less2pay

less2pay

Known Toolbar

by InstalleRex-WebPick

What is less2pay?

less2pay is software application developed by InstalleRex-WebPick. It is most commonly found on computers running Windows 10 with nearly ~99% of installations running this operating system. less2pay's installer is typically 1.00 MB in size and installs around 3 files.

less2pay is most popular in the United States with 100.00% of installations residing in this country.

About less2pay?

The Less2Pay software is a web browser extension developed by JustPlug.It and distributed through the WebPick InstalleRex download and install manager. It is often included in adware offer bundles and runs with various components, including a Windows service, an auto-starting component, and a browser toolbar/plugin. The purpose of the extension is to inject advertisements in the form of banner ads, hyper-text links, and popups into the browser. It may also hijack existing advertising on websites and inject affiliate codes in links as coupon offers. During installation, the program will install itself in a folder with a random name in Program Files or ProgramData, and the included files will also have shared random generated names. The Windows Service that is installed runs with full administrator rights under the Services control app and connects to a remote server for updates. The advertisements displayed in the browser may include deceptive malvertising ads for 'required' updates of common programs, as well as unwanted pop-ups advertisements. Downloading these programs may also result in the installation of bundled adware utilities and additional browser extensions. Additionally, components of the program may modify the browser's default security levels. Some versions of the program may include a setup file signed by WEB PICK - INTERNET HOLDINGS LTD, the partner installer/distributor.

Multiple virus scanners have detected malware in less2pay.

aSFh.x64.dll (MD5: 0567ddd12805526ce48de1fc9df2a8db) has been flagged by 5 scanners:
Scanner Software Result
AhnLab-V3 Trojan/Win32.Preloader
AVG Generic_r.GX
Baidu-International Adware.Win64.MultiPlug.A
ESET-NOD32 a variant of Win64/Adware.MultiPlug.A
Malwarebytes PUP.Optional.MultiPlug.A
aSFh.dll (MD5: 957e832f7e5a3d97cdaef6354c247135) has been flagged by 11 scanners:
Scanner Software Result
AhnLab-V3 Adware/Win32.Graftor
Avira AntiVir ADWARE/Adware.Gen
AVG Generic_r.GU
Baidu-International Adware.Win32.MultiPlug.N
Comodo Security ApplicUnwnt.Win32.InstallRex.ALC
ESET-NOD32 a variant of Win32/AdWare.MultiPlug.N
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.MultiPlug.A
Qihoo-360 HEUR/Malware.QVM30.Gen
Rising Antivirus PE:Malware.Adware!6.1293
VIPRE Antivirus JustPlugIt (fs)
aSFh.exe (MD5: 065a59096c5f1a6b3450f599141f13e8) has been flagged by 26 scanners:
Scanner Software Result
AhnLab-V3 Trojan/Win32.Preloader
Antiy-AVL GrayWare[AdWare:not-a-virus]/Win32.MegaSearch
avast! Win32:Adware-gen [Adw]
AVG Generic_r
Baidu-International Adware.Win32.MegaSearch.aX
CAT-QuickHeal Adware.Megasearch.at (Not a Virus)
Comodo Security UnclassifiedMalware
ESET-NOD32 a variant of Win32/AdWare.MultiPlug.K.gen
Fortinet FortiGate Adware/Megasearch
IKARUS anti.virus Win32.AdWare
K7 AntiVirus Adware
K7GW Adware ( 00490ca81 )
Kaspersky not-a-virus:AdWare.Win32.MegaSearch
Kingsoft AntiVirus Win32.Troj.MegaSearch.at.(kcloud)
Malwarebytes PUP.Optional.MultiPlug.A
McAfee PUP-FFY!065A59096C5F
NANO AntiVirus Riskware.Win32.MegaSearch.csukmc
Panda Antivirus Trj/Genetic.gen
Qihoo-360 HEUR/Malware.QVM10.Gen
Sophos Generic PUA KI
Trend Micro TROJ_GEN.R0CBC0PBK14
TrendMicro-HouseCall TROJ_GEN.R0CBC0PBK14
Vba32 AntiVirus BScope.Trojan.Agent
VIPRE Antivirus MegaSearch Toolbar
Avira AntiVir ADWARE/Adware.Gen
Rising Antivirus PE:Malware.Adware!6.1293

Software Details

URL:
https://justplug.it
Support:
Installation path:
C:\ProgramData\less2pay
Uninstaller:
"C:\ProgramData\less2pay\aSFh.exe" /s /n /C:"ExecuteCommands;UninstallCommands" ""
Size:
1.00 MB
Language:
English

less2pay Executable Details

Primary executable:
aSFh.exe
Name:
less2pay
Path:
C:\ProgramData\less2pay\aSFh.exe
MD5:
065a59096c5f1a6b3450f599141f13e8
SHA-1:
SHA-256:
Files installed by less2pay
File Type Filename MD5
DLL
0567ddd12805526ce48de1fc9df2a8db
DLL
aSFh.dll
Malware
957e832f7e5a3d97cdaef6354c247135
EXE
aSFh.exe
Adware
065a59096c5f1a6b3450f599141f13e8