home

spbiu.exe

SBWatchman

ShopperPro

The application spbiu.exe, “ShopperPro Update Service” has been detected as adware by 16 anti-malware scanners. It runs as a separate (within the context of its own process) windows Service named “ShopperPro Update”.
Publisher:
ShopperPro

Product:
SBWatchman

Description:
ShopperPro Update Service

Version:
1.0.0.9

MD5:
0ee78a1a02e92afcb98814a033ceb115

SHA-1:
5c7bb24af4a7820545a58f1ad066cb6369677b61

SHA-256:
4a72d65aa0ed15dad336fb09a61d18026b6ee9ddd32f497013ede584fa1b2fed

Scanner detections:
16 / 68

Status:
Adware

Analysis date:
4/23/2024 6:41:31 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.ShopperPro.A
855

AegisLab AV Signature
Troj.W32.Gen
2.1.4+

avast!
Win32:Rootkit-gen [Rtk]
2014.9-141003

Baidu Antivirus
Adware.Win32.ShopperPro
4.0.3.14102

Bitdefender
Adware.ShopperPro.A
1.0.20.1380

Emsisoft Anti-Malware
Adware.ShopperPro
8.14.10.03.11

ESET NOD32
Win32/SBWatchman
8.10495

F-Secure
Adware.ShopperPro.A
11.2014-03-10_6

G Data
Adware.ShopperPro
14.10.24

IKARUS anti.virus
PUA.SBWatchman
t3scan.1.7.8.0

K7 AntiVirus
Trojan
13.183.13550

McAfee
Artemis!0EE78A1A02E9
5600.6990

MicroWorld eScan
Adware.ShopperPro.A
15.0.0.828

NANO AntiVirus
Riskware.Win32.SBWatchman.dfulsy
0.28.2.62440

nProtect
Adware.ShopperPro.A
14.10.02.01

Reason Heuristics
Adware.Service.ShopperPro.F
14.10.7.21

File size:
1.7 MB (1,812,992 bytes)

Product version:
1.0.0.9

Copyright:
Copyright (C) 2014

Original file name:
spbiu.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\common files\shopperpro\spbiu.exe

File PE Metadata
Compilation timestamp:
6/26/2014 2:11:50 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
12.0

CTPH (ssdeep):
49152:d/3K+cCXqKtbInhs+KpVOTYb2D436awbVzHSq3PI8Tj4aBatewyvR:sKVDg4KfbVzHSq3PIAa

Entry address:
0x127A6F

Entry point:
E8, F2, FC, 00, 00, E9, 7B, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 56, 33, C0, 50, 50, 50, 50, 50, 50, 50, 50, 8B, 55, 0C, 8D, 49, 00, 8A, 02, 0A, C0, 74, 09, 83, C2, 01, 0F, AB, 04, 24, EB, F1, 8B, 75, 08, 8B, FF, 8A, 06, 0A, C0, 74, 0C, 83, C6, 01, 0F, A3, 04, 24, 73, F1, 8D, 46, FF, 83, C4, 20, 5E, C9, C3, 55, 8B, EC, 56, 8B, 75, 08, 83, FE, E0, 77, 6F, 53, 57, A1, A0, B1, 5A, 00, 85, C0, 75, 1D, E8, 23, FA, 00, 00, 6A, 1E, E8, 79, FA, 00, 00, 68, FF, 00, 00, 00, E8, F5, 96, 00, 00, A1, A0...
 
[+]

Code size:
1.3 MB (1,414,656 bytes)

Service
Display name:
ShopperPro Update

Service name:
SPBIUpd

Type:
Win32OwnProcess


Remove spbiu.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.