This is the InstallX/InstallIQ download manager and installer that will bundle offers during setup for additional PUPs and other unwanted software. The application candyinstaller.exe by SecureInstall has been detected as adware by 15 anti-malware scanners. The program is a setup application that uses the InstallIQ Installation Manager installer. The file has been seen being downloaded from install.softdl96.com and multiple other hosts.
SafeInstall, LLC (signed by SecureInstall, LLC)
15 / 68
Uses the InstallIQ (by InstallX) software bundler that may include toolbars and other browser extensions offers.
This 'download manager' is also considered bundleware, a utility designed to download software (possibly legitimate or opensource) and bundle it with a number of optional offers including ad-supported utilities, toolbars, shopping comparison tools and browser extensions.
1/19/2017 10:09:29 AM UTC (today)
K7 Gateway Antivirus
DomainIQ pay-per install
Trend Micro House Call
1.6 MB (1,649,768 bytes)
Copyright (C) 2014
Original file name:
Executable application (Win32 EXE)
InstallIQ Installation Manager
English (United States)
11/18/2013 4:00:00 PM
11/24/2014 4:00:00 AM
CN="SecureInstall, LLC", O="SecureInstall, LLC", L=Sartell, S=Minnesota, C=US
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US
1/30/2014 7:28:33 AM
949 KB (971,776 bytes)
The file candyinstaller.exe has been seen being distributed by the following 3 URLs.