This program bundles adware during the download and install process using the InstaleRex pay-per-install app monetizer. The application Mac OS X 10.8 Mountain Lion ISO Untouched.exe, “Installer for Appit” by Roman Malinenko has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Tarma (InstalleRex) standalone installer. The file has been seen being downloaded from lp.ezdownloadpro.info. While running, it connects to the Internet address r1.stylezip.info on port 80 using the HTTP protocol.
GreatSoft (signed by Roman Malinenko)
Installer for Appit
1 / 68
Uses Web-Pick's 'File Product', an Installer which wraps various products and downloads and installs it silently through the process, hosted on TusFiles.
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.
8/8/2014 4:04:52 AM UTC (one month ago)
313.7 KB (321,224 bytes)
Copyright © 2014 GreatSoft
Original file name:
Executable application (Win32 EXE)
Tarma (InstalleRex) standalone
C:\users\user\downloads\mac os x 10.8 mountain lion iso untouched.exe
COMODO CA Limited
8/19/2013 3:00:00 AM
8/20/2014 2:59:59 AM
CN=Roman Malinenko, O=Roman Malinenko, STREET=Esplanadna 17, L=Kyev, S=Kyev, PostalCode=01001, C=UA
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
3/12/2013 10:51:45 AM
7.5 KB (7,680 bytes)
The file Mac OS X 10.8 Mountain Lion ISO Untouched.exe has been seen being distributed by the following URL.
The executing file has been seen to make the following network communications in live environments.
Detection Incidence by Country