LiveSoftAction

Publisher Information

LiveSoftAction is a software publisher located in Bucharest, Functiune in Romania*. The company is a primary distributor of unwanted software. The LiveSoftAction download manager (via getnow.com and part of the SienAppNetwork, AppScion) bundles legitimate and open-source software with the Appscion Download and Install manager. This download manager from SIEN SA bundles all sorts of adware toolbars including utilities such as the company's Iminent toolbar. - "During the download process we show commercial offers such as Iminent, MyCuteBuddy, Beamrise, WeCare, PlayBryte, FreeRideGames, 2YourFace, Wajam, Babylon, Baidu, and others. If a sponsored software offer, like for example a toolbar, will be offered, it shall change the User's home page, default search settings and 404-error traffic, in the event the User selects such options." Thre are 3 additional code signing certificates issued to this publisher.
Remove LiveSoftAction Malware - Powered by Reason Core Security
Authority:
VeriSign, Inc.

Valid from:
6/5/2012 2:00:00 AM

Valid to:
6/6/2014 1:59:59 AM

Subject:
CN=LiveSoftAction, OU=SienAppNetwork, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=LiveSoftAction, L=Bucharest, S=functiune, C=RO

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
17e4ca22db0d2cfd73baacb9bd605bf7

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Sien.LiveSoftAction.Bundler (M), PUP.Sien.LiveSoftAction.Installer (M)
100.00%

VIPRE Antivirus
Threat.4794174, Appscion
10.00%

avast!
GetNow-C [PUP], Win32:GetNow-C [PUP], Win32:Malware-gen
10.00%

Dr.Web
Adware.Downware.1412, Adware.Downware.1112, Adware.Downware.1910
10.00%

McAfee
LiveSoftAction, LiveSoftAction!9139645C0EB3
10.00%

Malwarebytes
PUP.Optional.LiveSoftAction.A
10.00%

K7 AntiVirus
Unwanted-Program
10.00%

K7 Gateway Antivirus
Unwanted-Program
10.00%

NANO AntiVirus
Riskware.Win32.Downware.dcrcci, Riskware.Win32.Downware.cwavvs
10.00%

Comodo Security
Application.Win32.GetNow.C, Application.Win32.GetNow.B
10.00%

1 / 68      (Adware)

19 / 68    (Adware)

1 / 68      (Adware)

17 / 68    (Adware)

1 / 68      (Adware)

25 / 68    (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

24 / 68    (Adware)

1 / 68      (Adware)
fgmnkgfk.exe (Download Manager by LiveSoftAction)  (1ebb3534bdc9bccd3b9ada585d0f6347)

1 / 68      (Adware)

 
Latest 30 of 1,621 files

Downloads URLs for files signed by LiveSoftAction.

1 / 68      (Adware)
http://stapi.appscion.com/api/.../setup.exe  (658a96d2d38003f0c912765d894b2fca)

25 / 68    (Adware)
http://stapi.appscion.com/api/.../setup.exe  (cd8cddf74e8190968c4afe1e338d6330)

1 / 68      (Adware)
http://stapi.maxrevinstaller.com/api/.../setup.exe  (d072acbaef25dd572c66b34b41eeb93c)

1 / 68      (Adware)
http://stapi.appscion.com/api/.../setup.exe  (db24766db760e9729a3c5d22461c032d)

1 / 68      (Adware)
http://stapi.appscion.com/api/.../setup.exe  (b4ba5bf7ea0b7e94822b7a9d9aafa869)

1 / 68      (Adware)
http://stapi.appscion.com/api/.../setup.exe  (8405ae80dc9e80c9e13cd2a217509b57)

1 / 68      (Adware)
http://stapi.appscion.com/api/.../setup.exe  (2432746e149ff8f585ad9e8d61c4b581)

1 / 68      (Adware)
http://stapi.appscion.com/api/.../setup.exe  (26ee8479b2edbfc878e42bf1e85e9ada)

1 / 68      (Adware)
http://stapi.appscion.com/api/.../setup.exe  (d05c3e8332fc6eb8479e752c2aae3f9f)

1 / 68      (Adware)
http://stapi.appscion.com/api/.../setup.exe  (694fd360fd85069a9b285d82ae7979a7)

The certificates below are also signed by LiveSoftAction.

112170A29B7B1C44372416B604F9BB1609CC  (Apr 13, 2015 to Apr 13, 2016)

0DB89F49425D87D205160442DA55CE38  (Dec 08, 2014 to Dec 09, 2015)

2CAFD284C3B4147AD3E7601989FCCF42  (Dec 13, 2013 to Dec 14, 2014)

The following publishers (by Authenticode signature organization name) are related.

Remove LiveSoftAction Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to LiveSoftAction by VeriSign, Inc. on June 05, 2012 with the serial number '17e4ca22db0d2cfd73baacb9bd605bf7'.