» Air Software
Digital Signature
Analysis
Files (116)
Downloads (3)
Domains (16)
Distribution (1)
Related (11)

Air Software

Publisher Information

Air Software is a software publisher located in Victoria, British Columbia in Canada*. The company is a primary distributor of unwanted software. Air Software distributes a download mnanager and installer as well as wraps open source and legitimate software with advertising offers that include adware and toolbars. The company owns dozens of 'download sites' that bundle such unwanted software (Conduit, Ask, Babylon, etc.) with its Air Installer. Thre are 4 additional code signing certificates issued to this publisher.

Authority:

COMODO CA Limited

Valid from:

6/26/2011 8:00:00 PM

Valid to:

6/26/2012 7:59:59 PM

Subject:

CN=Air Software, O=Air Software, STREET=185-911 Yates St., STREET="Suite #327", L=Victoria, S=BC, PostalCode=V8V4Y9, C=CA

Issuer:

CN=COMODO Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00c3bfaff5374660a208126e655cbd3e13

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Air Software.AirSoftware.Bundler (M), PUP.Air Software.AirSoftware (M), PUP.Air Software.AirSoftw.Bundler (M), PUP.Air Software (M)

100.00%

Dr.Web

Adware.Downware.202, Adware.Downware.90

6.00%

MicroWorld eScan

Gen:Variant.Application.Bundler.AirInstaller.4

2.00%

Malwarebytes

PUP.Optional.Bundle

2.00%

Bitdefender

Gen:Variant.Application.Bundler.AirInstaller.4

2.00%

Lavasoft Ad-Aware

Gen:Variant.Application.Bundler.AirInstaller.4

2.00%

Comodo Security

Application.Win32.AirAdInstaller.A

2.00%

F-Secure

Gen:Variant.Application.Bundler

2.00%

Sophos

AirInstaller (PUA)

2.00%

G Data

Gen:Variant.Application.Bundler.AirInstaller

2.00%

1 / 68 (Adware)

air2d85.tmp.exe (Software Installer by AirInstaller) (cabcf0ba8eec63b91e25fa588bf2b21e)

1 / 68 (Adware)

hidef_media_player_setup.exe.pcpquar (HiDef_Media_Player by AirInstaller) (0e3b24058cd7889b583da63df4d5a2d6)

1 / 68 (Adware)

infrarecorder_setup.exe (InfraRecorder by AirInstaller) (8feb135f74e4482c80097e400e8900e6)

1 / 68 (Adware)

sumatra_pdf_setup.exe (Sumatra_PDF by AirInstaller) (bb6795f7c1e50728886c8111353308e5)

1 / 68 (Adware)

pidgin_setup.exe (Pidgin - Yahoo Messenger by AirInstaller) (c70a660adb33442d7bfb873e6a5f477b)

1 / 68 (Adware)

sumatra_pdf_setup.exe (Sumatra_PDF by AirInstaller) (7bf6ae61ebb024f258da99a41e2d6a7f)

1 / 68 (Adware)

pidgin_setup.exe (Setup Launcher by AirInstaller) (efc60548ef0398d4f6683136accd544a)

1 / 68 (Adware)

yahoo_pidgin_setup.exe (Yahoo_Pidgin by AirInstaller) (c6215b5885013a84e0157f7e9a180194)

1 / 68 (Adware)

sumatra_pdf_setup.exe (Sumatra_PDF by AirInstaller) (34f39b13a85ab16d635e8000a70a28ee)

1 / 68 (Adware)

vlc_setup.exe (VLC by AirInstaller) (b442d24bb016dc445609287a4bef8479)

1 / 68 (Adware)

hidef_player_setup.exe (HiDef_Media_Player by AirInstaller) (b939a85799b402db51694da20a920773)

1 / 68 (Adware)

msn_pidgin_setup.exe (MSN_Pidgin by AirInstaller) (a71d625d3ed29dc657ee59fd60da3454)

1 / 68 (Adware)

gimp_setup.exe (Gimp by AirInstaller) (d6cf238ccd2eda273c3892131889a566)

1 / 68 (Adware)

unins000.exe (0c7cf985626ce43476ee81767e97b869)

