PerformerSoft LLC

Publisher Information

PerformerSoft LLC is a software developer located in Beaverton, Oregon in the United States*. The company is a primary distributor of unwanted software. Performersoft, also known as Bit89 and managed by iBario (asset holding company) is an adware distributor of many potentially unwanted programs including PC optimizers and such. Most programs by the publisher are distributed via the comapany's 'InstallBrain' download manager that bundles various adware components. The Beaverton, OR address registered to the company is just an ECM (mail drop) and the company is located in Yehuda, Israel. Thre are 3 additional code signing certificates issued to this publisher.
Remove PerformerSoft LLC Malware - Powered by Reason Core Security
Authority:
Starfield Technologies, Inc.

Valid from:
4/18/2011 7:13:23 AM

Valid to:
6/25/2011 2:20:46 PM

Subject:
CN=PerformerSoft LLC, O=PerformerSoft LLC, L=Beaverton, S=OR, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
0820595b0d0da7

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.PerformerSoft.J, PUP.Installer.PerformerSoft.W, PUP.Installer.PerformerSoft.T, PUP.Installer.PerformerSoft.X, PUP.Installer.PerformerSoft.P, PUP.Installer.PerformerSoft.L, PUP.Performersoft, PUP.Performersoft.Bundler (M)
100.00%

Avira AntiVirus
ADWARE/Adware.Gen7
53.33%

ESET NOD32
Win32/Obfuscated.NEX (variant), Win32/TrojanDownloader.Whizelown (variant)
40.00%

Panda Antivirus
PUP/Ibups
20.00%

Trend Micro House Call
TROJ_GEN.F47V0912, TROJ_GEN.F47V1122, TROJ_GEN.RCBH1KK
20.00%

Comodo Security
UnclassifiedMalware
20.00%

Sophos
InstallBrain
6.67%

Emsisoft Anti-Malware
Trojan-Downloader.Win32.Whizelown.AMN!A2
6.67%

McAfee Web Gateway
Heuristic.BehavesLike.Win32.ModifiedUPX.C!86
6.67%

The Hacker
Trojan/Obfuscated.nex
6.67%

1 / 68      (Adware)
ibariogames.exe (iBarioGames)  (5f7cea31adcde1a127b5795b6dfd5170)

1 / 68      (Adware)
driverperformer_zsetup.exe (Driver Perfomer)  (11b781a8771113dbfb7fd46b1e40b754)

1 / 68      (Adware)
pcperformer.cf (PC Performer by Performer Soft)  (9587886441216016065e6ed8da5ae567)

1 / 68      (Adware)
uninst.exe  (519d1a8cd137e8df66a7bd5084366d8d)

5 / 68      (Adware)
gamesmovies_sb1.exe (iBario Software Pack)  (f9b67e78816d33728975d0f12f5a2960)

1 / 68      (Adware)
ibariogames.exe (iBarioGames)  (7b90a259dc1c7dd8e2f0ef00e3be79a5)

4 / 68      (Adware)
ibarioapps.exe (iBarioGames)  (6aaac48f6bb68ada6ec47fd483f3e731)

4 / 68      (Adware)
driverperformer.exe (Driver Perfomer)  (f71eed4c77b55a09fb9aa1725cf01f5a)

5 / 68      (Adware)
dp.exe (Driver Perfomer)  (d96d3010bae4accde364fa92ac14ca0a)

5 / 68      (Adware)
ibariogames.exe (iBarioGames)  (eceb164a091e8273fee3060811e4733f)

1 / 68      (Adware)
driverperformer_v15i.exe (Driver Perfomer)  (f6b18bc832d8d182441be1a90481b67d)

3 / 68      (Adware)
driverperformer_v15.exe (Driver Perfomer)  (4ee41a9c6dc14ac0e7b6a5e874e5a7f5)

3 / 68      (Adware)
driverperformer_16i.exe (Driver Perfomer)  (2fa745391b5150b272fc26d4e2c77f52)

5 / 68      (Adware)
driverperformer_zsetup.exe (Driver Perfomer)  (26888a853f624f2dd0d692249d7b5c48)

3 / 68      (Adware)
Installer.exe (Driver Perfomer)  (3ee97332ca6f191ed0a8d2ac8e624ea6)

Downloads URLs for files signed by PerformerSoft LLC.

3 / 68      (Adware)

3 / 68      (Adware)

The following websites host and distribute files published by PerformerSoft LLC.

The certificates below are also signed by PerformerSoft LLC.

07DAC5F73C6773  (Jun 27, 2012 to Jun 27, 2015)

277B96F94D20C1  (Jul 13, 2011 to Jun 25, 2012)

0433C1D6F8D136  (Apr 17, 2011 to Jun 25, 2011)

The following publishers (by Authenticode signature organization name) are related.

Remove PerformerSoft LLC Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to PerformerSoft LLC by Starfield Technologies, Inc. on April 18, 2011 with the serial number '0820595b0d0da7'.