PsdrunnEr

PDS Runner is a web browser extension developed by JustPlug.It and is distributed through the WebPick InstalleRex download and install manager. This cross browser extension is often bundled with adware offers and includes various components such as a Windows service, an auto-starting component, and a browser toolbar/plugin. Its main function is to inject advertisements into the browser in the form of banner ads, hyper-text links, and pop-ups. There are also versions of the extension that may hijack existing advertisements on websites and inject affiliate codes into links as coupon offers. During installation, the program installs itself in a folder with a random name in either Program Files or ProgramData, with each included file given a shared random generated name. The Windows Service runs with full administrator rights under the Services control app and connects to remote servers for updates, as well as creates a server that listens for TCP network requests locally. The displayed advertisements may include malvertising ads for 'required' updates of common programs, as well as unwanted pop-up advertisements. Additionally, if downloaded, these programs install bundled adware utilities and additional browser extensions. Some versions of the program may include a setup file signed by WEB PICK - INTERNET HOLDINGS LTD, the partner installer/distributor.