home

setup-msgplus-600.exe

Messenger Plus!

Yuna Software Limited

The application setup-msgplus-600.exe, “Setup - Messenger Plus!” by Yuna Software Limited has been detected as a potentially unwanted program by 4 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. The file has been seen being downloaded from gsf-cf.softonic.com and multiple other hosts.
Publisher:
Yuna Software  (signed by Yuna Software Limited)

Product:
Messenger Plus!

Description:
Setup - Messenger Plus!

Version:
1.5.0.121

MD5:
69c441b787291c6ac3c04bc85f69d4e9

SHA-1:
478a97b7327bff67810fcf3242075e37cd959b1d

SHA-256:
74983915afbdaf01e795041f21e0b45eec9027718e56ad295fa8c3b1c817e69f

Scanner detections:
4 / 68

Status:
Potentially unwanted

Analysis date:
4/20/2024 4:18:28 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Resoft
2015.0.3413

ESET NOD32
Win32/MessengerPlus (variant)
8.10090

Reason Heuristics
PUP.Optional.Installer.R
14.7.14.23

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
3.12.26.3

File size:
1.1 MB (1,132,400 bytes)

Product version:
1.5

Copyright:
Copyright (C) 2001-2012 Yuna Software

Original file name:
Setup.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Digital Signature
Signed by:
Yuna Software Limited

Authority:
VeriSign, Inc.

Valid from:
9/1/2012 2:00:00 AM

Valid to:
10/20/2015 1:59:59 AM

Subject:
CN=Yuna Software Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Yuna Software Limited, L=St. Helier, S=Jersey, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
56EC82195199D735AD6E704B1B712CB5

File PE Metadata
Compilation timestamp:
2/7/2013 1:40:50 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:FdaXZ9lejq9GrWKkgdn4ZpEaTPVcHvU6ze5sQNEEJqiAgciui:Fdsle+M6DEnYEE2H/qqQaYqJPiZ

Entry address:
0x1DD5D

Entry point:
E8, 44, 5D, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 20, 8B, 45, 08, 56, 57, 6A, 08, 59, BE, 60, C4, 42, 00, 8D, 7D, E0, F3, A5, 89, 45, F8, 8B, 45, 0C, 5F, 89, 45, FC, 5E, 85, C0, 74, 0C, F6, 00, 08, 74, 07, C7, 45, F4, 00, 40, 99, 01, 8D, 45, F4, 50, FF, 75, F0, FF, 75, E4, FF, 75, E0, FF, 15, D4, C1, 42, 00, C9, C2, 08, 00, B8, EB, 45, 42, 00, A3, A8, 2B, 43, 00, C7, 05, AC, 2B, 43, 00, E1, 3C, 42, 00, C7, 05, B0, 2B, 43, 00, 95, 3C, 42, 00, C7, 05, B4, 2B, 43, 00, CE, 3C, 42, 00, C7, 05...
 
[+]

Code size:
172 KB (176,128 bytes)

The file setup-msgplus-600.exe has been seen being distributed by the following 19 URLs.