1 / 68 (Adware)

msn_pidgin_setup.exe (MSN_Pidgin by AirInstaller) (8edb5de409673d1ea93703030016c592)

1 / 68 (Adware)

yahoo_pidgin_setup.exe (Yahoo_Pidgin by AirInstaller) (71af8faf4bc80e17a1c80f30c36832a0)

1 / 68 (Adware)

air8961.tmp.exe (Software Installer by AirInstaller) (b24be6f9044c547f364d5e25157c13a1)

1 / 68 (Adware)

nuancepdfreader.exe (Nuance PDF Reader) (d5dbc840a75736db230babd23d5a1d17)

1 / 68 (Adware)

gimp_setup.exe (Gimp by AirInstaller) (9ced37bcfc6e086859d1c2f65ff68844)

4 / 68 (Adware)

pidgin_setup.exe (Pidgin by AirInstaller) (ed28962cfa5c996d45f8094b57512749)

1 / 68 (Adware)

infrarecorder_setup.exe (InfraRecorder by AirInstaller) (d770c8e5fb382b174158b2f816af3b96)

1 / 68 (Adware)

air52.tmp.exe (Software Installer by AirInstaller) (aff5546486e97a73c454609e0daa14a1)

1 / 68 (Adware)

hidef_media_player_setup.exe (HiDef_Media_Player by AirInstaller) (14d1f7a3b71a60b526c32b5a0ce9c08c)

1 / 68 (Adware)

air6b91.tmp.exe (Software Installer by AirInstaller) (aa08f72790f371a72c4f45da094a0826)

1 / 68 (Adware)

air10c.tmp.exe (Software Installer by AirInstaller) (967986b18309d0077a924697f80396fd)

1 / 68 (Adware)

msn_pidgin_setup.exe (MSN_Pidgin by AirInstaller) (93a33a69bbdd286239098e559c933e34)

1 / 68 (Adware)

sumatrapdf_setup.exe (PDF_Blue by AirInstaller) (4cdb291bcc9d58e0d488c3d57d1927f4)

1 / 68 (Adware)

7-zip_setup.exe (7-Zip by AirInstaller) (047f9acb7b9ceacc634633a58b938d49)

1 / 68 (Adware)

gimp_setup.exe (Gimp by AirInstaller) (37ca51cfe3bca8c120ce00fa78c6d6a7)

1 / 68 (Adware)

infrarecorder_setup.exe.154603.gzquar (InfraRecorder by AirInstaller) (6f3c69defc306a9d2b3d8dccad9abb93)

Latest 30 of 116 files

Downloads URLs for files signed by Air Software.

1 / 68 (Adware)

http://cdn.airdlr.com/downloads/bundles/.../Pidgin_setup.exe (efc60548ef0398d4f6683136accd544a)

1 / 68 (Adware)

http://cdn.airdlr.com/downloads/bundles/.../Pidgin_setup.exe (f71f39487ae2da8feb67bfee8ab46d71)

1 / 68 (Adware)

http://cdn.airdlr.com/downloads/bundles/.../Pidgin_setup.exe (3191e1e0776b5e41e13e21b28d896487)

Domains

Top-level domains owned by Air Software.

realfreedownloads.com

trustydownloads.com

software-updater.com

updaterspro.com

thanksfordownloading.com

Distribution

The following websites host and distribute files published by Air Software.

cdn.airdlr.com

The certificates below are also signed by Air Software.

6CF1F27B980B710E832023D598BFDACF (Mar 08, 2015 to May 07, 2016)

16564ACDBB7F9D84DADD0FD418C69A51 (Feb 16, 2015 to Apr 17, 2016)

3AC786E09219DF82DA830E461D4FC39F (Jan 24, 2013 to Mar 26, 2015)

36D5AA8967E82240D5AFEC2F301B54ED (Feb 29, 2012 to Mar 01, 2013)

The following publishers (by Authenticode signature organization name) are related.

This is not a toolbar

LionSea Software co., ltd

OutBrowse

* Note, the details and description above are based on the code signing digital signature issued to Air Software by COMODO CA Limited on June 26, 2011 with the serial number '00c3bfaff5374660a208126e655cbd3e13'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.