home

Preclick Corporation

Publisher Information

Preclick Corporation is a software publisher located in Redmond, Washington in the United States*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
11/11/2014 4:00:00 PM

Valid to:
11/12/2015 3:59:59 PM

Subject:
CN=Preclick Corporation, O=Preclick Corporation, L=Redmond, S=Washington, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3358412edafba259c5e3803df41a3039

Scanner detections:
Detections  (75% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.Bundler (M), Win32.Generic.PreclickCorporation.Bundler.Meta, PUP.InstallCore.RES (M)
70.00%

Baidu Antivirus
Adware.Win32.InstallCore
60.00%

ESET NOD32
Win32/InstallCore.UL potentially unwanted (variant), Win32/InstallCore.RG (variant), Win32/InstallCore.SX (variant), Win32/InstallCore.WC potentially unwanted (variant)
60.00%

Comodo Security
Application.Win32.InstallCore.DWT, Application.Win32.InstallCore.DCQ, Application.Win32.InstallCore.KRD, Application.Win32.InstallCore.KX
50.00%

Avira AntiVirus
PUA/InstallCore.Gen9, ADWARE/InstallCore.Gen, ADWARE/InstallCore.Gen4
50.00%

Trend Micro House Call
Suspicious_GEN.F47V0214, Suspicious_GEN.F47V0101, Suspicious_GEN.F47V0108
30.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h, Malware-Cryptor.InstallCore.gen
30.00%

Sophos
Generic PUA GO, Generic PUA PO, Generic PUA OA
30.00%

Fortinet FortiGate
Riskware/InstallCore
30.00%

McAfee
Artemis!5F87C4FE26C8, Artemis!511810C489F2, Artemis!5CBAC587266D
30.00%

1 / 68      (PUP)
smileboxinstaller.exe (Web Installer Application)  (f44e3e1fa4071d2d174d5e299a93d69c)

0 / 68
smileboxapp.exe (Smilebox by Smilebox)  (8f5acc272d7d415163fb0c99bdfabe22)

1 / 68      (PUP)
smileboxinstaller.exe (Installer Program)  (3f2edf219d96d39844b8d71c4dc3e7a3)

7 / 68      (PUP)
smileboxinstaller.exe (Program installer)  (5cbac587266d5cd8a1b882e87f54a13c)

8 / 68      (PUP)
smileboxinstaller.exe (Internet Software)  (511810c489f2d293da8ba2db18b24e62)

4 / 68      (PUP)
smileboxinstaller.exe (Generic Program)  (e6eefcf69a3118b3d61fd1f6450b811c)

8 / 68      (PUP)
smileboxinstaller.exe (Installer)  (5f87c4fe26c842ed04a926ff4d8b61ae)

0 / 68
SmileboxUpdater.exe (Smilebox by Smilebox)  (940ec6a40d1a40a87215d19e96ae8838)

9 / 68      (PUP)
icreinstall_smilebox_bing_setup_v1.0.2.31649_240.exe (Soft Application Generic)  (bab2f4cbad0933efb14f222fb22d57de)

4 / 68      (PUP)
adwords_smilebox_setup_v1.0.1.29321_974.exe  (48a73c0efb5cb3c37cef3d59bfbf226d)

4 / 68      (PUP)
smileboxinstaller.exe (Installer Program)  (6b716d38c50b3e245d900fa8b35dd616)

2 / 68
smileboxapp.exe (Smilebox by Smilebox)  (500aa58727d045ef4fbbdce6ce5a933c)

Downloads URLs for files signed by Preclick Corporation.

2 / 68
http://dl-vip.appstore.baidu.co.th/.../Smilebox-1.0.0.28815.exe  (500aa58727d045ef4fbbdce6ce5a933c)

7 / 68      (PUP)
http://www.smilebox.com/testing/installer/.../SmileboxInstaller.exe  (5cbac587266d5cd8a1b882e87f54a13c)

1 / 68      (PUP)
http://www.smilebox.com/testing/installer/.../SmileboxInstaller.exe  (3f2edf219d96d39844b8d71c4dc3e7a3)

4 / 68      (PUP)
http://www.smilebox.com/testing/.../SmileboxInstaller.exe  (6b716d38c50b3e245d900fa8b35dd616)

2 / 68
http://www.smilebox.com/.../SmileboxApp.exe  (500aa58727d045ef4fbbdce6ce5a933c)

The following websites host and distribute files published by Preclick Corporation.

www.smilebox.com

The certificates below are also signed by Preclick Corporation.

5643374163EBE40EA6A50876FC19AD17  (Dec 18, 2007 to Dec 18, 2009)

33EAB046F61DBF1B4DD75F9641F692BE  (Dec 14, 2005 to Dec 14, 2007)

The following publishers (by Authenticode signature organization name) are related.

Smilebox, Inc.

Smilebox Inc.

Wal-Mart.com USA, LLC

* Note, the details and description above are based on the code signing digital signature issued to Preclick Corporation by VeriSign, Inc. on November 11, 2014 with the serial number '3358412edafba259c5e3803df41a3039'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.