home

Paycom Media, S.L.

Publisher Information

Paycom Media, S.L. is a software publisher located in Madrid, Spain*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs.
Authority:
VeriSign, Inc.

Valid from:
3/19/2012 1:00:00 AM

Valid to:
3/20/2013 12:59:59 AM

Subject:
CN="Paycom Media, S.L.", OU=IT, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Paycom Media, S.L.", L=Madrid, S=Madrid, C=ES

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
2fadc58fea37f310a0f6e40cecbd0b6a

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.PaycomMedia.Reputation, PUP.PaycomMedia.Installer (M), PUP.PaycomMe.Installer (M), PUP.PaycomMe (M), PUP (M)
96.55%

ESET NOD32
Win32/InstallCore.BA potentially unwanted application, Win32/InstallCore.AH potentially unwanted application
20.69%

F-Prot
W32/InstallCore.N.gen
17.24%

VIPRE Antivirus
Threat.4788237
10.34%

Dr.Web
Adware.InstallCore.75, Adware.InstallCore.55
10.34%

1 / 68      (Malware)
icreinstall_windowsmediaplayer.exe  (ffb8b3ee1d3e6d50e356f4b8b41a963d)

1 / 68      (Malware)
icreinstall_setup.exe  (ab279d70e7c308f94013dbfec5aeb2b2)

1 / 68      (Malware)
winrar.exe  (4a1c0bbc3d18abbc61aeacec97ef04fc)

1 / 68      (Malware)
setup.exe  (8a91397fa2398cea4361acfea68ac21e)

1 / 68      (Malware)
setup.exe  (5d322dca20c43e74f65e6a24eb7c9040)

1 / 68      (Malware)
office.exe  (9f543eca4be752da18bb22173a343412)

1 / 68      (Malware)
icreinstall_antivirus.exe  (bd047c32e93d677a1c15486afa9778d8)

1 / 68      (Malware)
setup.exe  (4513505d3e297f42ebf51ef84b434034)

1 / 68      (Malware)
setup.exe  (e7050711bc34f02255cd4bde0f65a392)

4 / 68      (PUP)
setup.exe  (8837690276cc82ea7973c354794f2b7f)

3 / 68      (PUP)
setup.exe  (e474feda449a11984d623054826ff5c0)

5 / 68      (PUP)
setup.exe  (ebf1160fb6a2655b130c654e3908244c)

1 / 68      (PUP)
windowsmediaplayer-setup.exe (Windows Media Player by Nom de votre société)  (7e7c9b15fc44e143fee24ab535bb67bc)

1 / 68      (PUP)
setup.exe  (a8c465f566eff4145473c1c95304fa37)

3 / 68      (PUP)
setup.exe  (49490b92dc079d3ac9871d808578255c)

1 / 68      (PUP)
4380284_setup.exe (Antivirus AVAST! by Nom de votre société)  (847f14164359bc43a34642f8d30a8257)

1 / 68      (PUP)
antivirus.exe  (3ed7ecdf84cdb2608bbdf31b5b99d9dd)

1 / 68      (PUP)
setup.exe  (a8e68f4aa87ae46044d864d544c63d60)

3 / 68      (PUP)
setup.exe  (2b01e68d322334233bd27d0ae47a7b09)

1 / 68      (PUP)
2694821_setup.exe (OpenOffice by Nom de votre société)  (1bf08d5a54ef38dcc15e0fb5e37c6972)

1 / 68      (PUP)
flashplayer.exe (Flash Player by Nom de votre société)  (9ab0dce46d521369f5e5ff2af28bb334)

4 / 68      (PUP)
flashplayer.exe  (1903d9d2edd4bbbdbf065be246da9629)

1 / 68      (PUP)
winzip-setup.exe (RAR by Nom de votre société)  (7fbdcfefb68a5c1cd0aa9ef1ce9bfafc)

1 / 68      (PUP)
messenger-setup.exe (Messenger by Nom de votre société)  (5276b28e7157fe9c95defdfb8217cdf5)

1 / 68      (PUP)
office-setup.exe (OpenOffice by Nom de votre société)  (8a6920707a7938eb0304393ef6293a23)

1 / 68      (PUP)
356752_setup.exe (InstallShield by Acresso Software)  (4f217cce1ad4219aa3ae1c82122ac6f1)

1 / 68      (PUP)
office-setup.exe (Flash Player by Nom de votre société)  (95d54da2f4e8c45ea687a073c3d703ee)

1 / 68      (PUP)
openoffice.exe (OpenOffice by Nom de votre société)  (1b139e09f5a9bf5ccd732d7d12557276)

1 / 68      (PUP)
openoffice.exe (OpenOffice by Nom de votre société)  (d304c60804c4d456fe8ee1209e9821b4)

Downloads URLs for files signed by Paycom Media, S.L..

1 / 68      (Malware)
http://static.nuevos-programas.com/.../download.php?PT=luxand blink 2.3&ID=3836  (setup.exe)

1 / 68      (PUP)
http://antivirus.version-es.com/.../antivirus.exe  (3ed7ecdf84cdb2608bbdf31b5b99d9dd)

The following websites host and distribute files published by Paycom Media, S.L..

antivirus.version-es.com

* Note, the details and description above are based on the code signing digital signature issued to Paycom Media, S.L. by VeriSign, Inc. on March 19, 2012 with the serial number '2fadc58fea37f310a0f6e40cecbd0b6a'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.