home

greenerweb.ffupdate.dll

Perfect Bid

FFUpdate is the Mozilla Firefox plugin manager for the Perfect Bid branded Yontoo adware browser platform. The component is designed to install and keep Firefox connected to the adware updater. The module greenerweb.ffupdate.dll by Perfect Bid has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Perfect Bid  (signed and verified)

Version:
1.0.5961.37672

MD5:
e6d9605cd451da83b5aa5accfadb5f84

SHA-1:
061dd4de652f631f93b7c4b00fb7eef74587e3cb

SHA-256:
4eb101f366f6bea311a767ccc1206a3b01d8c8f68d325e677bdd49865f7b9d4f

Scanner detections:
1 / 68

Status:
Adware

Explanation:
Part of the Yontoo distributed ad-supported web browser plugin for Firefox.

Analysis date:
8/5/2025 8:30:50 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Yontoo (M)
17.3.4.23

File size:
553.2 KB (566,472 bytes)

Product version:
1.0.5961.37672

Original file name:
2016042804.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\Program Files\greener web\bin\plugins\greenerweb.ffupdate.dll

Digital Signature
Signed by:
Perfect Bid

Authority:
VeriSign, Inc.

Valid from:
9/2/2015 8:00:00 AM

Valid to:
9/2/2016 7:59:59 AM

Subject:
CN=Perfect Bid, O=Perfect Bid, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6574F6AF9AE6897999AD4F208455C6BB

File PE Metadata
Compilation timestamp:
4/28/2016 12:55:49 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
11.0

.NET CLR dependent:
Yes

Entry address:
0x8A33A

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.4937

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
545 KB (558,080 bytes)

Remove greenerweb.ffupdate.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.