» PC Software
Digital Signature
Analysis
Files (25)
Downloads (10)
Distribution (5)
Related (7)

PC Software

Publisher Information

PC Software is a software developer located in San Jose, California in the United States*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. There is one additional code signing certificate issued to this publisher.

Authority:

COMODO CA Limited

Valid from:

9/9/2014 7:00:00 PM

Valid to:

9/10/2015 6:59:59 PM

Subject:

CN=PC Software, O=PC Software, STREET=5655 Silver Creek Valley Road, L=San Jose, S=CA, PostalCode=95138, C=US

Issuer:

CN=COMODO RSA Code Signing CA, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00fffc8d338c67107439c065ef8036902f

Scanner detections:

Detections (80% detected)

Scan engine

Details

Detections

VIPRE Antivirus

Threat.4786532, InstallMonetizer, Virus.Win32.Slugin.a

68.00%

Reason Heuristics

PUP.PCSoftware (M), PUP.PCSoftware.Installer (M), PUP.PCSoftwa.Installer (M), PUP.PCSoftwa (M), PUP (M)

56.00%

Trend Micro House Call

Suspici.1B63843A, Suspicious_GEN.F47V0426, Suspicious_GEN.F47V0425, Suspicious_GEN.F47V0429, Suspicious_GEN.F47V0117, Suspicious_GEN.F47V0116

56.00%

Avira AntiVirus

PUA/Vittalia.Gen, W32/Slugin.A

36.00%

Sophos

Winsearch, W32/Slugin-A, Winsearch (PUA)

32.00%

Dr.Web

Win32.Wplugin.2, Adware.Searcher.2851

28.00%

AVG

Win32/Slugin.A, Generic

28.00%

nProtect

Trojan/W32.Agent.61352.C, Win32.SlugIn.A

24.00%

McAfee

Artemis!A3B07C4F526E, W32/Wplugin

24.00%

Comodo Security

TrojWare.Win32.Patched.Q, Application.Win32.InstallMonetizer.~AS

24.00%

1 / 68 (Malware)

Windesk Winsearch.exe (Windesk Winsearch) (da8d11fdc56a6de18a9c4787aaad3e10)

2 / 68 (PUP)

Windesk Winsearch.exe (Windesk Winsearch) (5c8962ead835d2a7dd8fd03c045c5021)

1 / 68 (PUP)

uninst.exe (9008e399c1b9b6bc9e7a209357f492b5)

1 / 68 (PUP)

soccergame_silent.exe (95d4e5a859b4565c19f3845b4321dfc6)

1 / 68 (PUP)

subadvtwo.exe (8a1743468365892833b1068882a40e49)

1 / 68 (PUP)

uninst.exe (76ec4c1f39c10ea779f24a16ffb5593b)

1 / 68 (PUP)

windesk_winsearch_silent_s3.exe (8b016e26045a8d7cc5e46d2a24bad8a3)

1 / 68 (PUP)

winpccleanup.exe (aec6b0daead97524cea31fbfaa17caef)

4 / 68 (inconclusive)

Windesk Winsearch.exe (Windesk Winsearch) (b348e7323a62df19f9cb1199819efc8b)

7 / 68 (PUP)

windesk_winsearch_silents3.exe (c59f215c90411f533a55a921a1c2b01b)

37 / 68 (Malware)

13fa70bd6d4a911b05afe39e80de6bbd.exe (13fa70bd6d4a911b05afe39e80de6bbd)

37 / 68 (Malware)

1311ba384cc1e9537a10712e82c8dba8.exe (1311ba384cc1e9537a10712e82c8dba8)

37 / 68 (Malware)

0bf4495fd017e5127d1688df6f2bb428.exe (0bf4495fd017e5127d1688df6f2bb428)

37 / 68 (Malware)

09b8fdb1dc7430c3016a2e0811ca335d.exe (09b8fdb1dc7430c3016a2e0811ca335d)

37 / 68 (Malware)

05f02636eeef673fe8c652430687e9a9.exe (05f02636eeef673fe8c652430687e9a9)

