Air Software

Publisher Information

Air Software is a software publisher located in Victoria, British Columbia in Canada*. The company is a primary distributor of unwanted software. Air Software distributes a download mnanager and installer as well as wraps open source and legitimate software with advertising offers that include adware and toolbars. The company owns dozens of 'download sites' that bundle such unwanted software (Conduit, Ask, Babylon, etc.) with its Air Installer. Thre are 4 additional code signing certificates issued to this publisher.
Remove Air Software Malware - Powered by Reason Core Security
Authority:
VeriSign, Inc.

Valid from:
1/24/2013 4:00:00 PM

Valid to:
3/26/2015 4:59:59 PM

Subject:
CN=Air Software, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Air Software, L=Victoria, S=British Columbia, C=CA

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3ac786e09219df82da830e461d4fc39f

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Air Software.AirSoftware.Bundler (M)
100.00%

Malwarebytes
PUP.Optional.AirAdInstaller, PUP.Optional.AirInstaller, PUP.Optional.Bundle
68.00%

K7 Gateway Antivirus
Unwanted-Program , Adware
68.00%

avast!
Win32:Installer-L [PUP], Adware-gen [Adw], Win32:Adware-gen [Adw], PUP-gen [PUP], Win32:Adware-CAH [PUP], Win32:Malware-gen
68.00%

Comodo Security
Application.Win32.AirAdInstaller.A, Application.Win32.Agent.AJ, Application.Win32.AirAdInstaller.B
68.00%

Dr.Web
Adware.Downware.2035, Adware.Downware.1410, Trojan.SMSSend.4187, Adware.Downware.1363, Trojan.SMSSend.4653, Trojan.SMSSend.4524
68.00%

VIPRE Antivirus
Iminent, AirInstaller, Threat.4782985, Threat.4150696, Threat.4848734
68.00%

Sophos
AirInstaller, PUA 'AirInstaller'
68.00%

Rising Antivirus
PE:PUF.Airinstall!1.9C4C
68.00%

Qihoo 360 Security
HEUR/Malware.QVM01.Gen, Malware.QVM18.Gen
68.00%

29 / 68    (Adware)
setup.exe (HD Player by AirInstaller)  (6287c4ee2c2600e83b9029d9a5a9833d)

36 / 68    (Adware)
browser_update.exe (Google Chrome by AirInstaller)  (58acd8caf1cf25bade0ea97e4485012c)

1 / 68      (Adware)
browser_update.exe (Google Chrome by AirInstaller)  (39b78f2a3f3e029cfc64b28df689f604)

24 / 68    (Adware)
setup.exe (Software Updater by AirInstaller)  (978fa02e8b4002d7ebedbb4df4aa3b43)

29 / 68    (Adware)
setup.exe (HD Player by AirInstaller)  (dc73d103f214854b6d27a7bbb63f45c9)

32 / 68    (Adware)
instalação.exe (HD Player by AirInstaller)  (9300324e94b10a1a98a2cfdb971cada1)

1 / 68      (Adware)
instalação.exe (HD Player by AirInstaller)  (84b2da75171deb27075cbb00ceef296f)

32 / 68    (Adware)
instalação.exe (HD Player by AirInstaller)  (48f3ff14e2a19fc3cbc4edee4a1a5a0f)

41 / 68    (Adware)
hd_player.exe (HD Player by AirInstaller)  (6324e0551c4191b3a6cb521333d5a14a)

24 / 68    (Adware)
setup.exe (Software Updater by AirInstaller)  (d0766330905a9010be2d1917d678b38e)

24 / 68    (Adware)
setup.exe (Software Updater by AirInstaller)  (c11c1953fc854856c6c5bdf56a2edfcc)

45 / 68    (Adware)

29 / 68    (Adware)
setup.exe (HD Player by AirInstaller)  (7fe9bdb99a76052addd18d6cf7593630)

1 / 68      (Adware)
aira8dd.exe (Flash Player Pro by AirInstaller)  (b807b596adca46db7e529d797248c396)

1 / 68      (Adware)
air6a6d.exe (Adobe Flash Player by AirInstaller)  (a6490196ebfd517efc694ed42bd1499e)

1 / 68      (Adware)
winrar setup.exe (WinRAR by AirInstaller)  (a217aaa07aa3dceae439ea1b91c0c40b)

40 / 68    (Adware)
flashplayerpro.exe (Flash Player Pro by AirInstaller)  (26834ab740aa4706dd23a8ba762cdbb0)

37 / 68    (Adware)
setup.exe (Flash Player Pro by AirInstaller)  (2ed694cccbc7e3417dda4e7e5b3e08f7)

24 / 68    (Adware)
setup.exe (Software Updater by AirInstaller)  (cbf24c86872bb30e9a7923da548c94ef)

1 / 68      (Adware)
setup_6.exe (Download Manager by AirInstaller)  (56424bac5946806d95608c7df77ca3a0)

1 / 68      (Adware)
setup_5.exe (Flash Player Pro by AirInstaller)  (023a1bff428942b14d8dc44f082bc6d3)

38 / 68    (Adware)
flash player 12.exe (Adobe Flash Player by AirInstaller)  (fc75c1d713e274ed21466b5935d3bdcc)

1 / 68      (Adware)
aira2fe.exe (Adobe Flash Player by AirInstaller)  (e782fece8c2bf9c14342f6d127205526)

41 / 68    (Adware)
setup.exe (Java Runtime by AirInstaller)  (ba16f5fa0f40aa8daf42b62b22ddc940)

1 / 68      (Adware)
pc_health_kit.exe (Download Manager by AirInstaller)  (5cd355813154816be69db1aefb1f6049)

38 / 68    (Adware)
setup.exe (Flash Player Pro by AirInstaller)  (049d03f602d0454dcb21ee362b317c7e)

1 / 68      (Adware)
aira36f.exe (Flash Player Pro by AirInstaller)  (e0115f72faa2fb863f8d32cad991b596)

1 / 68      (Adware)
iesetup.exe (Internet Explorer 11 by AirInstaller)  (7f34b25dcfd80223ad68c888c5997dda)

29 / 68    (Adware)
setup.exe (HD Player by AirInstaller)  (ca5cfcc52604678ff05569516ba21b92)

24 / 68    (Adware)
setup.exe (Software Updater by AirInstaller)  (5b1136eb55a0cbd949c84fb268a500b8)

 
Latest 30 of 31,545 files

Downloads URLs for files signed by Air Software.

Top-level domains owned by Air Software.

The certificates below are also signed by Air Software.

6CF1F27B980B710E832023D598BFDACF  (Mar 08, 2015 to May 07, 2016)

16564ACDBB7F9D84DADD0FD418C69A51  (Feb 16, 2015 to Apr 17, 2016)

36D5AA8967E82240D5AFEC2F301B54ED  (Feb 29, 2012 to Mar 01, 2013)

00C3BFAFF5374660A208126E655CBD3E13  (Jun 27, 2011 to Jun 27, 2012)

The following publishers (by Authenticode signature organization name) are related.

Remove Air Software Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Air Software by VeriSign, Inc. on January 24, 2013 with the serial number '3ac786e09219df82da830e461d4fc39f'.