home

PerformerSoft LLC

Publisher Information

PerformerSoft LLC is a software developer located in Beaverton, Oregon in the United States*. The company is a primary distributor of unwanted software. Performersoft, also known as Bit89 and managed by iBario (asset holding company) is an adware distributor of many potentially unwanted programs including PC optimizers and such. Most programs by the publisher are distributed via the comapany's 'InstallBrain' download manager that bundles various adware components. The Beaverton, OR address registered to the company is just an ECM (mail drop) and the company is located in Yehuda, Israel. Thre are 4 additional code signing certificates issued to this publisher.
Authority:
Starfield Technologies, Inc.

Valid from:
4/18/2011 7:13:23 AM

Valid to:
6/25/2011 2:20:46 PM

Subject:
CN=PerformerSoft LLC, O=PerformerSoft LLC, L=Beaverton, S=OR, C=US

Issuer:
SERIALNUMBER=10688435, CN=Starfield Secure Certification Authority, OU=http://certificates.starfieldtech.com/repository, O="Starfield Technologies, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
0820595b0d0da7

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.PerformerSoft.J, PUP.Installer.PerformerSoft.W, PUP.Installer.PerformerSoft.T, PUP.Installer.PerformerSoft.X, PUP.Installer.PerformerSoft.P, PUP.Installer.PerformerSoft.L, PUP.Performersoft, PUP.Performersoft.Bundler (M), PUP.Performersoft (M)
100.00%

Avira AntiVirus
ADWARE/Adware.Gen7
38.10%

ESET NOD32
Win32/Obfuscated.NEX (variant), Win32/TrojanDownloader.Whizelown (variant)
28.57%

Panda Antivirus
PUP/Ibups
14.29%

Trend Micro House Call
TROJ_GEN.F47V0912, TROJ_GEN.F47V1122, TROJ_GEN.RCBH1KK
14.29%

Comodo Security
UnclassifiedMalware
14.29%

Sophos
InstallBrain
4.76%

Emsisoft Anti-Malware
Trojan-Downloader.Win32.Whizelown.AMN!A2
4.76%

AVG
PerformerSoft
4.76%

1 / 68      (Adware)
ibariomoviesgames-sb1.exe (iBarioGames)  (922524c07949e8958b290b4419d18117)

1 / 68      (Adware)
performertray.exe (PC Performer Tray by Performer Soft)  (17226b0ab08702d194780709c080684e)

1 / 68      (Adware)
performerstarter.exe  (8a67fad3a8fcd9b50f507b1bb6b50bcd)

1 / 68      (Adware)
performerschedule.exe (PC Performer Schedule by Performer Soft)  (425e6c00517cf09e022b68cfa00b6d31)

1 / 68      (Adware)
pcperformer.exe (PC Performer by Performer Soft)  (0c2b36009ad860df83c5b40bdb8b65d7)

1 / 68      (Adware)
dp.exe (Driver Perfomer)  (b9077e9a2abea0a3c0ce1f07eebfd10e)

1 / 68      (Adware)
ibariogames.exe (iBarioGames)  (5f7cea31adcde1a127b5795b6dfd5170)

1 / 68      (Adware)
driverperformer_zsetup.exe (Driver Perfomer)  (11b781a8771113dbfb7fd46b1e40b754)

1 / 68      (Adware)
pcperformer.cf (PC Performer by Performer Soft)  (9587886441216016065e6ed8da5ae567)

1 / 68      (Adware)
uninst.exe  (519d1a8cd137e8df66a7bd5084366d8d)

5 / 68      (Adware)
gamesmovies_sb1.exe (iBario Software Pack)  (f9b67e78816d33728975d0f12f5a2960)

1 / 68      (Adware)
ibariogames.exe (iBarioGames)  (7b90a259dc1c7dd8e2f0ef00e3be79a5)

4 / 68      (Adware)
ibarioapps.exe (iBarioGames)  (6aaac48f6bb68ada6ec47fd483f3e731)

4 / 68      (Adware)
driverperformer.exe (Driver Perfomer)  (f71eed4c77b55a09fb9aa1725cf01f5a)

4 / 68      (Adware)
dp.exe (Driver Perfomer)  (d96d3010bae4accde364fa92ac14ca0a)

4 / 68      (Adware)
ibariogames.exe (iBarioGames)  (eceb164a091e8273fee3060811e4733f)

1 / 68      (Adware)
driverperformer_v15i.exe (Driver Perfomer)  (f6b18bc832d8d182441be1a90481b67d)

3 / 68      (Adware)
driverperformer_v15.exe (Driver Perfomer)  (4ee41a9c6dc14ac0e7b6a5e874e5a7f5)

3 / 68      (Adware)
driverperformer_16i.exe (Driver Perfomer)  (2fa745391b5150b272fc26d4e2c77f52)

5 / 68      (Adware)
driverperformer_zsetup.exe (Driver Perfomer)  (26888a853f624f2dd0d692249d7b5c48)

3 / 68      (Adware)
Installer.exe (Driver Perfomer)  (3ee97332ca6f191ed0a8d2ac8e624ea6)

Downloads URLs for files signed by PerformerSoft LLC.

3 / 68      (Adware)
http://www.performersoft.com/drivers/.../DriverPerformer_16i.exe  (2fa745391b5150b272fc26d4e2c77f52)

1 / 68      (Adware)
http://performersoft.com/drivers/.../DriverPerformer_V15.exe  (f6b18bc832d8d182441be1a90481b67d)

4 / 68      (Adware)
http://ibario.com/.../iBarioApps.exe  (6aaac48f6bb68ada6ec47fd483f3e731)

3 / 68      (Adware)
http://cdn.performersoft.com/download/.../DriverPerformer_V15.exe  (4ee41a9c6dc14ac0e7b6a5e874e5a7f5)

3 / 68      (Adware)
http://www.performersoft.com/drivers/.../DriverPerformer_16i.exe  (3ee97332ca6f191ed0a8d2ac8e624ea6)

The following websites host and distribute files published by PerformerSoft LLC.

ibario.com

cdn.performersoft.com

www.performersoft.com

performersoft.com

The certificates below are also signed by PerformerSoft LLC.

07DAC5F73C6773  (Jun 27, 2012 to Jun 27, 2015)

277B96F94D20C1  (Jul 13, 2011 to Jun 25, 2012)

041571A39EE934  (Jun 25, 2010 to Jun 25, 2011)

0433C1D6F8D136  (Apr 17, 2011 to Jun 25, 2011)

The following publishers (by Authenticode signature organization name) are related.

Performersoft LLC

Zugo Ltd

W3i, LLC

* Note, the details and description above are based on the code signing digital signature issued to PerformerSoft LLC by Starfield Technologies, Inc. on April 18, 2011 with the serial number '0820595b0d0da7'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.