Home / malware

PDF

PUA:Win32/ClickMeIn

First posted on 02 July 2016.
Source: Microsoft

Aliases :

There are no other names known for PUA:Win32/ClickMeIn.

Explanation :

Installation

We have seen this application use the following file names:

• Setup.exe
• Setup (1).exe
• Setup (2).exe
• Setup (3).exe
• VuuPCBaseSetup.exe
• Setup (4).exe
• Setup (5).exe
• Setup (6).exe
• Setup (7).exe

It can be digitally signed by the following vendors:

• ClickMeIn Limited
• ClickMeIn Ltd.
• AnySend
• Any Send Pro (ClickMeIn Ltd)
• AnyProtect

We have seen this application using product names such as:

• VuuPC
• setup
• Online Backup!
• VuuPC Updater
• VuuPC License

This application communicates with domains such as:

• config.vuupc.com
• secure.vuupc.com
• a.dummy
• download.anysend.com
• 98.219.154.208

For example:

• config.VuuPC.com/LatestVersion.dat
• secure.vuupc.com/engine/dmp_announce.php?
• secure.vuupc.com/engine/announce_startup_dmp.php?

This description was published using automated analysis.

Last update 02 July 2016

 

TOP