What is ShamrockSpring?

ShamrockSpring is software application developed by Pinball Corporation. It is most commonly found on computers running Windows 7 with nearly 78.57% of installations running this operating system. ShamrockSpring's installer is typically 1.00 MB in size and installs around 4 files.

ShamrockSpring is most popular in the United States with 80.65% of installations residing in this country.

ShamrockSpring adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About ShamrockSpring?

ShamrockSpring is a web browser plugin that is supported by advertisements, such as additional banners and in-text links, which users may encounter while using the plugin. It is distributed through multiple monetization platforms during installation. This extension offers a range of features designed to modify the default or custom settings of the browser, including the home page and search settings.

Multiple virus scanners have detected malware in ShamrockSpring.

shamrockspringSA.exe (MD5: e43e81eddb12e2441b1bdf89883a461c) has been flagged by 33 scanners:

Scanner Software	Version	Result
Agnitum Outpost	7.1.1	Adware.Shopper
AhnLab-V3	2013.08.19	Adware/Win32.Shopper
Avira AntiVir	7.11.97.40	Adware/Shopper.wx
Antiy-AVL	2.0.3.7	AdWare/Win32.Shopper.gen
avast!	2014.9-140825	Win32:HotBar-BZ [Adw]
AVG	2015.0.3371	Skodna.Generic_r.L
Bitdefender	1.0.20.1185	Application.Generic.404382
CAT-QuickHeal	8.14.12.00	AdWare.Hotbar (Not a Virus)
Comodo Security	16789	UnclassifiedMalware
Emsisoft Anti-Malware	8.14.08.25.01	Application.Generic.404382
ESET-NOD32	8.8701	probably a variant of Win32/Adware.180Solutions
Fortinet FortiGate	8/25/2014	Adware/Shopper
F-Prot	v6.4.7.1.166	W32/180Solutions.D.gen
F-Secure	11.2014-25-08_2	Application.Generic.404382
G Data	14.8.22	Application.Generic.404382
IKARUS anti.virus	t3scan.2.0.127	not-a-virus:AdWare.Win32.Shopper
Jiangmin	KV140825	AdWare/Shopper.cj
K7 AntiVirus	13.170.9312	Adware
K7GW	13.12.7.0.12	Riskware
Kaspersky	14.0.0.3352	not-a-virus:AdWare.Win32.Shopper
Malwarebytes	v2014.08.25.01	Adware.HotBar.SS
McAfee	5600.7027	RDN/Generic PUP.x!ba
McAfee-GW-Edition	7.7027	RDN/Generic PUP.x!ba
Microsoft Security Essentials	1.163.1557.0	Adware:Win32/ClickPotato
MicroWorld-eScan	15.0.0.711	Application.Generic.404382
NANO AntiVirus	0.26.0.53954	Trojan.Win32.180Solutions.ybwie
Panda Antivirus	14.08.25.01	Generic Malware
Sophos	4.91	Generic PUA AK
Symantec	8/25/2014 rev. 2	WS.Reputation
Trend Micro	10.465.25	TROJ_SPNR.0BGJ12
TrendMicro-HouseCall	7.2.237	TROJ_SPNR.0BGJ12
Vba32 AntiVirus	3.12.22.3	AdWare.Shopper
VIPRE Antivirus	20656	Pinball Corporation

Software Behaviors

Scheduled tasks:

shamrockspringSA.exe is scheduled as a task named 'RunAsStdUser Task' (runs on registration).

Startup Entries

Registry entries:

shamrockspringSA.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'shamrockspringSA' and executes as "C:\Documents and Settings\user\Application Data\shamrockspringSA\bin\1.0.18.0\shamrockspringSA.exe".

Software Details

URL:

https://www.shamrockspring.com

Support:

https://www.shamrockspring.com/support.html

Installation path:

C:\users\user\appdata\local\shamrockspringsa\bin\1.0.18.0

Uninstaller:

"C:\users\user\appdata\Local\shamrockspringSA\bin\1.0.18.0\ShamrockSpringUninstaller.exe" Web

Size:

1.00 MB

Language:

English

ShamrockSpring Executable Details

Primary executable:

ShamrockSpringSACB.exe

Name:

ShamrockSpring

Path:

C:\users\user\appdata\local\shamrockspringsa\bin\1.0.18.0\ShamrockSpringSACB.exe

MD5:

c6ab084842a6365611c02b7be4e1304a

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

shamrockspringSA.exe

Malware

e43e81eddb12e2441b1bdf89883a461c

EXE

ShamrockSpringUninstaller.exe

c25f50e374e6fc874023b6e79a4b1b11

DLL

shamrockspringSAHook.dll

1778cf24eb8b10823fdea0ce522b2c36

EXE