MP3 Support

Publisher Information

MP3 Support is a software developer located in Oshawa, Ontario in Canada*. The publisher primarily developes software that can be classified as adware. Thre are 3 additional code signing certificates issued to this publisher.
Remove MP3 Support Malware - Powered by Reason Core Security
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/27/2009 7:00:00 PM

Valid to:
7/12/2011 6:59:59 PM

Subject:
CN=MP3 Support, OU=SECURE APPLICATION DEVELOPMENT, O=MP3 Support, L=Oshawa, S=Ontario, C=CA

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
14260c959aabdbc94c21ee6e44692a59

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.MP3Support.N, PUP.MP3Support.R, PUP.MP3Support.J, PUP.MP3Support.V, PUP.MP3Support.U, PUP.MP3Support.M, PUP.Installer.MP3Support.Q, PUP.Installer.MP3Support.R, PUP.MP3Support.Installer (M)
98.00%

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant), Win32/OpenCandy, Win32/Bundled.Toolbar.Ask potentially unsafe (variant), Win32/Bundled.Toolbar.Ask.G potentially unsafe (variant)
46.00%

Baidu Antivirus
Trojan.Win32.Agent, Adware.Win32.Ask, PUA.Win32.AskToolbar, Adware.Win32.OpenCandy, Trojan.Win32.Bundled, Hacktool.Win32.OpenCandy
34.00%

VIPRE Antivirus
Opencandy, Onestepsearch, Zugo, Trojan.Win32.Generic
20.00%

Fortinet FortiGate
Adware/OpenCandy, Adware/OneStep, W32/Adware_fam.NB
18.00%

Trend Micro House Call
ADW_OPENCANDY, TROJ_SPNR.0CB713, TROJ_GEN.F47V0412, TROJ_GEN.RC1H1FO, TROJ_GEN.F47V0909, TROJ_SPNR.0BH113, TROJ_SPNR.0CEJ13
16.00%

McAfee
Adware-OneStep.l, Artemis!4EB88C748EC9, Artemis!52938F6605DC, Artemis!7854F974BC38, Artemis!BA5EDFAE668E, Adware-OpenCandy.dll
14.00%

McAfee Web Gateway
Adware-OneStep.l, Artemis!4EB88C748EC9, Artemis!52938F6605DC, Adware-OpenCandy.dll, BehavesLike.Win32.Suspicious.vc
14.00%

Malwarebytes
PUP.Optional.OpenCandy, Adware.Dropper, Adware.ZwankySearch
14.00%

Bkav FE
W32.Clod6bd.Trojan, W32.HfsAdware
14.00%

1 / 68      (PUP)
setup-freefox.exe  (a9cde8e7f81678fdf7576a7a089c3b54)

1 / 68      (PUP)
mp3rocket-win.exe  (5e43288b66544ac6ce273df4e1e8c7bf)

1 / 68      (PUP)
81580-89589-rocket-torrents-pro.exe  (e8959ac48f24e4ae50242b42ff330c4c)

1 / 68      (PUP)
setup-skydownloader-win.exe  (2bcc4893aad812feccb69dd03db7ec29)

1 / 68      (PUP)
mp3rocket-win-pro.exe  (3e60e9899dceda94e0b4ab64d3c79191)

1 / 68      (PUP)
mp3rocket-win-pro.exe  (b12b00c0e8740f41fbfbbe5801c849b3)

1 / 68      (PUP)
mp3rocket-win.exe  (80c714bea54b8ba64ed34312253c03de)

1 / 68      (PUP)
setup-ziggytv352.exe  (71931448d54638b7458cceb6d1843e6a)

1 / 68      (PUP)
setup-freefox.exe  (7a54ae47db7e7a7934accba55fa84061)

1 / 68      (PUP)
mp3rocket-win-pro.exe  (4b94dfb6ed61ca30039a40d3444b8f01)

1 / 68      (PUP)
mp3rocket-win.exe  (c36fa4a60270d759d2d6563ae475d5c0)

1 / 68      (PUP)
setup-ziggytv-pro.exe  (eb28870b97c534287811b3a925dd09e2)

1 / 68      (PUP)
mp3rocket-win-pro.exe  (1d0c76b379a4b3bda6d3fe9706861e1c)

1 / 68      (PUP)
mp3rocket-pro.exe  (fd3e95bffb80255e8c6b46d6d9ca5c2a)

4 / 68      (PUP)
81532-658138-mp3-rocket.exe  (8392b20ab03d831f1a194ddfd8f8a61c)

11 / 68    (PUP)
setup-skydownloader-win.exe  (33ca4c9213b85aa83acab2a42d01207a)

7 / 68      (PUP)
mp3rocket-win.exe  (ee7bb2b545b1bca6795f4dbe9683b0de)

5 / 68      (PUP)
setup-skydownloader-win-pro.exe  (a581ddead65da7fa7e158081be89e1c2)

4 / 68      (PUP)
setup-skydownloader-win.exe  (5725ba6d4c507a10cdd02cfaf9b9c5df)

12 / 68    (PUP)
mp3rocket-win.exe  (ba5edfae668e34a952b797e94cc7c162)

1 / 68      (PUP)
mp3rocket-pro.exe  (49eb3402e5a8d3f2e75d1a554df8110d)

4 / 68      (PUP)
fmp3.exe  (3a48c88f4b4becdc9a8e56b70851fbb3)

1 / 68      (PUP)
mp3rocket-pro.exe  (0667d92ac571ae4b7f87d517df50cef6)

2 / 68      (PUP)
mp3rocket-win-pro.exe  (20f2b11281927a4404d8fa08dbca6a8f)

28 / 68    (PUP)
mp3rocket-windows.exe  (7854f974bc38535a1fc5307717e36ea9)

4 / 68      (PUP)
206162.exe  (34bcf2f4ba3cc9ab9a03b9f5fcbe4c85)

1 / 68      (PUP)
setup-ziggytv-pro.exe  (da2bda2f799a6b69d677e8cf52c6439c)

9 / 68      (PUP)
mp3rocket.exe  (96f500fee7b6b1070604ed52fa8e05f1)

1 / 68      (PUP)
mp3rocket-pro.exe  (5fa40b9220a0e22cf2a6c9e5c0c36eef)

1 / 68      (PUP)
mp3rocket-win.exe  (2a97bfbbc86e1c60b2d3a87261404428)

 
Latest 30 of 56 files

Downloads URLs for files signed by MP3 Support.

3 / 68      (PUP)

4 / 68      (PUP)
http://www.freefox.com/downloads/.../freefox.exe  (34bcf2f4ba3cc9ab9a03b9f5fcbe4c85)

1 / 68      (PUP)

3 / 68      (PUP)
http://www.limesearchbar.com/.../mp3rocket.exe  (3bdb776d8ae1f2c2b105c2cb105e7084)

3 / 68      (PUP)

The following websites host and distribute files published by MP3 Support.

The certificates below are also signed by MP3 Support.

146C2E323177663B9DF87FFF1B9C31D8  (Jun 26, 2013 to Jul 11, 2015)

6CA038127129FA262DA256411F21A600  (Jun 06, 2011 to Jul 11, 2013)

38EBE0F349F686E549C5BEC3BF8944F7  (Jul 12, 2007 to Jul 12, 2009)

The following publishers (by Authenticode signature organization name) are related.

Remove MP3 Support Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to MP3 Support by Thawte Consulting (Pty) Ltd. on May 27, 2009 with the serial number '14260c959aabdbc94c21ee6e44692a59'.