Roadpass Trading Ltd.

Publisher Information

Roadpass Trading Ltd. is a brand of publishers/developers run by WebPick Internet Holdings Ltd. located in Ramat Ha'Chayal Tel Aviv, Israel. The company is a primary distributor of unwanted software. Roadpass Trading Ltd. is a developer of WebPick Internet Holdings and publishes a number of adware web browser plugins designed to monitor web browser behavior and inject advertisements (banner, popups, text-links, etc.) in the browser by using the WebPick InstalleRex monetization delivery platform. These programs from Roadpass Trading Ltd. are typiclaly installed on a variety of names and misspellings and are very difficult to remove. According to WebPick, they use developers to sign their adware in order to "throw off competitors".
Remove Roadpass Trading Ltd. Malware - Powered by Reason Core Security
Authority:
COMODO CA Limited

Valid from:
4/2/2012 7:00:00 AM

Valid to:
4/3/2013 6:59:59 AM

Subject:
CN=Roadpass Trading Ltd., O=Roadpass Trading Ltd., STREET=Grigori Afxentiou 8, STREET="EL.PA. Livadioti Building,", STREET="3rd floor, Office 306,", L=Larnaca, S=Cyprus, PostalCode=6023, C=CY

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
7cea38597be5145d4b71ff0ecd5a4f37

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.WebPick.RoadpassTrading.Installer (M), PUP.WebPick.Installer
100.00%

Bkav FE
W32.FamVT.AntiFWK.Trojan, HW32.CDB
76.00%

CMC Antivirus
Adware.Win32.InstallMate!O
76.00%

avast!
Win32:InstallMate-DK [PUP]
76.00%

Agnitum Outpost
Riskware.InstallMate, PUA.InstalleRex
76.00%

Sophos
PUA 'InstallRex'
76.00%

Comodo Security
Application.Win32.Bundledz.C
76.00%

VIPRE Antivirus
Threat.14871, Installerex/WebPick
76.00%

Kingsoft AntiVirus
Win32.Troj.Generic.a.(kcloud)
76.00%

ESET NOD32
Win32/InstallMate potentially unwanted application, Win32/InstalleRex.C potentially unwanted application
76.00%

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (6811658b4698c7eeae0823a987d21678)

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (b7b3be6eac57a4fc139b594aa38257e9)

25 / 68    (Adware)
downloadsetup.exe (Setup by Premium)  (98148a38b2296c5b6257460638c7d4e5)

25 / 68    (Adware)
downloadsetup.exe (Setup by Premium)  (c168c64f666a9e01a1dd0cda4c3a0f94)

25 / 68    (Adware)
downloadsetup.exe (Setup by Premium)  (7d365f50d4b8be52f30dbd65347491cf)

25 / 68    (Adware)
downloadsetup.exe (Setup by Premium)  (08e94d80c696d53d3ca5b5ca2617a348)

25 / 68    (Adware)
downloadsetup.exe (Setup by Premium)  (79371d34716bae1e1d36385960b8cdab)

25 / 68    (Adware)
downloadsetup.exe (Setup by Premium)  (a1eaaccd5e11e7f8c46ab737ef285956)

1 / 68      (Adware)
mengembalikan file terhiden.exe (Setup by Premium)  (82f0698d2896bee2e85bee6d93199464)

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (856ea2686896bcd9eb7ac54efb4c1efe)

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (71be5d31243976e4c51a54ce4ded15a8)

33 / 68    (Adware)
codec-v.exe (Setup by Premium)  (857ca2808a7af7b8e97223fbadb1c493)

25 / 68    (Adware)
downloadsetup.exe (Setup by Premium)  (0eda875a553714a599ce5c2e93541885)

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (7fb71d22c597d668a3975d4ed49af5df)

20 / 68    (Adware)
zoomplayer.exe (Setup by Premium)  (221e8176871da4faf8e67d3f5ab794a9)

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (89cd4bd19caa1bd82a8033052189af0d)

1 / 68      (Adware)
fastdownload.exe (Setup by Premium)  (479fafded57628f599aade91576633e4)

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (35012da9ece310c392d094a8658586f9)

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (5463d40001224fc37499e1d6474d3ce9)

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (12a1b70804f88850e19a5238a1511a4d)

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (58e8eaee9bc7593eb2bba78b29f6e151)

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (6c35365a42765236ccf579c881222afe)

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (c8d499ded66ffc110bb9e238451673fe)

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (240189f733f96537ba589b98773cff36)

1 / 68      (Adware)
zoomplayer_3.exe (Setup by Premium)  (20cd549ff4af481522cdfc10ec53e4e5)

1 / 68      (Adware)
zoomplayer_2.exe (Setup by Premium)  (479386caddd66eb4cd4f12a6ad603eef)

20 / 68    (Adware)
zoomplayer.exe (Setup by Premium)  (d4e82f45a87c5927c28f5afca5e9447d)

22 / 68    (Adware)
fastdownload.exe (Setup by Premium)  (f13ebc4caaeac2f93d27af36c28bc3fa)

1 / 68      (Adware)

33 / 68    (Adware)
codec-v.exe (Setup by Premium)  (c4343522ae8458fc9b21be8adb0f5d41)

 
Latest 30 of 303 files

Downloads URLs for files signed by Roadpass Trading Ltd..

25 / 68    (Adware)
http://storagenl.info/.../  (downloadsetup.exe)

22 / 68    (Adware)
http://storagenl.info/.../  (fastdownload.exe)

The following publishers (by Authenticode signature organization name) are related.

Remove Roadpass Trading Ltd. Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Roadpass Trading Ltd. by COMODO CA Limited on April 02, 2012 with the serial number '7cea38597be5145d4b71ff0ecd5a4f37'.