Performersoft LLC

Publisher Information

Performersoft LLC is a software developer located in Beaverton, Oregon in the United States*. The company is a primary distributor of potentially unwanted software. Performersoft, also known as Bit89 and managed by iBario (asset holding company) is an adware distributor of many potentially unwanted programs including PC optimizers and such. Most programs by the publisher are distributed via the comapany's 'InstallBrain' download manager that bundles various adware components. The Beaverton, OR address registered to the company is just an ECM (mail drop) and the company is located in Yehuda, Israel. Thre are 3 additional code signing certificates issued to this publisher.
Remove Performersoft LLC Malware - Powered by Reason Core Security
Authority:
GoDaddy.com, Inc.

Valid from:
7/13/2011 3:38:26 PM

Valid to:
6/25/2012 8:20:46 PM

Subject:
CN=Performersoft LLC, O=Performersoft LLC, L=Beaverton, S=OR, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
277b96f94d20c1

Scanner detections:
Detections  (98% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Performersoft.InstallBrain.Installer (M), PUP.Performersoft.Bundler (M), PUP.Performersoft.bProtector (M), PUP.Performersoft.PerformerSoftwwwperformersoft.Bundler (M), Common.PartOf.PUP.Performersoft.IgorPavlov (M), PUP.Performersoft.IgorPavlov.Bundler (M), PUP.Performersoft (M)
100.00%

VIPRE Antivirus
Threat.4759033, Threat.4150696, Bprotector, Trojan.Win32.Generic, InstallBrain
54.00%

Avira AntiVirus
ADWARE/Adware.Gen, APPL/InstallBrain.Gen5, APPL/BProtector.Gen, TR/Drop.IBrain.A, PUA/InstallBrain.Gen, APPL/InstallBrain.EK
54.00%

Sophos
InstallBrain, PUA 'InstallBrain', BProtector, PC Performer
54.00%

Malwarebytes
Adware.InstallBrain, PUP.BundleInstaller.IB, PUP.Optional.PCPerformer.A
52.00%

Dr.Web
Adware.Downware.281, Adware.Downware.319, Adware.Downware.271, Program.Unwanted.599, Trojan.Damaged.1, Adware.Downware.1295
52.00%

Microsoft Security Essentials
Threat.Undefined, TrojanDropper:Win32/Rotbrow.B, TrojanDownloader:Win32/Brantall.B
52.00%

Panda Antivirus
PUP/Ibups, Adware/Ibups
52.00%

Quick Heal
TrojanDownloader.Brantall, TrojanDownloader.Brantall.B5, Adware.GoonSquad (Not a Virus), PUA.Performers.Gen, TrojanDownloader.Brantall.A5
52.00%

AhnLab V3 Security
PUP/Win32.BundleInstaller, Win-PUP/InstallBrain, Trojan/Win32.Brantall
52.00%

1 / 68      (PUP)
protector.dll  (7698232f988815cdef87dfa08ea51ba4)

1 / 68      (PUP)

45 / 68    (PUP)
ibsvc.exe (InstallBrain Installer by InstallBrain)  (4d6e0e8424245b53e61fe6bf66d0f46b)

57 / 68    (PUP)

1 / 68      (PUP)

44 / 68    (PUP)
uninstall.exe (InstallBrain Installer by InstallBrain)  (ccfa30d1384ed267e5e62c33ff3fbb91)

1 / 68      (PUP)
trz9b54.tmp (InstallBrain Installer by InstallBrain)  (f0df43de87b7a0afddecd5abe5aed348)

45 / 68    (PUP)
ibsvc.exe (InstallBrain Installer by InstallBrain)  (02f1e8e63b3bf5dc6dd5375b4f6c5595)

1 / 68      (PUP)

47 / 68    (PUP)

1 / 68      (PUP)
tvnoopsetup.exe (InstallBrain Installer by InstallBrain)  (cd3014de6ed593fbc5967df29cc3a845)

39 / 68    (PUP)
video_plugin.exe (InstallBrain Installer by InstallBrain)  (95dc25e05c027b580d1b78f6116ca488)

1 / 68      (PUP)
7z.exe (7-Zip by Igor Pavlov)  (733d401a59f73f092cdc7e959f4f498e)

1 / 68      (inconclusive)
7z.dll (7-Zip by Igor Pavlov)  (c42d8ec8ffdb0c464bb281f1929836fd)

1 / 68      (PUP)
unins000.exe  (17e55978131a8d50c3f650eedc6b2e41)

45 / 68    (PUP)
ibsvc.exe (InstallBrain Installer by InstallBrain)  (3a298b09a83309e0e1e9b32d2a47cc33)

12 / 68    (PUP)
pcperformer.exe (PC Performer by PerformerSoft)  (ee3ec3bf27ec6c6fb45e4125255cabe5)

21 / 68    (PUP)

1 / 68      (PUP)

44 / 68    (PUP)
uninstall.exe (InstallBrain Installer by InstallBrain)  (cb1719545384d9008234cf4084a453ab)

47 / 68    (PUP)

1 / 68      (PUP)

1 / 68      (PUP)
ibsvc.exe.mal (InstallBrain Installer by InstallBrain)  (a50a569cfe27ac5c9a557ee6b5b1ca39)

44 / 68    (PUP)
uninstall.exe (InstallBrain Installer by InstallBrain)  (c392d9c073d4e4db9349dc1a025abba5)

45 / 68    (PUP)
ibsvc.exe (InstallBrain Installer by InstallBrain)  (0c683d13966cc483157610b4008cd3ad)

44 / 68    (PUP)
uninstall.exe (InstallBrain Installer by InstallBrain)  (f7d65d4237d6727ba0df0cd580ef116e)

47 / 68    (PUP)

44 / 68    (PUP)
uninstall.exe (InstallBrain Installer by InstallBrain)  (b10790a1423a128c28eb6d3ec9443341)

47 / 68    (PUP)

 
Latest 30 of 409 files

Downloads URLs for files signed by Performersoft LLC.

Top-level domains owned by Performersoft LLC.

The certificates below are also signed by Performersoft LLC.

07DAC5F73C6773  (Jun 27, 2012 to Jun 27, 2015)

0820595B0D0DA7  (Apr 18, 2011 to Jun 25, 2011)

0433C1D6F8D136  (Apr 17, 2011 to Jun 25, 2011)

The following publishers (by Authenticode signature organization name) are related.

Remove Performersoft LLC Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Performersoft LLC by GoDaddy.com, Inc. on July 13, 2011 with the serial number '277b96f94d20c1'.