Excellent Apps

Publisher Information

Excellent Apps is a software publisher located in Philadelphia, Pennsylvania in the United States*. The company is a primary distributor of unwanted software. Excellent Apps (50onRed, International Web Services, LLC d/b/a GamePlayLabs/ Red Online Marketing Group LP) (also distributed under the names 215 Apps, Friendly Apps, Amazing Apps, etc.) is an adware producer of web browser extensions that are designed to inject advertisements and affiliate deals within the web pages the user is browsing. The company re-distributes a few dozen of the same adware type programs under a variety of product names (such as Luck Savings, Discount Buddy, Solid Savings, etc.) and company names through monetized bundled installations using the Crossrider toolbar platform.
Remove Excellent Apps Malware - Powered by Reason Core Security
Authority:
Thawte, Inc.

Valid from:
8/29/2012 2:00:00 AM

Valid to:
8/30/2013 1:59:59 AM

Subject:
CN=Excellent Apps, O=Excellent Apps, L=Philadelphia, S=Pennsylvania, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6d2fb6375d3a8788b735fedbd060732b

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.50OnRed.ExcellentApps (M), Trojan.MyStart.50OnRed (M), PUP.50OnRed.ExcellentApps.Installer (M)
100.00%

VIPRE Antivirus
GamePlayLabs, Threat.4736651
28.00%

Sophos
AppRider, AppRider (PUA), Generic PUA PD (PUA), PUA 'AppRider' (of type Adware), PUA 'CouponDropDown' (of type Adware)
28.00%

Trend Micro House Call
TROJ_GEN.R0CBH07JN13, TROJ_GEN.R002H05BS15, TROJ_GEN.F47V0122, TROJ_GEN.R0CBH0AJA13, TROJ_GEN.R0CBB01GK14, TROJ_GEN.F47V0325
26.00%

G Data
Adware.Generic.993945, Gen:Variant.Adware.VidSaver, Adware.Generic.993472, Gen:Application.Heur.Ny9@musXpzfi, Win32.Trojan.Agent.WQ2Y1M
22.00%

ESET NOD32
Win32/Toolbar.CrossRider (variant), Win32/Toolbar.CrossRider.H potentially unwanted (variant)
22.00%

MicroWorld eScan
Adware.Generic.993945, Gen:Variant.Adware.VidSaver.1, Adware.Generic.993472, Gen:Application.Heur.Ny9@musXpzfi, Gen:Application.Heur.Qy9@mSVaf6ii
20.00%

Malwarebytes
PUP.Optional.VidSaver.A, PUP.Optional.DealBoat.A, PUP.Optional.DealVault, PUP.Optional.DealVault.A, PUP.Optional.LuckySavings.A
20.00%

Bitdefender
Adware.Generic.993945, Gen:Variant.Adware.VidSaver.1, Adware.Generic.993472, Gen:Application.Heur.Ny9@musXpzfi, Gen:Application.Heur.Qy9@mSVaf6ii
20.00%

NANO AntiVirus
Riskware.Win32.CrossRider.dffuxp, Riskware.Win32.CrossRider.dgrdtp, Riskware.Win32.CrossRider.ddopoc, Trojan.Win32.Crossrider1.dtmjlk
20.00%

11 / 68    (Adware)
coupondropdown-bg.exe (CouponDropDown by 215 Apps)  (1687a251b987c0b2050edb11efe20dc2)

1 / 68      (Adware)
buttonutil.dll  (d1ea0468d0d3e09e4938ad6e9cbb038d)

21 / 68    (Adware)
CouponDropDown.dll (CouponDropDown by 215 Apps)  (9b8c5db1785af45765d231541fe28969)

1 / 68      (Adware)
vid-saver-ppi.exe (Vid-Saver by 215 Apps)  (3e1e1892159a0af33d9adcd2a6279801)

16 / 68    (Adware)
vid-saver-bg.exe (Vid-Saver by 215 Apps)  (ec1a106a079cdacb7066149e28a1e362)

