» WorldSetup
Digital Signature
Analysis
Files (19,792)
Downloads (3)
Domains (1)
Related (25)

WorldSetup

Publisher Information

WorldSetup is a software publisher located in Tel-Aviv, Israel*. The company is a primary distributor of unwanted software. The company distributes various free software such as file extractors that bundle a number of ad-supported toolbars including the Funmoods Toolbar that will change the user's home page and default search in IE, Firefox and Chrome. "This product is totally free and offers the user additional bundle products that may include advertisements." The company uses the installCore download and installer manager.

Authority:

COMODO CA Limited

Valid from:

1/3/2014 1:00:00 AM

Valid to:

1/4/2015 12:59:59 AM

Subject:

CN=WorldSetup, O=WorldSetup, STREET=Lilienblum 28 St., L=Tel-Aviv, S=Tel-Aviv, PostalCode=6513307, C=IL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

6eef11096f7b5cdc42244636f32f2208

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.installCore (M)

100.00%

1 / 68 (Adware)

icreinstall_convertav download manager.exe (158e59f88d72093494dd634bef808b8c)

1 / 68 (Adware)

icreinstall_crysis-2.exe (de706cdd9fadfedad8da5fb3694f2c4a)

1 / 68 (Adware)

icreinstall_combofix.exe (6b28fbb0b64558e405bc52c4a101cc9f)

1 / 68 (Adware)

flashplayer.exe (d08f7f8232a9d9df3541d5d0c53e5c0e)

1 / 68 (Adware)

installer_vlc_arabian.exe (86e30faa510ad447229a30b3fb812df1)

1 / 68 (Adware)

flvplayersetup.exe (f223746004d13f58364414c0de18f982)

1 / 68 (Adware)

flashplayer.exe (96787d2a7fd10147f92c505c1b3d6bc0)

1 / 68 (Adware)

flashplayer.exe (6432cd33c42a8a1e25f6eba5e396438c)

1 / 68 (Adware)

flashplayer.exe (61314eb527d77936db81d4d4f6a13204)

1 / 68 (Adware)

eguasoft_basketball_scoreboard_2.0.0.2 - chip downloader.exe (7f0e212966d372678323204eea89cbb4)

1 / 68 (Adware)

flvplayersetup.exe (b0038c8dbf192aa23d9b8b975efe51a0)

1 / 68 (Adware)

flvplayersetup.exe (f567a08415e8a01fdd671474e0f2248f)

1 / 68 (Adware)

flvplayersetup.exe (7f03cd7c09cc10ca7a466c431a3cb979)

1 / 68 (Adware)

minecraft-9.exe (5fa5b66fa11efa413f2432f7939e7ff1)

1 / 68 (Adware)

flashplayer.exe (cf874a90e2940ba080d6dc2291bc2b41)

1 / 68 (Adware)

isorecorderv2rc1.msi - chip downloader.exe (ee70fdae3eadd44d9dba1d0b7a2a8aa0)

1 / 68 (Adware)

googlechrome.exe (b5feb3994456e3703b49c807e5e2ad23)

1 / 68 (Adware)

googlechrome.exe (b6d7d9186b2b1146157946978b6ef4d0)

1 / 68 (Adware)

cr_downloader_para_dragonball-z---budokai-tenkaichi-2.exe (c9a5ffa623b534943f6e0712f9a9e569)

1 / 68 (Adware)

flashplayer.exe (e24b107155fb905a8958647463bc8dd9)

1 / 68 (Adware)

flashplayer.exe (698b3256c0f5b8df9a2367e907fce2a9)

1 / 68 (Adware)

flvplayersetup.exe (3b4debc8243897fdda543b5f19806d37)

1 / 68 (Adware)

flashplayer.exe (dc51ce1456889ca527cfa7c663bbbaca)

1 / 68 (Adware)

icreinstall_skypesetupfull.exe (c5ebd2a6e6cb99273ae5a0b97874e564)

1 / 68 (Adware)

icreinstall_skypesetupfull.exe (580b0f4d234857fca9c718e83d770df4)

1 / 68 (Adware)

installer_java_spanish.exe (eb44d5ac215ec167c4ea7ef4444e03fd)

1 / 68 (Adware)

installer_itunes_french.exe (b482bf50359213e31999669cdec74ee2)

1 / 68 (Adware)

installer_itunes_french.exe (aa3487f34f85ce503eaaf29389fc3bc0)

1 / 68 (Adware)

installer_firefox_french.exe (104cf26e58b4f06034c95077c152c00d)

1 / 68 (Adware)

installer_avast_french.exe (91d71f259a585116757d681061c7c64d)

Latest 30 of 19,792 files

Downloads URLs for files signed by WorldSetup.

1 / 68 (Adware)

http://download-is.chip.eu/.../index.php?cid=8536551 (eguasoft_basketball_scoreboard_2.0.0.2 - chip downloader.exe)

1 / 68 (Adware)

http://iron.zbane.com/MAIN/.../flvplayer.php?cc=BR&url=http://www.zbane.com/MAIN/.../flashplayer.exe&name=flashplayer&m=__sitename__&ymid=-_-ZTA4NF8xMDRfMTY5N18xNzE4X0JSXzE4Ni4yMTAuMzkuNjlfMTk0XzU3NjNfQURT-_-LqOPtmbfswtzywUoyFammaF8bGfa_F8avbac-VF_JEaaz7gMcOMmKMt9J0PggOyGmtiOcM6rVPGunaPnAdqJbaAkAIMAAihAaQdAaqAaIHAURRqf_IvE08we0OCQGq-7mn6mc9z7DcEKWeZIQv40S1O1qYmK13UZSg1cgmb13P4wOlNXCDFr-uiIAGwjeu-fn6Rs4EqfyqO1nGivtiaKxVRjIKmk4BjNBDCrvAnRqqkMgBKcbaadjyI1mC7bx2KtUuNben4eKTucncGcvT4S9ex25WDyNtdQmC66b0S3lMEJTHssts3n2AfcxjnIPjxsCYXl0qqYvfdibJKlVeTCIDBKimskIWJ-ilWWAANbCRmLHjq4-KqMcNw7yv9J_p3ffjfoqc6G95WG& (cf874a90e2940ba080d6dc2291bc2b41)

1 / 68 (Adware)

http://codepackjav.descargar.es/down.php?p=ADCASH&trckid=427127561391979562 (installer_java_spanish.exe)

Domains

Top-level domains owned by WorldSetup.

theappcenter.com

The following publishers (by Authenticode signature organization name) are related.

DealPly Technologies Ltd

MySearchDial

IronPremium

ClickMeIn Limited

SuperCool Applications

Astro Delivery (Fried Cookie Ltd.)

IF Setup (Fried Cookie Ltd.)

* Note, the details and description above are based on the code signing digital signature issued to WorldSetup by COMODO CA Limited on January 03, 2014 with the serial number '6eef11096f7b5cdc42244636f32f2208'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.