Performersoft LLC

Publisher Information

Performersoft LLC is a software developer located in Beaverton, Oregon in the United States*. The company is a primary distributor of potentially unwanted software. Performersoft, also known as Bit89 and managed by iBario (asset holding company) is an adware distributor of many potentially unwanted programs including PC optimizers and such. Most programs by the publisher are distributed via the comapany's 'InstallBrain' download manager that bundles various adware components. The Beaverton, OR address registered to the company is just an ECM (mail drop) and the company is located in Yehuda, Israel. Thre are 3 additional code signing certificates issued to this publisher.
Remove Performersoft LLC Malware - Powered by Reason Core Security
Authority:
GoDaddy.com, Inc.

Valid from:
6/27/2012 10:28:03 PM

Valid to:
6/27/2015 10:28:03 PM

Subject:
CN=Performersoft LLC, O=Performersoft LLC, L=Beaverton, S=OR, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
07dac5f73c6773

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Performersoft.Bundler (M), PUP.Performersoft.InstallBrain.Installer (M)
100.00%

Quick Heal
TrojanDownloader.Brantall.b, TrojanDownloader.Brantall.A5
80.00%

Malwarebytes
Adware.InstallBrain
80.00%

Agnitum Outpost
Adware.BrainInst, Trojan.Adware, Trojan.DL.Brantall
80.00%

NANO AntiVirus
Trojan.Win32.Downware.cqmhdj, Riskware.Win32.BrainInst.crchst, Trojan.Win32.Downware.crasga, Trojan.Win32.Agent.cqiaam, Trojan.Win32.Downware2.bbwvze
80.00%

Sophos
InstallBrain, PUA 'InstallBrain'
80.00%

Dr.Web
Adware.Downware.1295, Adware.Downware.1458, Adware.Downware.357, Adware.Downware.1522, Adware.Downware.1082, Adware.Downware.1338
80.00%

VIPRE Antivirus
Trojan.Win32.Generic!SB.0, InstallBrain, Threat.4759033, Threat.4150696, Threat.4371328
80.00%

Avira AntiVirus
Adware/InstallBrain.CE, APPL/InstallBrain.Gen, APPL/InstallBrain.Gen5, TR/Dropper.Gen, PUA/InstallBrain.Gen
80.00%

Microsoft Security Essentials
TrojanDownloader:Win32/Brantall.B, TrojanDownloader:Win32/Brantall.D, Threat.Undefined, TrojanDownloader:Win32/Brantall.C
80.00%

50 / 68    (PUP)
codecperformersetup.exe (Installer)  (f14e92d8959cd3bb524c51e8811efbab)

43 / 68    (PUP)
сodec performer804150.exe (Installer)  (794e7736e946e03681c8d4b2ed734194)

50 / 68    (PUP)
сodec performer803975.exe (Installer)  (5b0190a304215394a5fd479009470806)

42 / 68    (PUP)
ibsvc.exe (Installer)  (471abd0bbb8999dfaee348477f23a089)

50 / 68    (PUP)
codecperformersetup.exe (Installer)  (c862a3c80b83bfbd243fd2a3ba712026)

37 / 68    (PUP)
audioperformersetup.exe (Installer)  (0d40b267c0eab629266ad88bce4245c2)

48 / 68    (PUP)
videoperformer.exe (Installer)  (2c5735716994ba18bf4b5b7a58c58bed)

21 / 68    (PUP)
videomanagersetup.exe (Installer)  (82cbcc7b5f411fb475f848da711ed28e)

50 / 68    (PUP)
bestcodecspacksetup.exe (Installer)  (c5d80fcfa0830069089c6e44357bf45b)

50 / 68    (PUP)
сodec performer803975.exe (Installer)  (9b81c0daa351fa02bb4792efe9e74d84)

50 / 68    (PUP)
bestcodecspacksetup.exe (Installer)  (0c665929991412f751370ea54100a828)

42 / 68    (PUP)
ibsvc.exe (Installer)  (fe5d828eb6c3ec5fc7a7b690439e107d)

1 / 68      (PUP)
pc performer43861.exe (Installer)  (006291ac6144b233aa2c1e8140661a21)

50 / 68    (PUP)
videoperformersetup.exe (Installer)  (0de5146fe9ac87c05fe379adfaa0c79b)

35 / 68    (PUP)
сodec performer804128.exe (Installer)  (cdef2b82e3e72fb4ede3aebeecab6e0a)

42 / 68    (PUP)
ibsvc.exe (Installer)  (c43cffacca94189502653d2cdf0d3f3b)

42 / 68    (PUP)
ibsvc.exe (Installer)  (f30e90bdb55218e7094089faa623c4b2)

1 / 68      (PUP)
install pc performer43349.exe (Installer)  (721a4cfdb4934ad4b272811b4bd85d83)

38 / 68    (PUP)
bestcodecspacksetup.exe (Installer)  (86f1398f3f5c8a2d3ede9dc61099bc2d)

43 / 68    (PUP)
videoperformersetup.exe (Installer)  (c3684f2f9adf35c0c46f3308d9ff6bae)

42 / 68    (PUP)
ibsvc.exe (Installer)  (fd13d558062d3e0d9dd5841ce0c5900f)

42 / 68    (PUP)
ibsvc.exe (Installer)  (0620f3cfa6c7a1b8d65f4bb008f08db7)

1 / 68      (PUP)
ibsvc.exe.vir.mal (Installer)  (732eda03993c7ed9cb12a3587df99b82)

50 / 68    (PUP)
videoperformersetup.exe (Installer)  (307c495549def1b6aa30793cc70a158b)

1 / 68      (PUP)
p79hcxlu.exe (Installer)  (96942e0e77ff518fb6b016ff57580eae)

1 / 68      (PUP)
i8jjqsmr.exe (Installer)  (299838502e70a938963c041bb7bb3746)

50 / 68    (PUP)
pcperformersetup.exe (Installer)  (2e639e38becdab1db77018aa4fadecb3)

1 / 68      (PUP)
video performer63872.exe (Installer)  (198c50aa12999bef7bbc690be93f6176)

50 / 68    (PUP)
dmwu.exe (Installer)  (e13018cbbdff5d246df84610b71ecd67)

50 / 68    (PUP)
codecperformersetup.exe (Installer)  (be59d8c7162b3cb37ded8a751f21f480)

 
Latest 30 of 3,788 files

Downloads URLs for files signed by Performersoft LLC.

Top-level domains owned by Performersoft LLC.

The certificates below are also signed by Performersoft LLC.

277B96F94D20C1  (Jul 13, 2011 to Jun 25, 2012)

0820595B0D0DA7  (Apr 18, 2011 to Jun 25, 2011)

0433C1D6F8D136  (Apr 17, 2011 to Jun 25, 2011)

The following publishers (by Authenticode signature organization name) are related.

Remove Performersoft LLC Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Performersoft LLC by GoDaddy.com, Inc. on June 27, 2012 with the serial number '07dac5f73c6773'.