» Blinkx
Digital Signature
Analysis
Files (19)
Downloads (2)
Distribution (1)
Related (4)

Blinkx

Publisher Information

Blinkx is a software publisher located in San Francisco, California in the United States*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.

Authority:

VeriSign, Inc.

Valid from:

5/13/2008 7:00:00 PM

Valid to:

5/14/2011 6:59:59 PM

Subject:

CN=Blinkx, OU=Blinkx, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Blinkx, L=San Francisco, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

5a782be720091aa3168a3d042724408f

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Blinkx.W, PUP.Toolbar.Blinkx.Q, PUP.Toolbar.Blinkx.S, PUP.Blinkx.O, PUP.Installer.Blinkx.U, PUP.Blinkx.G, PUP.Blinkx (M), PUP.Blinkx.Installer (M), PUP (M)

100.00%

McAfee

Artemis!5A535280BD4D, Adware-HotBar.b, Artemis!17DF5BFCA9E2

21.05%

Fortinet FortiGate

Misc/PUP, Riskware/PUP, Adware/Hotbar

21.05%

Rising Antivirus

PE:Trojan.Dropper!6.3CE, PE:Trojan.Win32.Generic.12553CB7!307575991

15.79%

Agnitum Outpost

TrojanSpy.Agent, Adware.Rugo.Gen.5

15.79%

Sophos

BlinkX, Hotbar-Installer

10.53%

Bkav FE

W32.TXemaF.Trojan, W32.HotBarAI.Adware

10.53%

AhnLab V3 Security

Win-AppCare/Xema.264448, Adware/Win32.Hotbar

10.53%

Panda Antivirus

Adware/SearchHook

5.26%

Trend Micro House Call

TROJ_GEN.F47V0519

5.26%

1 / 68 (Adware)

setup.exe (Setup by blinkx) (9c4a334d3dd60dbb33048158c550ffd0)

1 / 68 (Adware)

Setup.exe (Setup by blinkx) (02fd5e1698eb20b2936034209b4d03ac)

1 / 68 (Adware)

blinkxbeat.com.exe (17db4bf898cbbf3f6a0555e4de3f0a48)

1 / 68 (Adware)

the_blinkx_toolbar.dll (947d53c9678623f36c915b131ca02498)

1 / 68 (Adware)

clickpotatoinstaller.exe (e2aecfca0c24eb6600ccc7bd433e0721)

1 / 68 (Adware)

clickpotatoinstaller.exe (359410cc77e4999a012901cc072e439e)

1 / 68 (Adware)

5e1ec5274131928aef5cc98090153be4_364408.npb (5e1ec5274131928aef5cc98090153be4)

1 / 68 (Adware)

blinkx_remote_toolbar.exe (3543241210a6fb6290bb18f60698f538)

1 / 68 (Adware)

saifa3f.exe (9258749edb08caba44cc5a0cd58b6501)

1 / 68 (Adware)

blinkx_video_toolbar_video01ask_video01ask.exe (fac08cc72fce8424d62b82dc2c921313)

1 / 68 (Adware)

blinkxbeat.com.exe (b37d2f5fcb49c0652dfa9d8a38069c04)

5 / 68 (Adware)

blinkx_remote_toolbar.exe (17df5bfca9e2d10c793d53a7306e9dd8)

1 / 68 (Adware)

the_blinkx_bho.dll (cf4b9eabaca990f1ba9299d505bc1526)

1 / 68 (Adware)

sb_bho.dll (Cheep by blinkx) (35808d8a0aca3831527c8f3a222ad69e)

30 / 68 (Adware)

clickpotatoinstaller.exe (a4ab63e03abddf2b8f177acd9356e3fb)

6 / 68 (Adware)

blinkx_toolbar.exe (fa22c1c440de463615016fa7e08b3a4b)

4 / 68 (Adware)

the_blinkx_toolbar.dll (39b6fb6c606ccb69ff6afc1271f1aaff)

4 / 68 (Adware)

the_blinkx_shook.dll (SearchHook Module) (5a535280bd4d472fe08bfd1bdd64d7db)

3 / 68 (Adware)

blinkx_beat-1.5.0-cmp-is.exe (e244f1467008fd937d21f68cdc12b22d)

Downloads URLs for files signed by Blinkx.

3 / 68 (Adware)

http://s.allfree-soft.net/inst/software/.../blinkx_beat-1.5.0-CMP-IS.exe (e244f1467008fd937d21f68cdc12b22d)

3 / 68 (Adware)

http://s.allfree-soft.com/inst/software/.../blinkx_beat-1.5.0-CMP-IS.exe (e244f1467008fd937d21f68cdc12b22d)

Distribution

The following websites host and distribute files published by Blinkx.

s.allfree-soft.com

The following certificate is also signed by Blinkx.

410DBE507419B199FB304EA092CD44BB (Apr 25, 2011 to Apr 25, 2013)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Blinkx by VeriSign, Inc. on May 13, 2008 with the serial number '5a782be720091aa3168a3d042724408f'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.