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1485805225&Signature=YHlCy8BRAe~nGxDryqEUfUebkVqu9c8~ZkEZpLCKFmnBD8ijCPQTVjzz0HUwlySIy2Pxw8QKYhdEnc2Xzwpplx05Kc6hz03GJ3pw68JIFrahmZM9CU~PHJJlSiPTQspR4SRyZNtSMvYKzIJGD4Gy-4OrkZAaNiO5ItgbLOv93c8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1483110980&Signature=QoeK5KWIYW1~iDOozHgFFrHjkOdwihUpvirr5ZkZdLP1bXMuSttz5xbwFV~md4tKbvzVqog10Z-yFfT26CCfyLxWC-2AJvPJidcOJqwSWRgFQMqhLiuHG3uN4ROHJZ085~OPtTTSErJm~1URj5cDkYP5O5eGfzGnavNV4t~1HTI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1477793634&Signature=Heme3J20Nibs5vpuMisw4fiCE28EFK8-KN4aIi0IF9gsuQVMEKVSD346~lUd2rubGUg3wT5O9LVXsaskJ-2nL34jUVG6p24ssISecPiy-jiyTReSEEh2EcobeE0~JQudoiMaDAg5xMhp2b8cu4WwSP5CxIpVHbijVCAfIe1WvJM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1480549696&Signature=WdJNKr9cu-db6LC8smWAmjj9wvzwXtuMJ4BPJSbGwWv7tKzdcCiu3nuIUDdf5T~GIkoKoLkpWxvMTAlqoJzInZL1ifiYAB6Ods5FO~aeMQfj3wNUJunzKSnXeJeTkzfWr18mdb0EFzrH6U4~Mk2JSpOBzzSyM~MbvkQL8HXGwfM_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1477020310&Signature=AZ4U6-Q5Tq5R~8TjZO7W4hGIUjTyr1jomxkbdOWyWLM8~TjDuaFAP9gYStsgLRqsMDEGLT0QWvESxFLT6AKxA9wcif7WIGfxuKoAqcZk6GxViay7WqGVUZTpURdsxoup7k6fGnxU~99-SQVwu4CnTLcMJNAcvv~EpkLf9JndqQE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1479712817&Signature=Z7Dpxsqc1l8bB87dxfz1nmlPNa~Mgw2jtCHFXUWSFLwPZONxYX2evdh85L6lsya6Lr53VaLMQSeD7p-LzAC7vBYOKW~2ITchidu~cWUBXocjvR2IgK5IPIADWvr~8f6a4n6nT4jkccXFV-7fE3d69lzndxtAQ9K2E42iNp3L2U4_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1477807150&Signature=EHhNhrfkMuFMK3AnRoSvh6ZBH2h56zlj3EpKSUrL9aijsVv02XSg3p~qUl-utyaASfKWuK9cqjHbu0XsN6gI7-x2sOimc-Z9sd6O3p3PhoVm-U48Rvv4bvhjP4IlfZatqNVzLJbqIg8T~pF8kLfvmMgltKOxfU6LzkAe2QLl4g8_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1483417962&Signature=PUIkyC-APuw8dpG8Hh52pZe5oYkTdw1vkPueRNZNLrUgfUGqajbUjzWd2kJm8QBAQoruIOchjevR75~U0tAW9CkAT9phwYrnhUSchnTwCe4iCLbb-p5ke74fiWKrJaAPNhwe36j8Ent~X73k92N6XaFbggEbSOlIzpKMvqoleIY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1481008122&Signature=TTZ7d4FptieYz3HNAaeloPBNNMQtUt3iLyrtyIWbFb0uYSZA4foRv3KJNsmUnnW7gX0tKuxTED0TDQnnmGLRUQ3zQN3Xuq7Y9nQhRWSac41IHCg7JRV2m79-xh5-C3K201rqHTLaIUGKX7Mp9wBbnNGqbsyP70NjyvhMm6DsCKo_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1480946214&Signature=JUQ52qxZSfPpY2KPZw3KKPDCg6RaT2anqRRYz5BJK8xrR9R3cGZMZYFzqUvurGiAgRSeOgzWcfvGp0O5JWwLzDKX~EPXnWIW8evbAlQZj8lkiFhRzzNs2uhFxcassW5FWAvJP8mFHl0NN-foFbUtU9BYtOTRZiADRrhWxy7oANs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1421633789&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=bGGsjE02GrqK~NpMb~twYDw9iYpBeLCMaLC6zAFTuT4Rk3kyD2gdiSsM3y9KsQn1NdvISAWkHGdUfnDe4N50qiK5WkiKRsFZvAbdTO4ABQUvtdbKGT1nc9SZByRzbfM7Llhnoaj6mV-dRNJUvJqmQJ8Ljvujg8Uq9GWE5dGT1pg_&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1479352585&Signature=NkTmq3JMXn3rbMOipQNjroHdbrjk4eEslU5St3riwy5c7wnF2JHDXc8b73NBVqCpIwqTqXLqbGAXyUGgKz43jmxKFoCVw3B9iU-p7BiBqR1lFjX4dfJaJvzRllxMfHtmy-vTebcG3BEYGRbVJQWo4PECzkXpWpKZFh4s-F381uA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1466597005&Signature=GgnbVYe4RMMCb0VI6MEG2fwjk0hWaZsnFEozp-A~6JhnKmaQ34MRoNUbxn6eyPbBho6~f5QRsCKGPdV69bc3yyujyEOKJzY34qWegPCOlNXPp09TuVuN-4tNeKc82NWpkC6ZDh4kU1ODccU5CpoHNLBgpvjuoR5iOTuKyn6rRso_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1475787383&Signature=U5tBjOZ6QMOjQX4Z6Lqm39rEqbt3JT2xlul-ztjta6ALAZmimVf4OI-lNF0zFwOaECGgh6x9dq7u3OCcDhEt40koSDP5ulhq0k5vQL-jDVZT3lvv6Y6IU~vtbXMSs-Yb2raC-4aZTQWy6NsS5kXYuy2mTcDnTmpC9Bu2J1mF2XY_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1473672071&Signature=Yf7Kn-I2wabwWM1TckjbmMUYEk~SR7yZhrQbvLOtFbEFLYweQUgDVvNKOlcOBrrofb1h3UZzFp4kffPAStgntVCIYjiAqkqJXkZQlsmfZ~IRCJjrEWNdqse2D5rX4j~vADWN2T0iK4KlmG-u7f1Ry6vnFJ8O6IaB-QxGYXVu5NA_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1474191151&Signature=OinD3xFdcYLaCf05917yLMldvKPorxOsmjyMDM10I7HUzHu1hF5rnwzpahBz7PoYNAdKVKyKQnRKfYpKFmP-qmO9yhs27paZjYF25G0AfHM7Gd-0uxIe~htHKHqb8nQKGlsq2W-VGS7CPAbaRTzsGT9V5QGF9ivx81JOMV~BOdU_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Setup-MsgPlus-600.exe

http://mirror10.msgpluslive.net/Plus4Skype/20130210/.../Setup-PlusForSkype-1.5.exe

http://gsf-cf.softonic.com/478/a97/.../file?SD_used=0&channel=WEB&fdh=no&id_file=3337211&instance=softonic_es&type=PROGRAM&Expires=1424172848&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=OhGyPdI1tXu1Cqhn1JeM62XdeV16ZL9y6zOngCjEhlV6hGCoBPQfMBFCk0yEkBox4FSGl4XO9csqo1AI7vA-VPlTKFA--QrZq9f4s9S2qrXB6sy8Tewq12CLArsc~zpGPGwvmDKpcAfbE3d6tA~rMfnqq74TSBpMtL~9naRWkoI_&filename=Setup-MsgPlus-600.exe

http://mirror10.msgpluslive.net/20121226/.../Setup-MsgPlus-600.exe

Remove setup-msgplus-600.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.