What is RAndomPriCe?

RAndomPriCe is software application developed by InstalleRex-WebPick. It is most commonly found on computers running Windows 7 with nearly 80.00% of installations running this operating system. RAndomPriCe's installer is typically 1.00 MB in size and installs around 11 files.

RAndomPriCe is most popular in the United States with 50.00% of installations residing in this country.

About RAndomPriCe?

The RandomPrice software is a browser extension designed to display additional advertisements in search engines such as Bing and Google. It can be installed on Internet Explorer, Chrome, and Firefox browsers and operates as a background process once installed. The program injects new ads into search results and web pages that use third-party advertising, replacing existing ads with its own. Additionally, it generates pop-up ads while the user engages in various online activities. RandomPrice uses the InstalleRex download manager from WebPicks Holdings for installation on the user's PC. InstalleRex is known for distributing potentially unwanted applications, including web browser toolbars and ad-supported extensions. The software is a variant of known adware and may be rebranded to disguise its origin, but it contains the same components as other adware programs focused on shopping, saving, or coupons.

Multiple virus scanners have detected malware in RAndomPriCe.

Op.exe (MD5: 908573e8c6e72adb6e4e289aec3ecf2d) has been flagged by 21 scanners:

Scanner Software	Version	Result
AhnLab-V3	2014.06.19.00	Dropper/Win32.Preloader
Avira AntiVir	7.11.155.164	TR/Symmi.26729
avast!	8.0.1489.320	Win32:Malware-gen
AVG	14.0.0.3972	Generic5.AWEM
Baidu-International	3.5.1.41473	Adware.Win32.BHO.77
ESET-NOD32	9966	a variant of Win32/AdWare.MultiPlug.Y
Fortinet FortiGate	5.1.152.0	Riskware/MultiPlug
G Data	24	Win32.Trojan.Agent.9D08CO
IKARUS anti.virus	T3.1.6.1.0	Trojan.Symmi
K7 AntiVirus	9.180.12456	Adware ( 0049b4c51 )
K7GW	9.180.12456	Adware ( 0049b4c51 )
McAfee	6.0.4.564	Artemis!908573E8C6E7
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
Norman	7.04.04	Suspicious_Gen5.ARFZD
Qihoo-360	1.0.0.1015	Win32/Trojan.4a7
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V0613
Comodo Security	18367	ApplicUnwnt.Win32.InstallRex.ALC
Kaspersky	12.0.0.1225	not-a-virus:AdWare.Win32.MultiPlug.bfk
Malwarebytes	1.75.0001	PUP.Optional.MultiPlug.A
Sophos	4.98.0	Generic PUA GP
VIPRE Antivirus	29736	Trojan.Win32.Generic!BT

Op.dll (MD5: b3da5159c1405243d7b423b1b1813381) has been flagged by 4 scanners:

Scanner Software	Version	Result
AVG	14.0.0.3964	Generic5.AWEL
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.BY
ESET-NOD32	9958	a variant of Win32/AdWare.MultiPlug.Y
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V0613

QHF.exe (MD5: 83c728a3d4b56127985b096478a943f8) has been flagged by 28 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Application.Generic.623657
Agnitum Outpost	5.5.1.3	PUA.MultiPlug!
AhnLab-V3	2014.05.30.00	Dropper/Win32.Preloader
Avira AntiVir	7.11.152.10	SPR/Tool.460800.1
AVG	14.0.0.3955	Generic_r.JW
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.81
Bitdefender	7.2	Application.Generic.623657
Bkav FE	1.3.0.4959	W32.PatgeasM.Trojan
Comodo Security	18367	Application.Win32.MultiPlug.SJ
Fortinet FortiGate	4	Riskware/MultiPlug
F-Secure	11.0.19100.45	Application.Generic.623657
G Data	24	Application.Generic.623657
K7 AntiVirus	9.178.12244	Adware ( 004976341 )
K7GW	9.178.12244	Adware ( 004976341 )
Malwarebytes	1.75.0001	PUP.Optional.MultiPlug.A
McAfee	6.0.4.564	RDN/Generic.dx!dcf
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
MicroWorld-eScan	12.0.250.0	Application.Generic.623657
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.R0CBH06ES14
VIPRE Antivirus	29736	Trojan.Win32.Generic!BT
avast!	8.0.1489.320	Win32:Malware-gen
ESET-NOD32	9966	a variant of Win32/AdWare.MultiPlug.Y
IKARUS anti.virus	T3.1.6.1.0	Trojan.Symmi
Norman	7.04.04	Suspicious_Gen5.ARFZD
Qihoo-360	1.0.0.1015	Win32/Trojan.4a7
Kaspersky	12.0.0.1225	not-a-virus:AdWare.Win32.MultiPlug.bfk
Sophos	4.98.0	Generic PUA GP

