» PayByAds ltd.
Digital Signature
Analysis
Files (112)
Downloads (2)
Distribution (2)
Related (20)

PayByAds ltd.

Publisher Information

PayByAds ltd. is a software developer located in Tel Aviv, Israel*. The company is a primary distributor of unwanted software.

Authority:

COMODO CA Limited

Valid from:

7/28/2014 7:00:00 AM

Valid to:

7/29/2015 6:59:59 AM

Subject:

CN=PayByAds ltd., O=PayByAds ltd., STREET="Herbert Samuel, 46", L=Tel Aviv, S=Israel, PostalCode=6330303, C=IL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00ca9e6fd9ac89fbb9bc192ca9530a98f5

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Montiera.PayByAds, PUP.Montiera.PayByAds (M), PUP.Montiera.PayByAds.Installer (M), PUP.Montiera (M)

100.00%

MicroWorld eScan

Adware.PayByAds.A

8.00%

nProtect

Adware.PayByAds.A

8.00%

Malwarebytes

PUP.Optional.PlayNowRadio.A, PUP.Optional.OnlySearch.A

8.00%

K7 AntiVirus

Riskware , Unwanted-Program

8.00%

Bitdefender

Adware.PayByAds.A

8.00%

Lavasoft Ad-Aware

Adware.PayByAds.A

8.00%

Sophos

PayByAds

8.00%

F-Secure

Adware.PayByAds.A

8.00%

VIPRE Antivirus

Montiera

8.00%

1 / 68 (Adware)

dsrlte.exe (by Pay By Ads) (899860bff83889d3ee6e29f2dc9ceaa1)

1 / 68 (Adware)

update.exe (380cf86f2a300f62830ee8d23a748931)

1 / 68 (Adware)

update.exe (3cf212256875616bf1d92f97bffdcf03)

1 / 68 (Adware)

pricehorse_1.3.13.12_cn.exe (5408f158630637aefc0fa2e82b576008)

1 / 68 (Adware)

dsrlte.exe (by Pay By Ads) (899860bff83889d3ee6e29f2dc9ceaa1)

1 / 68 (Adware)

greenerweb.ofsvc.exe (849d2f359ec0a3daec7fd8f3c173177a)

1 / 68 (Adware)

playmrmd_2.exe (d1162d102665eda7c35b80ddef3707cd)

1 / 68 (Adware)

dsrsetup.exe (by Pay By Ads) (f294753e1697009acf3337b879f5ce7e)

1 / 68 (Adware)

focusbase.ofsvc.exe.tmp (5e739702fd4c3264a16e626d1cd162e0)

1 / 68 (Adware)

trz9779.tmp (by Pay By Ads) (fddc320d76d797e52091d5100fada536)

1 / 68 (Adware)

dsrsetup.exe (by Pay By Ads) (adc99a072bfc23aa7a5a7a35d3d8045e)

1 / 68 (Adware)

dsrsetup.exe (by Pay By Ads) (7bba585e4547f919f732810025a53bee)

1 / 68 (Adware)

onlysetup.exe (by Pay By Ads) (106cd233c9d9db28191e48aae277899d)

1 / 68 (Adware)

playmtid_1.3.14.6_cn.exe (a09a5afdef657625d1c6ba99ed23b139)

1 / 68 (Adware)

dsrsetup.exe (by Pay By Ads) (5d162c3a96e36df8cccb2b633db420e5)

1 / 68 (Adware)

dsrlte.exe (by Pay By Ads) (57ab3a876949b79efbe238f1cae17592)

1 / 68 (Adware)

dsrlte.exe (by Pay By Ads) (846ca22edbd2b67f718ea9dce7a54968)

1 / 68 (Adware)

dsrsetup.exe (by Pay By Ads) (a206dbeecdbdcc31914145a702b87c24)

1 / 68 (Adware)

setup.exe (359cf024c299e0af4d0cedb4aecd36d3)

1 / 68 (Adware)

startup.exe (by Pay By Ads) (69d4abddc4d8b67951114e858a0880a9)

1 / 68 (Adware)

startpoint.exe (by Pay By Ads) (cfc10f935e55139eda40ee5a1cda8361)

1 / 68 (Adware)

dsrsetup.exe (by Pay By Ads) (b848401e3d65ed921247ffad0d1db6a0)

1 / 68 (Adware)

dsrlte.exe (by Pay By Ads) (bbe160b9525051a0a59a46be79b9ffd7)

1 / 68 (Adware)

playsetup-afa964cb-6615-4d28-9f2c-3ca0f1f75f8b.exe (by Pay By Ads) (bfd3d7ea28856a0816739726a74d66a3)

1 / 68 (Adware)

pricehorse_1.exe (f65a8104e075e81de05d1602e99dd7b7)

1 / 68 (Adware)

newvrsn.exe (a814c27f0dc2d3da58fc0dda69c58b15)

1 / 68 (Adware)

dsrsetup.exe (by Pay By Ads) (f7614081f74bedb1044cca16e98156ab)

1 / 68 (Adware)

dsrsetup.exe (by Pay By Ads) (90a509a81ab4875e2963cf1f3ac8332d)

1 / 68 (Adware)

dsrlte.exe (by Pay By Ads) (59ea085c56bcc7fa9e58973ef0422428)

1 / 68 (Adware)

startpoint_1.exe (b41557063697839ec5d308d086f41ecc)

Latest 30 of 112 files

Downloads URLs for files signed by PayByAds ltd..

1 / 68 (Adware)

http://dwnl.toolbarservices.com/pricehorse_1.3.13.12_cn.exe (c91f92c1667017c7b1292b838535f278)

31 / 68 (Adware)

http://vzbucket.maxrevinstaller.com/.../playcn_1.3.13.9_cn.exe (b0ef488a286369bbfaf85ab98a94cfcf)

Distribution

The following websites host and distribute files published by PayByAds ltd..

vzbucket.maxrevinstaller.com

dwnl.toolbarservices.com

The following publishers (by Authenticode signature organization name) are related.

WhiteSmoke Inc

Montiera Technologies LTD

Hefei Zhimingxingtong Software&Technology Co., Ltd.

PC Utilities Software Limited

Smart PC Solutions, Inc.

Safe Download Limited

Search Snacks, LLC

Passion Fruit Tech

Fu Yu

PriceGong Software Ltd

SoftBrain Technologies Ltd.

* Note, the details and description above are based on the code signing digital signature issued to PayByAds ltd. by COMODO CA Limited on July 28, 2014 with the serial number '00ca9e6fd9ac89fbb9bc192ca9530a98f5'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.