melondrea

Publisher Information

melondrea is a brand of the Sambreel/Yontoo group, a web advertising company located in Carlsbad, CA. The company is a primary distributor of unwanted software. It is part of the Yontoo/Sambreel group and distributes web browser add-ons, typically potentially unwanted and adware in nature, that are designed to modify a user's typical search beahvior as well as display context and popup advertising. Thre are 2 additional code signing certificates issued to this publisher.
Remove melondrea Malware - Powered by Reason Core Security
Authority:
VeriSign, Inc.

Valid from:
11/27/2013 1:00:00 AM

Valid to:
11/28/2014 12:59:59 AM

Subject:
CN=melondrea, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=melondrea, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
1e3d0ba5a8e3c43bcd552347b3bb8b2b

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.Yontoo.melondrea (M), PUP.Yontoo.melondrea (M), PUP.Yontoo.melondrea.Installer (M)
100.00%

Emsisoft Anti-Malware
Trojan.Sephish, Gen:Variant.Adware.BHO.Agent, Adware.Agent.OCH
24.00%

Malwarebytes
PUP.Optional.Sambreel.A, PUP.Optional.Melondrea.A
22.00%

AVG
MalSign.Melond, BrowseFox.F, Generic_r
8.00%

Baidu Antivirus
Adware.Win32.BrowseFox, Adware.Win32.Agent
8.00%

McAfee
Artemis!345A359459F3, BrowseFox
6.00%

Zillya! Antivirus
Adware.Agent.Win32.9068, Adware.LinkSwift.Win32.69
6.00%

K7 Gateway Antivirus
Unwanted-Program , Trojan
6.00%

K7 AntiVirus
Unwanted-Program , Trojan
6.00%

NANO AntiVirus
Riskware.Win32.Agent.crkvek, Trojan.Win32.BPlug.dfgkoo
6.00%

1 / 68      (Adware)
setup.exe  (d080cd404b698161d90533498a58ec8f)

1 / 68      (Adware)
melondrea_setup.exe  (64eede20bbb43854592e3693a8d9fee3)

1 / 68      (Adware)
melondrea_setup.exe  (5549546082d3596f52015fdfe32703fc)

3 / 68      (Adware)
melondrea.FirstRun.exe (FirstRun)  (7579f1f9661331353fef7ffd32643b4f)

1 / 68      (Adware)
{c047df5e-0fda-4055-b5db-a96a8a34a094}gt64.sys (StdLib)  (9dbf0267370e7e6fe067015b9fbf842d)

1 / 68      (Adware)
updatemelondrea.exe  (1c509434d3cc5a033cc740b2312032d7)

1 / 68      (Adware)
tstlibg64.sys (StdLib)  (6e43862396d0b68128d69ccf0aaadb52)

1 / 68      (Adware)
filterapp_c64.exe  (0e1b920c1bf3d5e5b1d124cfa9ae6b83)

1 / 68      (Adware)
melondrea.purbrowseg.dll.vir  (a173aba4a095b761d1408d91616f8eb8)

1 / 68      (Adware)
melondrea.purbrowse64.exe.vir  (81f0adc2fa03131f2f46a1be01db6c8f)

1 / 68      (Adware)
updatemelondrea.exe.vir  (6902141dbc1583c962f5139c117bd3dc)

32 / 68    (Adware)
melondreabho.dll (melondrea)  (d1950b654f8f5ba8ba9b1aaa59430894)

3 / 68      (Adware)
melondrea.FirstRun.exe (FirstRun)  (b82e056633420315204a8bb62c5f0d33)

1 / 68      (Adware)
melondreaBrowserFilter.exe  (b9978f936a94ff7aef8f1dd409cb40b6)

1 / 68      (Adware)
melondrea.browserfilter.helper.dll  (080a44b2ed7ab522efaf5c7ffcb7e711)

1 / 68      (Adware)
melondreaBrowserFilter.exe  (6ee4bdfc7fb0d644ea740993fa286cfd)

1 / 68      (Adware)
melondrea.browserfilter.helper.dll  (103e81ec01bce119eb50b7fa5307cbb2)

1 / 68      (Adware)
updatemelondrea.exe  (302b5eda61ff3777191856b537bdd5f8)

1 / 68      (Adware)
melondrea.browserfilter.helper.dll  (fde3301151723af968e0f73719d77d77)

1 / 68      (Adware)
melondrea.IEUpdate.dll  (7833b2e78de1a99e7de957460c4f57fb)

1 / 68      (Adware)
melondrea.BrowserFilterG.dll  (1067d1ff9a9eec748034ace39431076d)

1 / 68      (Adware)
melondreaBrowserFilter.exe  (3c2b5d48fffe67f133cc74ce9447a76c)

1 / 68      (Adware)
melondrea.browserfilter.helper.dll  (65ff99103e83e81c82669e3ed034f9e0)

3 / 68      (Adware)
melondrea.FirstRun.exe (FirstRun)  (a780b1162465d7c8cda4671045beb7ff)

1 / 68      (Adware)
setup.exe  (adc11325db163a60064bf0a36abe8fe5)

1 / 68      (Adware)
melondreaBrowserFilter.exe  (043f1184d19de4f8a2d53b9685046ac8)

1 / 68      (Adware)
melondrea.browserfilter.helper.dll  (5567594d87a438b0d295e04f4d50ca2f)

1 / 68      (Adware)
setup.exe  (4fc89437b695acda25882283d4523e2a)

3 / 68      (Adware)
melondrea.FirstRun.exe (FirstRun)  (bcedcc87216842f2f3790b9400c97af1)

1 / 68      (Adware)
melondrea.BrowserFilter.dll  (de32213860ee6222bc7ca939c75b2d24)

 
Latest 30 of 312 files

Downloads URLs for files signed by melondrea.

1 / 68      (Adware)
http://install-cdn.melondrea.net/setup.exe  (adc11325db163a60064bf0a36abe8fe5)

1 / 68      (Adware)
http://install-cdn.melondrea.net/setup.exe  (4fc89437b695acda25882283d4523e2a)

The certificates below are also signed by melondrea.

231D7D8EBDF7B46C4824D8213841DD70  (Nov 04, 2014 to Jan 04, 2016)

58580E4F32DB4FE90920DADE2B01109D  (Jun 02, 2014 to Nov 27, 2014)

The following publishers (by Authenticode signature organization name) are related.

30 of 145 publishers

Remove melondrea Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to melondrea by VeriSign, Inc. on November 27, 2013 with the serial number '1e3d0ba5a8e3c43bcd552347b3bb8b2b'.