What is Price-Horse?

Price-Horse is software application developed by Montiera Technologies LTD. It is most commonly found on computers running Windows 10 with nearly 50.00% of installations running this operating system. Price-Horse's installer is typically 0.92 MB in size and installs around 61 files.

Price-Horse is most popular in the United States with 45.69% of installations residing in this country.

Price-Horse adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About Price-Horse?

Price Horse is a web browser extension that displays advertisements to the user while browsing the internet. These ads can appear as traditional banners or context-hyper links and are not limited to specific websites or affiliates. It should be noted that the ads are not endorsed by the websites on which they appear. The software regularly connects to remote servers to update its ad content and also tracks the user's browsing activity, including visited domains and URLs, as well as clicked links and advertisements. Additionally, Price Horse is often included as part of bundled offers with 3rd party download managers, which may include other potentially unwanted programs. Please note that using Price Horse may result in an increase in unwanted advertisements and tracking of browsing activity.

Multiple virus scanners have detected malware in Price-Horse.

pricehorse.exe (MD5: c7bfb42eeff9cb9cca568f2c6001b7d0) has been flagged by 38 scanners:

Scanner Software	Version	Result
Antiy-AVL	1.0.0.1	RiskWare[Downloader:not-a-virus]/Win32.Agent
AVware	1.5.0.16	Montiera (fs)
Kaspersky	14.0.0.3445	not-a-virus:Downloader.Win32.Agent
Malwarebytes	v2014.08.06.10	PUP.Optional.PayByAds.A
McAfee	5600.7046	Artemis!C7BFB42EEFF9
McAfee-GW-Edition	7.7046	Artemis!C7BFB42EEFF9
Panda Antivirus	14.08.06.10	Trj/Chgt.C
TrendMicro-HouseCall	7.2.218	Suspicious_GEN.F47V0802
VIPRE Antivirus	31932	Montiera (fs)
Lavasoft Ad-Aware	12.0.163.0	Adware.PayByAds.A
Agnitum Outpost	5.5.1.3	PUA.Buen!
AhnLab-V3	2015.04.10.00	Adware/Win32.Generic
ALYac	1.0.1.4	Adware.PayByAds.A
AVG	15.0.0.4328	Paybyads.893
Avira	3.6.1.96	ADWARE/buen.532360
Baidu-International	3.5.1.41473	PUA.Win32.Montiera.R
Bitdefender	7.2	Adware.PayByAds.A
Bkav FE	1.3.0.6379	W32.HfsAdware.DFDF
CAT-QuickHeal	14.00	AdWare.Buen.r5 (Not a Virus)
Comodo Security	21703	ApplicUnwnt
Cyren	5.4.16.7	W32/Application.SKYB-3345
Dr.Web	7.0.12.3050	Adware.Toolbar.372
Emsisoft Anti-Malware	3.0.0.600	Adware.PayByAds.A (B)
ESET-NOD32	11449	a variant of Win32/Toolbar.Montiera.R potentially unwanted
Fortinet FortiGate	5.0.999.0	Riskware/Montiera
F-Secure	11.0.19100.45	Adware.PayByAds.A
G Data	25	Adware.PayByAds.A
IKARUS anti.virus	T3.1.8.9.0	not-a-virus:Downloader.Montiera
K7 AntiVirus	9.202.15541	Trojan ( 004afd6d1 )
K7GW	9.202.15541	Trojan ( 004afd6d1 )
MicroWorld-eScan	12.0.250.0	Adware.PayByAds.A
nProtect	2015-04-09.02	Adware.PayByAds.A
Qihoo-360	1.0.0.1015	HEUR/QVM10.1.Malware.Gen
Sophos	4.98.0	PayByAds
Symantec	20141.2.0.56	Trojan.Gen.2
Trend Micro	9.740.0.1012	TROJ_GEN.F0C2C00LS14
ViRobot	2014.3.20.0	Adware.PayByAds.532360[h]
Zillya	2.0.0.2132	Adware.Buen.Win32.2

Software Behaviors

Scheduled tasks:

pricehorse.exe is scheduled as a task named '$crrUnisntlDsply$' (Next runs on 9/29/2015 at 8:55 PM).
playsetup.exe is scheduled as a task named '$crrUnisntlDsply$ Udpater' (Next runs on 9/29/2015 at 8:55 PM).

Startup Entries

Registry entries:

pricehorse.exe is loaded in the current user (HKCU) registry as an auto-starting executable named '$crrUnisntlDsply$' and executes as C:\users\user\appdata\Local\pricehorse\pricehorse\1.3.13.12\pricehorse.exe.

Software Details

URL:

–

Support:

–

Installation path:

C:\users\user\appdata\local\pricehorse\pricehorse\1.3.10.2

Uninstaller:

"C:\users\user\appdata\Local\pricehorse\pricehorse\1.3.10.2\pricehorse.exe" /uninstl

Size:

0.92 MB

Language:

English

Price-Horse Executable Details

Primary executable:

pricehorse.exe

Name:

Price-Horse

Path:

C:\users\user\appdata\local\pricehorse\pricehorse\1.3.10.2\pricehorse.exe

MD5:

c7bfb42eeff9cb9cca568f2c6001b7d0

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

hizifoXg.dll

6e461ffae7725d3446ad27c8a2c25c1d

DLL

hcklmAlk.dll

3f65536ddb10c924d35fb7e1cde56274

DLL

h0jdidnk.dll

37eaed4c955f917b4cd50894fca7cd81

DLL

gllm1fhc.dll

f0d6405868e8afc4bf4e62b1186b0a1b

DLL

glaioiao.dll

fab3a0019446b52d338847f0d5dd2090

DLL

gjplmikl.dll

a06121bdfe6ac4dc1641931f8e3298ac

DLL

gemBplfd.dll

f60c0d1c7b1fe220b9c73399bcac3e2e

DLL

gbd7ngah.dll

f7800cbd9667f238622d5fadaf64b2b6

DLL

foiXnafd.dll

39ee79cda2c53b57791095ea261f0a91

DLL

flkhdgdp.dll

2386f04c905c75504b11eee81f727b42