Friendly Apps

Publisher Information

Friendly Apps is a software developer located in Philadelphia, Pennsylvania in the United States*. The company is a primary distributor of unwanted software. Friendly Apps (International Web Services, LLC d/b/a GamePlayLabs) (also distributed under the names 215 Apps, Excellent Apps, Amazing Apps, etc.) is an adware producer of web browser extensions that are designed to inject advertisements and affiliate deals within the web pages the user is browsing. The company re-distributes a few dozen of the same adware type programs under a variety of product names (such as Luck Savings, Discount Buddy, Solid Savings, etc.) and company names through monetized bundled installations using the Crossrider toolbar platform.
Remove Friendly Apps Malware - Powered by Reason Core Security
Authority:
Thawte, Inc.

Valid from:
4/30/2012 7:00:00 PM

Valid to:
5/1/2013 6:59:59 PM

Subject:
CN=Friendly Apps, O=Friendly Apps, L=Philadelphia, S=Pennsylvania, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
56d17d2d52c2bc3a2cecda129ca33619

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.50OnRed.FriendlyApps (M), PUP.50OnRed.FriendlyApps.Installer (M)
100.00%

Malwarebytes
PUP.CrossRider.SSK, PUP.Optional.SavingsSidekickPlugin, PUP.CrossRider.CDD, Adware.GamePlayLabs, PUP.Optional.VidSaver.A
38.00%

K7 Gateway Antivirus
Unwanted-Program , Adware , Dialer , Trojan
38.00%

K7 AntiVirus
Unwanted-Program , Adware , Dialer , Trojan
38.00%

Trend Micro House Call
TROJ_GEN.R0CBH05J913, TROJ_GEN.R00JC0OGR14, TROJ_GEN.RC1H1EK, TROJ_GE.6053C2F8, TROJ_GEN.R0C1C0OCT15
38.00%

Dr.Web
Adware.Bho.3871, Adware.Plugin.893, Trojan.Crossrider.1
38.00%

VIPRE Antivirus
GamePlayLabs
38.00%

Sophos
AppRider, AppRider (PUA)
38.00%

G Data
Gen:Variant.Adware.VidSaver, Adware.Generic.901114, Win32.Adware.Crossrider, Adware.Generic.553363, Gen:Application.Heur.Iy9@m4M2Xxdi
38.00%

ESET NOD32
Win32/Toolbar.CrossRider (variant), Win32/Toolbar.CrossRider.E potentially unwanted (variant), Win32/Toolbar.CrossRider.A potentially unwanted (variant)
38.00%

1 / 68      (Adware)
giant-savings.exe (Giant Savings by 215 Apps)  (eef10b6d046a403f12d1f947fd99ad63)

33 / 68    (Adware)
Vid-Saver.dll (Vid-Saver by 215 Apps)  (fc1334f604425bb9890a7cdbd37b2325)

1 / 68      (Adware)
buttonutil.dll  (024988b2ba64b80849b887649bc0daf0)

17 / 68    (Adware)
vid-saver-bg.exe (Vid-Saver by 215 Apps)  (c8f40fbe0902d79bd2699ac59febeee9)

1 / 68      (Adware)
vid-saver-rvs.exe (Vid-Saver by 215 Apps)  (c838e40f61ec4b912d89f4d8977a683a)

33 / 68    (Adware)
Vid-Saver.dll (Vid-Saver by 215 Apps)  (c9e92b93d3c0a7de79a5828706b30faf)

1 / 68      (Adware)
coupon companion-bg.exe (Coupon Companion by 215 Apps)  (36d141d4b497090ef2efcd5c27cc3758)

1 / 68      (Adware)
buttonutil.dll  (92a9689bfaa2ad9efd7170388231b63c)

1 / 68      (Adware)
Coupon Companion.dll (Coupon Companion by 215 Apps)  (61c2179b2989cfb5cca72c4030c92f29)

17 / 68    (Adware)
vid-saver-bg.exe (Vid-Saver by 215 Apps)  (bfc89e141166815194ad02f9c535231c)

1 / 68      (Adware)
buttonutil.dll  (590a6d8e4de5b297d622d1554a303f99)

1 / 68      (Adware)
phx6826.exe (Vid-Saver by 215 Apps)  (63d27bc4b003e032ba14cd65fed5f88a)

33 / 68    (Adware)
Vid-Saver.dll (Vid-Saver by 215 Apps)  (07595f9733c878a5f8bb2161cc8b13a9)

34 / 68    (Adware)
Vid-Saver.dll (Vid-Saver by 215 Apps)  (8dd26c549206348da09725c25c835f4f)

18 / 68    (Adware)
vid-saver-bg.exe (Vid-Saver by 215 Apps)  (61ea9d79dae3a5feec8f97e5d223ab6f)

1 / 68      (Adware)
i want this-bg.exe (I Want This by 215 Apps)  (6fa44a262870f39988ae85c2e36f65e2)

1 / 68      (Adware)
shopping sidekick-bg.exe (Shopping Sidekick by 215 Apps)  (9314ad9930ef0184d3daee69c79a6872)

1 / 68      (Adware)
coupondropdown-bg.exe (CouponDropDown by 215 Apps)  (096dec3ee9525e8f44f4752cb4a47914)

1 / 68      (Adware)
CouponDropDown.dll (CouponDropDown by 215 Apps)  (aac2cd93232d8c38ff5c33fe14d53284)

1 / 68      (Adware)
vidsaver_rs.exe (Vid-Saver by 215 Apps)  (6e3da51c80395a202eb14e3a89a0e8e9)

2 / 68      (Adware)
Vid-Saver.exe (Vid-Saver by 215 Apps)  (2f016c79ebf8233e85f44a340187bb20)

1 / 68      (Adware)
I Want This.dll (I Want This by 215 Apps)  (236d2bdd95a5819d200d86a5a016ddea)

1 / 68      (Adware)
vid-saver-ppi-us.exe (Vid-Saver by 215 Apps)  (bd82687c7d8ad8e44dc095a9db14d23c)

1 / 68      (Adware)
component_527 (Savings Sidekick by 215 Apps)  (69852983c373747bfb1f097297c8e637)

1 / 68      (Adware)
buttonutil.dll  (56e86576e22a91098b07d611864e33da)

31 / 68    (Adware)
Savings Sidekick.dll (Savings Sidekick by 215 Apps)  (8c1ee1300250e100fcc72c1d9f7fcfe2)

1 / 68      (Adware)
savingsapp-bg.exe (SavingsApp by 215 Apps)  (a33467f0919c3215f0803ca400e235e1)

1 / 68      (Adware)
buttonutil.dll  (cf36821ef99ba559601b111cd1fd0b51)

17 / 68    (Adware)
vid-saver-bg.exe (Vid-Saver by 215 Apps)  (b07a51c3f16192ba18970157af8c2a6e)

1 / 68      (Adware)
buttonutil.dll  (259fe505f7ba19874fa41d4e567eb08b)

 
Latest 30 of 129 files

The following publishers (by Authenticode signature organization name) are related.

Remove Friendly Apps Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Friendly Apps by Thawte, Inc. on April 30, 2012 with the serial number '56d17d2d52c2bc3a2cecda129ca33619'.