What is PureLeads?

PureLeads is software application developed by Sendori, LLC. It is most commonly found on computers running Windows 7 with nearly 57.85% of installations running this operating system. PureLeads's installer is typically 10.00 MB in size and installs around 28 files. The most common release is 2.0.17 with 95.27% of all installations currently using this version.

PureLeads is most popular in the United States with 97.90% of installations residing in this country.

About PureLeads?

This software leverages affiliate ad providers to inject a variety of ad types, such as banners, inline text links, and popups, in order to display advertisements.

Multiple virus scanners have detected malware in PureLeads.

PureLeads.Service.exe (MD5: fc5dd880692d97f4377f2cc21ce409a3) has been flagged by 19 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Adware.Sendori.E
Agnitum Outpost	5.5.1.3	PUA.Sendori!
Avira AntiVir	7.11.160.190	Adware/Sendori.E.93
Antiy-AVL	1.0.0.1	Trojan/Win32.TSGeneric
avast!	8.0.1489.320	Win32:Adware-gen [Adw]
Bitdefender	7.2	Adware.Sendori.E
Comodo Security	18852	ApplicUnwnt
Emsisoft Anti-Malware	3.0.0.600	Adware.Sendori.E (B)
ESET-NOD32	10096	a variant of Win32/AdWare.Sendori.A
Fortinet FortiGate	5.1.152.0	Riskware/Sendori
F-Secure	11.0.19100.45	Adware.Sendori.E
G Data	24	Adware.Sendori.E
McAfee	6.0.4.564	Artemis!FC5DD880692D
McAfee-GW-Edition	2014.2	Artemis!PUP
MicroWorld-eScan	12.0.250.0	Adware.Sendori.E
nProtect	2014-07-14.01	Adware.Sendori.E
Sophos	4.98.0	Generic PUA FH
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V0630
VIPRE Antivirus	31284	Sendori (fs) (not malicious)

PureLeadsTray.exe (MD5: 576989ddaa5fd419dd7b5ef5070ee348) has been flagged by 18 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Adware.Sendori.E
Agnitum Outpost	5.5.1.3	PUA.Sendori!
Avira AntiVir	7.11.160.190	Adware/Sendori.E.87
Antiy-AVL	1.0.0.1	Trojan/Win32.TSGeneric
avast!	8.0.1489.320	Win32:Adware-gen [Adw]
Bitdefender	7.2	Adware.Sendori.E
Comodo Security	18852	ApplicUnwnt
Emsisoft Anti-Malware	3.0.0.600	Adware.Sendori.E (B)
ESET-NOD32	10096	a variant of Win32/AdWare.Sendori.A
Fortinet FortiGate	5.1.152.0	Riskware/Sendori
F-Secure	11.0.19100.45	Adware.Sendori.E
G Data	24	Adware.Sendori.E
McAfee	6.0.4.564	Artemis!576989DDAA5F
McAfee-GW-Edition	2014.2	Artemis!PUP
MicroWorld-eScan	12.0.250.0	Adware.Sendori.E
nProtect	2014-07-14.01	Adware.Sendori.E
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V0630
VIPRE Antivirus	31284	Trojan.Win32.Generic!BT

PureLeadsSvc.exe (MD5: 965d30a20d734b56339d02e2fbedabbc) has been flagged by 19 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	912	Adware.Sendori.E
Agnitum Outpost	7.1.1	PUA.Sendori
Avira AntiVir	7.11.160.190	Adware/Sendori.E.90
Antiy-AVL	1.0.0.1	Trojan/Win32.TSGeneric
avast!	2014.9-140807	Win32:Adware-gen [Adw]
Bitdefender	1.0.20.1095	Adware.Sendori.E
Comodo Security	18852	ApplicUnwnt
Emsisoft Anti-Malware	8.14.08.07.05	Adware.Sendori
ESET-NOD32	8.10096	a variant of Win32/AdWare.Sendori.A
Fortinet FortiGate	8/7/2014	Riskware/Sendori
F-Secure	11.2014-07-08_5	Adware.Sendori.E
G Data	14.8.24	Adware.Sendori
McAfee	5600.7046	Artemis!965D30A20D73
McAfee-GW-Edition	7.7046	BehavesLike.Win32.PUP.mh
MicroWorld-eScan	15.0.0.657	Adware.Sendori.E
nProtect	14.07.14.01	Adware.Sendori.E
Sophos	4.98	Generic PUA KB
TrendMicro-HouseCall	7.2.219	Suspicious_GEN.F47V0630
VIPRE Antivirus	31284	Trojan.Win32.Generic!BT

Software Behaviors

Services:

PureLeadsSvc.exe runs as a service named 'PlsvcV1' (PlsvcV1) "Sets and maintains PureLeads protection on this computer.".
PureLeads.Service.exe runs as a service named 'PlsvcV2' (PlsvcV2) "Service PureLeads.".

Software Details

URL:

https://pureleads.com

Support:

https://support.pureleads.com/home

Installation path:

C:\Program Files\PureLeads

Uninstaller:

C:\Program Files\PureLeads\Uninstall.exe

Size:

10.00 MB

Language:

English

PureLeads Executable Details

Primary executable:

PureLeads.Service.exe

Name:

PureLeads

Path:

C:\Program Files\PureLeads\PureLeads.Service.exe

MD5:

fc5dd880692d97f4377f2cc21ce409a3

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

PureLeadsTray.exe

Malware

576989ddaa5fd419dd7b5ef5070ee348

EXE

PureLeadsControl.exe

8fc73242b60ab66695832d17e2acf663

EXE

PureLeadsSvc.exe

Malware

965d30a20d734b56339d02e2fbedabbc

EXE

PureLeadsUp.exe

638024906f6c8aa589d9bfead8967a6a

EXE

plsapp.exe

666bc88889cd2f60b855a1e60fa7b2b6

EXE

plsappLSP.exe

6f91e6561a49a7d15376dfcee7762a3e

EXE

plsappLSP64.exe

ba4daffb10d729c552aa689e54390385

DLL

plsappDLL.dll

423d989a7886af4f7fd773f226a22555

File Type	Filename	MD5
EXE	PureLeadsTray.exe Malware	576989ddaa5fd419dd7b5ef5070ee348
EXE	PureLeadsControl.exe	8fc73242b60ab66695832d17e2acf663
EXE	PureLeadsSvc.exe Malware	965d30a20d734b56339d02e2fbedabbc
EXE	PureLeadsUp.exe	638024906f6c8aa589d9bfead8967a6a
EXE	plsapp.exe	666bc88889cd2f60b855a1e60fa7b2b6
EXE	plsappLSP.exe	6f91e6561a49a7d15376dfcee7762a3e
EXE	plsappLSP64.exe	ba4daffb10d729c552aa689e54390385
DLL	plsappDLL.dll	423d989a7886af4f7fd773f226a22555