

Kaspersky

not-a-virus:WebToolbar.Win32.Agent

14.0.0.3192

McAfee

MWS

5600.6923

NANO AntiVirus

Riskware.Win32.Agent.yasdw

0.26.0.55532

Norman

W32/MyWebSearch.JZ

11.20140926

Quick Heal

Trojan.Agent.IRC

12.14.11.00

Reason Heuristics

PUP.Installer.FunWebProducts.BB

14.9.26.12

SUPERAntiSpyware

Adware.MyWebSearch

10191

Vba32 AntiVirus

Adware.MyWebSearch

3.12.16.4

VIPRE Antivirus

MyWebSearch.J

10168

ViRobot

Adware.MyWebSearch.2745832

2011.8.13.4621

File size:

2.6 MB (2,745,808 bytes)

Product version:

2, 0, 0, 4

Original file name:

mwsSetup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\webfettisetup2.3.50.22.zkfox000.exe

Digital Signature

Signed by:

Fun Web Products

Authority:

VeriSign, Inc.

Valid from:

1/16/2008 7:00:00 PM

Valid to:

1/20/2009 6:59:59 PM

Subject:

CN=Fun Web Products, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Fun Web Products, L=White Plains, S=New York, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0AD7596F3379BF722EBD93059830F312

File PE Metadata

Compilation timestamp:

9/30/2008 4:32:14 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

49152:SQM+iW94woaXdB58O+qLBkGrhnJMBoWfjYBeaOCWVMKIe7s0x9cQp8R:eG9llXClBo0cPbIWys03BpA

Entry address:

0x2DC6

Entry point:

55, 8B, EC, 83, EC, 44, 53, 56, 6A, 00, FF, 15, 08, 41, 40, 00, A3, FC, 56, 40, 00, FF, 15, 84, 40, 40, 00, 8B, 1D, 80, 40, 40, 00, 8B, F0, 85, F6, 75, 04, 6A, FF, FF, D3, 8A, 06, 57, 8B, 3D, 40, 41, 40, 00, 3C, 22, 75, 1B, 56, FF, D7, 8B, F0, 8A, 06, 3C, 22, 74, 04, 84, C0, 75, F1, 80, 3E, 22, 75, 15, 56, FF, D7, 8B, F0, EB, 0E, 3C, 20, 7E, 0A, 56, FF, D7, 8B, F0, 80, 3E, 20, 7F, F6, 8A, 06, 84, C0, 74, 04, 3C, 20, 7E, E1, 83, 65, E8, 00, 8D, 45, BC, 50, FF, 15, 7C, 40, 40, 00, E8, 2D, 00, 00, 00, F6, 45... 
[+]

Entropy:

7.9411

Developed / compiled with:

Microsoft Visual C++

Code size:

12 KB (12,288 bytes)

Remove webfettisetup2.3.50.22.zkfox000.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.