1 / 68      (Adware)
buttonutil.dll  (52d55af0f04460dc419db0b26e82b6ba)

1 / 68      (Adware)
vid-saver-rvs.exe (Vid-Saver by 215 Apps)  (cdd362f275d691e586946d71ca6b9327)

1 / 68      (Adware)
Vid-Saver.dll (Vid-Saver by 215 Apps)  (d32503d2a294df95a9c35cfbeffe373c)

16 / 68    (Adware)
vid-saver-bg.exe (Vid-Saver by 215 Apps)  (96eadfc98159194392547aafa704eb30)

1 / 68      (Adware)
buttonutil.dll  (d652bf17f4d0a526644ed60da951edc7)

1 / 68      (Adware)
vid-saver-rvs.exe (Vid-Saver by 215 Apps)  (afcf958bf6c1f69d124dc8a18c4e55ea)

1 / 68      (Adware)
Giant Savings.dll (Giant Savings by 215 Apps)  (fc4c15f8b72e254ba00eab4f4e4aacab)

1 / 68      (Adware)
buttonutil.dll  (af2905673e2e60e86821424a439e792f)

1 / 68      (Adware)
Solid Savings.exe (Solid Savings by 215 Apps)  (213ddf6ffe52e039dadc48d367482d48)

1 / 68      (Adware)
supreme savings-bg.exe (Supreme Savings by 215 Apps)  (1085e754f5d04f6a226f03af92a371c5)

1 / 68      (Adware)
buttonutil.dll  (811a2817f2d6e3d47267c0da07ab0975)

22 / 68    (Adware)
updater19962.exe (Supreme Savings by 215 Apps)  (79772a928227a919669a98ecc1de360d)

1 / 68      (Adware)
tiger savings-bg.exe (Tiger Savings by 215 Apps)  (47f52c8fd0d41452dd597d677a84af4e)

1 / 68      (Adware)
buttonutil.dll  (8ba3dbc88775a13f46ae90b26936b9b4)

19 / 68    (Adware)
dealvault.exe (Deal Vault by 215 Apps)  (8717a4aaaaf391bd5877058d40b430e2)

26 / 68    (Adware)
Lucky Savings.dll (Lucky Savings by 215 Apps)  (f5d0efaa78b1d73351010b20fe5be579)

21 / 68    (Adware)
lucky savings-bg.exe (Lucky Savings by 215 Apps)  (61eb68a0b7348f22a264544379abc831)

1 / 68      (Adware)
buttonutil.dll  (472566561bb2c5c403a2ffb9302ddfb7)

2 / 68      (Adware)
giant savings-bg.exe (Giant Savings by 215 Apps)  (893e675e8768d68740d43c3d349c8da0)

32 / 68    (Adware)
Deal Vault.dll (Deal Vault by 215 Apps)  (95770596157a616aa7259418ed2912ca)

38 / 68    (Adware)
deal vault-bg.exe (Deal Vault by 215 Apps)  (37aeedacc50b066d4061211499754c1b)

1 / 68      (Adware)
buttonutil.dll  (5c900e9c5cea72d26c438fbb192d67fd)

14 / 68    (Adware)
Deal Boat.dll (Deal Boat by 215 Apps)  (a26e4434fe04d30336a35ae5a0c48a3a)

2 / 68      (Adware)
CouponDropDown.dll (CouponDropDown by 215 Apps)  (4ba5ddcd748ff6333be4f725e9bdd5d2)

1 / 68      (Adware)
coupondropdown-bg.exe (CouponDropDown by 215 Apps)  (af37e8e2f617a6df5876c2442e5aec28)

 
Latest 30 of 281 files

The following publishers (by Authenticode signature organization name) are related.

Remove Excellent Apps Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Excellent Apps by Thawte, Inc. on August 29, 2012 with the serial number '6d2fb6375d3a8788b735fedbd060732b'.