What is PureLeads?

PureLeads is software application developed by Sendori, LLC. It is most commonly found on computers running Windows 7 with nearly 57.85% of installations running this operating system. PureLeads's installer is typically 10.00 MB in size and installs around 28 files. The most common release is 2.0.17 with 95.27% of all installations currently using this version.

PureLeads is most popular in the United States with 97.90% of installations residing in this country.

About PureLeads?

This software leverages affiliate ad providers to inject a variety of ad types, such as banners, inline text links, and popups, in order to display advertisements.

Multiple virus scanners have detected malware in PureLeads.

PureLeads.Service.exe (MD5: fc5dd880692d97f4377f2cc21ce409a3) has been flagged by 19 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Adware.Sendori.E
Agnitum Outpost	5.5.1.3	PUA.Sendori!
Avira AntiVir	7.11.160.190	Adware/Sendori.E.93
Antiy-AVL	1.0.0.1	Trojan/Win32.TSGeneric
avast!	8.0.1489.320	Win32:Adware-gen [Adw]
Bitdefender	7.2	Adware.Sendori.E
Comodo Security	18852	ApplicUnwnt
Emsisoft Anti-Malware	3.0.0.600	Adware.Sendori.E (B)
ESET-NOD32	10096	a variant of Win32/AdWare.Sendori.A
Fortinet FortiGate	5.1.152.0	Riskware/Sendori
F-Secure	11.0.19100.45	Adware.Sendori.E
G Data	24	Adware.Sendori.E
McAfee	6.0.4.564	Artemis!FC5DD880692D
McAfee-GW-Edition	2014.2	Artemis!PUP
MicroWorld-eScan	12.0.250.0	Adware.Sendori.E
nProtect	2014-07-14.01	Adware.Sendori.E
Sophos	4.98.0	Generic PUA FH
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V0630
VIPRE Antivirus	31284	Sendori (fs) (not malicious)

PureLeadsTray.exe (MD5: 576989ddaa5fd419dd7b5ef5070ee348) has been flagged by 18 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Adware.Sendori.E
Agnitum Outpost	5.5.1.3	PUA.Sendori!
Avira AntiVir	7.11.160.190	Adware/Sendori.E.87
Antiy-AVL	1.0.0.1	Trojan/Win32.TSGeneric
avast!	8.0.1489.320	Win32:Adware-gen [Adw]
Bitdefender	7.2	Adware.Sendori.E
Comodo Security	18852	ApplicUnwnt
Emsisoft Anti-Malware	3.0.0.600	Adware.Sendori.E (B)
ESET-NOD32	10096	a variant of Win32/AdWare.Sendori.A
Fortinet FortiGate	5.1.152.0	Riskware/Sendori
F-Secure	11.0.19100.45	Adware.Sendori.E
G Data	24	Adware.Sendori.E
McAfee	6.0.4.564	Artemis!576989DDAA5F
McAfee-GW-Edition	2014.2	Artemis!PUP
MicroWorld-eScan	12.0.250.0	Adware.Sendori.E
nProtect	2014-07-14.01	Adware.Sendori.E
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V0630
VIPRE Antivirus	31284	Trojan.Win32.Generic!BT

PureLeadsSvc.exe (MD5: 965d30a20d734b56339d02e2fbedabbc) has been flagged by 19 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	912	Adware.Sendori.E
Agnitum Outpost	7.1.1	PUA.Sendori
Avira AntiVir	7.11.160.190	Adware/Sendori.E.90
Antiy-AVL	1.0.0.1	Trojan/Win32.TSGeneric
avast!	2014.9-140807	Win32:Adware-gen [Adw]
Bitdefender	1.0.20.1095	Adware.Sendori.E
Comodo Security	18852	ApplicUnwnt
Emsisoft Anti-Malware	8.14.08.07.05	Adware.Sendori
ESET-NOD32	8.10096	a variant of Win32/AdWare.Sendori.A
Fortinet FortiGate	8/7/2014	Riskware/Sendori
F-Secure	11.2014-07-08_5	Adware.Sendori.E
G Data	14.8.24	Adware.Sendori
McAfee	5600.7046	Artemis!965D30A20D73
McAfee-GW-Edition	7.7046	BehavesLike.Win32.PUP.mh
MicroWorld-eScan	15.0.0.657	Adware.Sendori.E
nProtect	14.07.14.01	Adware.Sendori.E
Sophos	4.98	Generic PUA KB
TrendMicro-HouseCall	7.2.219	Suspicious_GEN.F47V0630
VIPRE Antivirus	31284	Trojan.Win32.Generic!BT

Software Behaviors

Services:

PureLeadsSvc.exe runs as a service named 'PlsvcV1' (PlsvcV1) "Sets and maintains PureLeads protection on this computer.".
PureLeads.Service.exe runs as a service named 'PlsvcV2' (PlsvcV2) "Service PureLeads.".

Software Details

URL:

https://pureleads.com

Support:

https://support.pureleads.com/home

Installation path:

C:\Program Files\PureLeads

Uninstaller:

C:\Program Files\PureLeads\Uninstall.exe

Size:

10.00 MB

Language:

English

PureLeads Executable Details

Primary executable:

PureLeads.Service.exe

Name:

PureLeads

Path:

C:\Program Files\PureLeads\PureLeads.Service.exe

MD5:

fc5dd880692d97f4377f2cc21ce409a3

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

libnspr4.dll

b564b3411abf0de22b7f78fed2419976

DLL

libplc4.dll

ed169d3aaca62289c114059592e622f0

DLL

libplds4.dll

6aa03ef0d1b84a5487b380b7e7b25bd6

DLL

Interop.PCProxyLib.dll

fd66b4111327a6ba81973fc6c2abdf4c

DLL

DynLib.dll

66549b7033d69cd093dec94c85229ee2

DLL

plsapp64.dll

33948ff6d642994c5831809f3234f30a

DLL

plsapp.dll

b6921fae14c62f53505367d983b346fc

EXE

PureLeads.Service.exe

Malware

fc5dd880692d97f4377f2cc21ce409a3

DLL

PureLeads.Library.dll

61e78620e7076adece4fe87040a752ff

EXE

pureleads-win-upgrader.exe

f6d1d02ab4189acccdab1d37274792df