blindbat is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising. There is one additional code signing certificate issued to this publisher.
11/27/2013 1:00:00 AM
11/28/2014 12:59:59 AM
CN=blindbat, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=blindbat, L=San Diego, S=California, C=US
Detections (100% detected)
PUP.BHO.blindbat.L, PUP.Installer.blindbat.N, PUP.Service.blindbat.O, PUP.blindbat.V, PUP.blindbat.BB, PUP.blindbat.Q, PUP.Installer.blindbat.F, Adware.Yontoo.blindbat.V, PUP.blindbat.m, Adware.Yontoo.Service.M, PUP.blindbat.n, Adware.Yontoo.blindbat (M), PUP.Yontoo.blindbat (M)
Adware.Plugin.100, Trojan.BPlug.13, Trojan.BPlug.6, Trojan.BPlug.32, Trojan.BPlug.123, Trojan.BPlug.10
McAfee Web Gateway
Artemis!48BB1B3E1D37, Artemis!6E05FC069FEC, BehavesLike.Win64.PUPAmonetize.qm, Artemis!23DD0A8BAD2C
PUA.Agent, Trojan.BPlug, Riskware.Agent
Win32/BrowseFox (variant), MSIL/BrowseFox (variant)
Artemis!48BB1B3E1D37, Artemis!6E05FC069FEC, Artemis!23DD0A8BAD2C
The following certificate is also signed by blindbat.
The following publishers (by Authenticode signature organization name) are related.
* Note, the details and description above are based on the code signing digital signature issued to blindbat by VeriSign, Inc. on November 27, 2013 with the serial number '0b7f97173cd91ac680aed809ca9b3b59'.