3 / 68 (PUP)

windesk winsearch.vshost.exe (Microsoft Visual Studio 2012 by Microsoft) (faeef5c4a44b9d1982fc301aa356714d)

3 / 68 (PUP)

Windesk Winsearch.exe (Windesk Winsearch by Microsoft) (e84092dc6f3bbce6889912937b219798)

3 / 68 (PUP)

uninst.exe (64c08a16c2924b7b4dda18d8e62d47ad)

3 / 68

Windesk Winsearch.exe (Windesk Winsearch) (da8d11fdc56a6de18a9c4787aaad3e10)

4 / 68 (inconclusive)

windeskwinsearch_silent_s5.exe (a3b07c4f526eaf148a36413d916ea253)

3 / 68 (inconclusive)

windeskwinsearch_silent_s6.exe (e64aaf61d7afe7c0811eb83cae42ab5a)

4 / 68 (PUP)

uninst.exe (fe68507a02f60732f26a8cceaa950754)

3 / 68 (PUP)

Windesk Winsearch.exe (Windesk Winsearch) (9a03eb27e4d115b969c57db9427be2e3)

3 / 68 (inconclusive)

windeskwinsearch_silent_s3.exe (c4a0af781fce9185c072793311a50bc3)

2 / 68 (PUP)

Windesk Winsearch.exe (Windesk Winsearch) (11bc9d6be1480fd608658b9887ef5cfb)

Downloads URLs for files signed by PC Software.

1 / 68 (PUP)

http://secured.nmsgv.us/.../Windesk_Winsearch_Silent_S3.exe (8b016e26045a8d7cc5e46d2a24bad8a3)

3 / 68 (inconclusive)

http://secured.atouristwest.us/.../WindeskWinsearch_silent_s3.exe (c4a0af781fce9185c072793311a50bc3)

3 / 68 (inconclusive)

http://secured.atouristeast.us/.../WindeskWinsearch_silent_s3.exe (c4a0af781fce9185c072793311a50bc3)

4 / 68 (inconclusive)

http://113.171.224.208/.../WindeskWinsearch_silent_s5.exe (a3b07c4f526eaf148a36413d916ea253)

7 / 68 (PUP)

http://secured.cdnawbwest.us/.../Windesk_Winsearch_SilentS3.exe (c59f215c90411f533a55a921a1c2b01b)

3 / 68 (inconclusive)

http://secured.nmsgv.us/.../WindeskWinsearch_silent_s3.exe (c4a0af781fce9185c072793311a50bc3)

3 / 68 (inconclusive)

http://secured.westsecurecdn.us/.../WindeskWinsearch_silent_s6.exe (e64aaf61d7afe7c0811eb83cae42ab5a)

7 / 68 (PUP)

http://secured.nmsgv.us/.../Windesk_Winsearch_SilentS3.exe (c59f215c90411f533a55a921a1c2b01b)

4 / 68 (inconclusive)

http://secured.westsecurecdn.us/.../WindeskWinsearch_silent_s5.exe (a3b07c4f526eaf148a36413d916ea253)

3 / 68 (inconclusive)

http://secured.westsecurecdn.us/.../WindeskWinsearch_silent_s3.exe (c4a0af781fce9185c072793311a50bc3)

Distribution

The following websites host and distribute files published by PC Software.

secured.nmsgv.us

secured.atouristwest.us

secured.cdnawbwest.us

secured.atouristeast.us

secured.westsecurecdn.us

The following certificate is also signed by PC Software.

0094D260FFCC1D2D56E0DA163346897627 (Oct 09, 2015 to Oct 09, 2016)

The following publishers (by Authenticode signature organization name) are related.

Rational Thought Solutions

Beijing Zhihuimen Techology co,.Ltd

ClaraLabSoftware

think-cell Software GmbH

Duuqu Group OU

Off To Up LLC

Weather Ping

* Note, the details and description above are based on the code signing digital signature issued to PC Software by COMODO CA Limited on September 09, 2014 with the serial number '00fffc8d338c67107439c065ef8036902f'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.