lc9LtXfID.exe (MD5: 1b63b4e4fe4be0d8607d362c3d2f2677) has been flagged by 38 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	912	Gen:Variant.Adware.Graftor.146103
Agnitum Outpost	7.1.1	PUA.MultiPlug
AhnLab-V3	2014.08.05	Trojan/Win32.Preloader
Avira AntiVir	7.11.165.68	Adware/Graftor.146103
Antiy-AVL	1.0.0.1	Trojan/Win32.SGeneric
avast!	2014.9-140806	Win32:Dropper-gen [Drp]
AVG	2015.0.3390	Generic5
AVware	1.5.0.16	Trojan.Win32.Generic!BT
Baidu-International	4.0.3.1486	Adware.Win32.MultiPlug.81
Bitdefender	1.0.20.1090	Gen:Variant.Adware.Graftor.146103
Bkav FE	1.3.0.4959	W32.CanpaktiLTAAI.Adware
CAT-QuickHeal	8.14.14.00	AdWare.MultiPlug.r5 (Not a Virus)
Comodo Security	19086	ApplicUnwnt
Emsisoft Anti-Malware	8.14.08.06.09	Gen:Variant.Adware.Graftor.146103
ESET-NOD32	8.10205	a variant of Win32/AdWare.MultiPlug.AG
Fortinet FortiGate	8/6/2014	Riskware/MultiPlug
F-Secure	11.2014-06-08_4	Gen:Variant.Adware.Graftor.146103
G Data	14.8.24	Gen:Variant.Adware.Graftor.146103
IKARUS anti.virus	t3scan.1.6.1.0	PUA.Generic
K7 AntiVirus	13.182.12951	Adware
K7GW	13.182.12951	Adware ( 0049c94b1 )
Kaspersky	14.0.0.3446	not-a-virus:AdWare.Win32.MultiPlug
Kingsoft AntiVirus	331020.49267	Win32.Troj.Generic.a.(kcloud)
Malwarebytes	v2014.08.06.09	PUP.Optional.MultiPlug
McAfee	5600.7046	RDN/Generic.bfr!ho
MicroWorld-eScan	15.0.0.654	Gen:Variant.Adware.Graftor.146103
NANO AntiVirus	0.28.2.61349	Riskware.Win32.Graftor.dcodwf
Panda Antivirus	14.08.06.09	Trj/Genetic.gen
Sophos	4.98	Generic PUA IB
Symantec	8/6/2014 rev. 4	WS.Reputation
Tencent	1.0.0.1	Win32.Risk.Adware.Dzkd
Trend Micro	10.465.06	TROJ_SPNR.14GN14
TrendMicro-HouseCall	7.2.218	TROJ_SPNR.14GN14
Vba32 AntiVirus	3.12.26.3	AdWare.MultiPlug
VIPRE Antivirus	31936	Trojan.Win32.Generic!BT
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
Norman	7.04.04	Suspicious_Gen5.ARFZD
Qihoo-360	1.0.0.1015	Win32/Trojan.4a7

QHF.dll (MD5: 5337ab32d06451b51b031fad03674a73) has been flagged by 9 scanners:

Scanner Software	Version	Result
AVG	14.0.0.3955	Generic_r.KL
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.81
Comodo Security	18367	ApplicUnwnt.Win32.InstallRex.ALC
ESET-NOD32	9866	a variant of Win32/AdWare.MultiPlug.T
Kaspersky	12.0.0.1225	not-a-virus:AdWare.Win32.MultiPlug.bfk
Malwarebytes	1.75.0001	PUP.Optional.MultiPlug.A
Sophos	4.98.0	Generic PUA GP
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.R03WH07EQ14
VIPRE Antivirus	29736	Trojan.Win32.Generic!BT

Software Details

URL:

https://justplug.it

Support:

–

Installation path:

C:\ProgramData\randomprice

Uninstaller:

"C:\ProgramData\RAndomPriCe\zdikivxsd.exe" /s /n /C:"ExecuteCommands;UninstallCommands" ""

Size:

1.00 MB

Language:

English

RAndomPriCe Executable Details

Primary executable:

zdikivxsd.dll

Name:

RAndomPriCe

Path:

C:\ProgramData\randomprice\zdikivxsd.dll

MD5:

19215c6f59ce762dcbd5d58424a2ea13

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

Op.exe

Malware

908573e8c6e72adb6e4e289aec3ecf2d

DLL

zdikivxsd.x64.dll

0e740f37c2b1da711f9ccd15cb7312d3

DLL

RkUg.x64.dll

9cf6d5e62d045e26786ae1fdfda02291

DLL

RkUg.dll

77ee2b70b4f749dc03996e781154e9cb

DLL

Op.x64.dll

d6329017fb80c257b43f3125acbc9d9b

DLL

Op.dll

Malware

b3da5159c1405243d7b423b1b1813381

EXE

QHF.exe

Malware

83c728a3d4b56127985b096478a943f8

EXE

lc9LtXfID.exe

Malware

1b63b4e4fe4be0d8607d362c3d2f2677

DLL

QHF.dll

Malware

5337ab32d06451b51b031fad03674a73

EXE

RkUg.exe

18f42415e0732ab9a6b7e757061aae2b

File Type	Filename	MD5
EXE	Op.exe Malware	908573e8c6e72adb6e4e289aec3ecf2d
DLL	zdikivxsd.x64.dll	0e740f37c2b1da711f9ccd15cb7312d3
DLL	RkUg.x64.dll	9cf6d5e62d045e26786ae1fdfda02291
DLL	RkUg.dll	77ee2b70b4f749dc03996e781154e9cb
DLL	Op.x64.dll	d6329017fb80c257b43f3125acbc9d9b
DLL	Op.dll Malware	b3da5159c1405243d7b423b1b1813381
EXE	QHF.exe Malware	83c728a3d4b56127985b096478a943f8
EXE	lc9LtXfID.exe Malware	1b63b4e4fe4be0d8607d362c3d2f2677
DLL	QHF.dll Malware	5337ab32d06451b51b031fad03674a73
EXE	RkUg.exe	18f42415e0732ab9a6b7e757061aae2b

RAndomPriCe

What is RAndomPriCe?

About RAndomPriCe?

Multiple virus scanners have detected malware in RAndomPriCe.

Software Details

RAndomPriCe Executable Details