home

myVBO LLC

Publisher Information

myVBO LLC is a brand of publishers/developers run by WebPick Internet Holdings Ltd. located in Ramat Ha'Chayal Tel Aviv, Israel. The company is a primary distributor of unwanted software. myVBO LLC is a developer of WebPick Internet Holdings and publishes a number of adware web browser plugins designed to monitor web browser behavior and inject advertisements (banner, popups, text-links, etc.) in the browser by using the WebPick InstalleRex monetization delivery platform. These programs from myVBO LLC are typiclaly installed on a variety of names and misspellings and are very difficult to remove. According to WebPick, they use developers to sign their adware in order to "throw off competitors". There is one additional code signing certificate issued to this publisher.
Authority:
Thawte, Inc.

Valid from:
5/5/2013 8:00:00 PM

Valid to:
5/11/2015 7:59:59 PM

Subject:
CN=myVBO LLC, OU=FreePriceAlerts, O=myVBO LLC, L=Peterborough, S=New Hampshire, C=US

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
6839cfcea583e27c0222a8cede5e2daf

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Task.myVBO.S, PUP.BHO.myVBO.G, PUP.myVBO.K, PUP.myVBO.S, PUP.myVBO.G, Adware.WebPick.Installer.M, PUP.Installer.myVBO, Adware.WebPick.Installer (M), PUP.WebPick (M), Adware (M)
100.00%

Vba32 AntiVirus
Downloader.AdLoad, Downware.TSU, AdWare.Agent
14.29%

Rising Antivirus
PE:PUF.InstallRex!1.9E4C, Trojan.InstallRex!562A, PE:Trojan.DL.Win32.AntiFW.a!1075355932
14.29%

Comodo Security
Application.Win32.InstalleRex.KG
9.52%

F-Prot
W32/InstallRex.B
4.76%

Agnitum Outpost
PUA.TDownloader.A
4.76%

McAfee
Artemis!88416DEE02F6
4.76%

Qihoo 360 Security
HEUR/Malware.QVM20.Gen
4.76%

1 / 68      (Adware)
vbobho.dll (Ziftr Alerts - formerly FreePriceAlerts.com by MyVBO)  (9822aef31641766d23ce6f976b953a23)

1 / 68      (Adware)
freepricealertssetup.exe (Ziftr Alerts - formerly FreePriceAlerts.com by myVBO)  (5839497bc6b0bd76e55dfd69366291bb)

1 / 68      (Adware)
ziftrcoin-0.9.31-win64-setup.exe (Ziftrcoin by ZiftrCOIN)  (bfaa7dbacb631fc7b8e96d13d777613d)

1 / 68      (Adware)
fpainstaller.exe (Ziftr Alerts - formerly FreePriceAlerts.com by myVBO)  (a7e276a7302a0c339b0b8145f4277bc4)

1 / 68      (Adware)
fpainstaller.exe (Ziftr Alerts - formerly FreePriceAlerts.com by myVBO)  (5cbdd8f3eedd018b30f130d5fb5d66ea)

1 / 68      (Adware)
freepricealerts-setup3.1.0-all-bunndle-05-16-2013.exe (Ziftr Alerts - formerly FreePriceAlerts.com by myVBO)  (b520e849497c092982069ba1284659b3)

8 / 68      (Adware)
ziftrsetup.exe (Ziftr Alerts - formerly FreePriceAlerts.com by myVBO)  (88416dee02f618d5cc9254f067c9ea54)

1 / 68      (Adware)
ziftrcoin-0.9.3-win64-setup.exe (Ziftrcoin by ZiftrCOIN)  (057e2ef0ebc7034c47509a7ffea25083)

1 / 68      (Adware)
ziftrcoin-0.9.3-win32-setup.exe (Ziftrcoin by ZiftrCOIN)  (85741603ceaffebaf47a814dd4a6007e)

3 / 68      (Adware)
fpainstaller.exe (Ziftr Alerts - formerly FreePriceAlerts.com by myVBO)  (d9963305f50469d8b02542ac4b0fb024)

4 / 68      (Adware)
fpainstaller.exe (Ziftr Alerts - formerly FreePriceAlerts.com by myVBO)  (aeb8d368385be7d2833adc7fa05cb120)

1 / 68      (Adware)
vbobho.dll (Ziftr Alerts - formerly FreePriceAlerts.com by MyVBO)  (1025d45e2d759b4125cdb896cd87c3bd)

1 / 68      (Adware)
FpaUtility.dll (Ziftr Alerts (formerly FreePriceAlerts.com) Utility Library by MyVBO)  (c2591466531f40c8dc15408f547e12df)

1 / 68      (Adware)
FpaUpdater.exe (Ziftr Alerts (formerly FreePriceAlerts.com) Update Manager by MyVBO)  (16edc021bbb76435d8c66a1085b7b26f)

1 / 68      (Adware)
vbobho.dll (Ziftr Alerts - formerly FreePriceAlerts.com by MyVBO)  (4f3ad88c171fdd52e42840a69f071327)

1 / 68      (Adware)
FpaUpdaterLauncher.exe (Ziftr Alerts (formerly FreePriceAlerts.com) Update Manager Launcher by MyVBO)  (12a7dcf02fd241c7aa4342638da55c7c)

1 / 68      (Adware)
FpaUtility.dll (Ziftr Alerts (formerly FreePriceAlerts.com) Utility Library by MyVBO)  (a48389c5aee5ab514b1077c7d3dd3663)

1 / 68      (Adware)
FpaUpdater.exe (Ziftr Alerts (formerly FreePriceAlerts.com) Update Manager by MyVBO)  (cc77e3b3b951bccedfa67678f01adc6e)

1 / 68      (Adware)
vbobho.dll (Ziftr Alerts - formerly FreePriceAlerts.com by MyVBO)  (f622620ddbca432861398860c882d285)

1 / 68      (Adware)
vbobho.dll (Ziftr Alerts - formerly FreePriceAlerts.com by MyVBO)  (17360784f9ad58d1e47572db463889fd)

1 / 68      (Adware)
FpaUpdaterLauncher.exe (Ziftr Alerts (formerly FreePriceAlerts.com) Update Manager Launcher by MyVBO)  (22e657e2e34635c9cf3870956b41922c)

Downloads URLs for files signed by myVBO LLC.

1 / 68      (Adware)
https://d2blsqhhpyjjcf.cloudfront.net/assets/downloads/.../ziftrcoin-0.9.3-win64-setup.exe  (057e2ef0ebc7034c47509a7ffea25083)

1 / 68      (Adware)
https://d19y4lldx7po3t.cloudfront.net/assets/downloads/.../ziftrcoin-0.9.3-win64-setup.exe  (057e2ef0ebc7034c47509a7ffea25083)

1 / 68      (Adware)
https://d19y4lldx7po3t.cloudfront.net/assets/downloads/.../ziftrcoin-0.9.3-win32-setup.exe  (85741603ceaffebaf47a814dd4a6007e)

The following websites host and distribute files published by myVBO LLC.

d19y4lldx7po3t.cloudfront.net

The following certificate is also signed by myVBO LLC.

1D23E52C70371EBEA800A8FDB3606CF4  (May 11, 2012 to May 12, 2013)

* Note, the details and description above are based on the code signing digital signature issued to myVBO LLC by Thawte, Inc. on May 05, 2013 with the serial number '6839cfcea583e27c0222a8cede5e2daf'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.