Eli Dahan is a brand of publishers/developers run by WebPick Internet Holdings Ltd. located in Ramat Ha'Chayal Tel Aviv, Israel. The company is a primary distributor of unwanted software. Eli Dahan is a developer of WebPick Internet Holdings and publishes a number of adware web browser plugins designed to monitor web browser behavior and inject advertisements (banner, popups, text-links, etc.) in the browser by using the WebPick InstalleRex monetization delivery platform. These programs from Eli Dahan are typiclaly installed on a variety of names and misspellings and are very difficult to remove. According to WebPick, they use developers to sign their adware in order to "throw off competitors".
COMODO CA Limited
6/9/2013 8:00:00 PM
6/10/2014 7:59:59 PM
CN=Eli Dahan, O=Eli Dahan, STREET=Halapid 3, L=Ramat Gan, S=Center, PostalCode=52573, C=IL
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Detections (100% detected)
Threat.Installer.EliDahan, Adware.AdInjector.Installer, PUP.EliDahan, Adware.EliDahan.Installer (M), PUP.EliDahan.Installer (M), PUP.WebPick.EliDahan (M), PUP.WebPick.EliDahan.Installer (M), Adware.WebPick.Installer (M), PUP.WebPick.EliDahan.Bundler (M)
Win32:InstalleRex-Z [PUP], Win32:InstalleRex-DS [PUP], Win32:InstalleRex-Y [PUP], Win32:Adware-AYT [PUP], Win32:InstalleRex-AI [PUP]
Adware.Downware.1442, Adware.Downware.1166, Adware.Downware.1541
Threat.4753027, Installerex/WebPick, WebPI
PUP-FDX, Program.PUP-FHQ, PUP-FHQ!CDDCEAE2695D, PUP-FDX!BC73ABE5957E
not-a-virus:HEUR:Downloader.Win32.AdLoad, not-a-virus:AdWare.Win32.Agent, Trojan.Win32.AntiFW
PUP.Optional.Installrex, PUP.Optional.Installex, PUP.Optional.InstalleRex
K7 Gateway Antivirus
Unwanted-Program , Riskware
Riskware.Win32.Downware.crfmjd, Riskware.Win32.Downware.crdwiu, Riskware.Win32.Agent.crfilc, Riskware.Win32.Downware.crfmio
Downloads URLs for files signed by Eli Dahan.
The following publishers (by Authenticode signature organization name) are related.
* Note, the details and description above are based on the code signing digital signature issued to Eli Dahan by COMODO CA Limited on June 09, 2013 with the serial number '00864002c7281b93c1609931176b93a6ae'.