» Software Updater
Digital Signature
Analysis
Files (16)
Downloads (6)
Distribution (5)
Related (13)

Software Updater

Publisher Information

Software Updater is a software publisher located in Grosse Pointe Farms, Michigan in the United States*. The company is a primary distributor of unwanted software.

Authority:

DigiCert Inc

Valid from:

9/14/2014 8:00:00 PM

Valid to:

9/16/2015 8:00:00 AM

Subject:

CN=Software Updater, O=Software Updater, L=Grosse Pointe Farms, S=Michigan, C=US

Issuer:

CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0ff7aaec26db76ce357ce9b815a9e4bc

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

AhnLab V3 Security

PUP/Win32.Agent

93.75%

Reason Heuristics

PUP.SoftwareUpdater.L, PUP.SoftwareUpdater.T, PUP.Installer.SoftwareUpdater.F, PUP.Installer.UNLIMITED DOWNLOADS, PUP.UNLIMITED DOWNLOADS.SoftwareUpdater.Bundler (M)

93.75%

Dr.Web

Trojan.Click2.64262, Trojan.DownLoader11.51175

81.25%

NANO AntiVirus

Trojan.Win32.Click2.cxfwdc

75.00%

avast!

Win32:Dropper-gen [Drp], Malware-gen, Win32:Malware-gen

68.75%

ESET NOD32

Win32/UnlimitedDownloads

62.50%

McAfee

Artemis!0881E3556588, Artemis!51058943F653, RDN/Downloader.a!tu, Artemis!7B339283744A, Artemis!541E57465BE1, Artemis!3A7FC0401729

37.50%

Vba32 AntiVirus

BScope.Trojan.Agent, suspected of Trojan.Downloader.gen.h

25.00%

Norman

Obfuscated.H6!genr, Downloader.HKZD, Downloader.HLAO, Downloader.HLAJ

25.00%

Trend Micro House Call

Suspici.6037135B, Suspicious_GEN.F47V1202, Suspicious_GEN.F47V1217, Suspicious_GEN.F47V1215

25.00%

1 / 68 (Adware)

setup.exe (41b48f5044126ff88a95d907e53d3261)

14 / 68 (Adware)

setup.exe (30858e139dcdf6636b315b3bda8d57ed)

18 / 68 (Adware)

setup.exe (541e57465be1eee0445d9d5a53cea558)

8 / 68 (Adware)

9kuxourb6o5.exe (7b339283744ad2bcff486df09b4d7445)

7 / 68 (Adware)

8kxtqo0kj4f.exe (8a8ed57f6f8149bd5eaf7f53a86c89e2)

16 / 68 (Adware)

setup.exe (8cd9be143174293055bde3320d44ed6c)

4 / 68 (Adware)

install_9z1xd4xyty2.exe (5c6d3c58f6c138f4d233debde878afa8)

5 / 68 (Adware)

install_9z1xd4xyty2.exe (ba721caef18efa0a80d033c714ec871b)

7 / 68 (Adware)

install_9z1xd4xyty2.exe (d84c506cf85b816e963775d9f904b260)

8 / 68 (Adware)

4jedj48iygi.exe (51058943f653707bf553e8b0d07ba3e8)

6 / 68 (Adware)

4jedishmf4i.exe (aa1801d94b80e0d09e1164bb391a6963)

6 / 68 (Adware)

8j7py0lea0s.exe (f15e69d7c4dbcbcd7161110ee5476dc4)

6 / 68 (Adware)

8j7pxg83cws.exe (11db803dc551d2c3c61ea7c12239c99c)

6 / 68 (Adware)

8j7pwtjew8s.exe (a97731336ef30a813ddbc6e95d23a5a8)

3 / 68 (Adware)

1iibq7a3soc.exe (28713b168d992bb73ee3bd48d17331e2)

7 / 68 (Adware)

9iidfj53wwt.exe (0881e3556588976851fefaf929177b17)

Downloads URLs for files signed by Software Updater.

16 / 68 (Adware)

http://ttb.lpmxp2152.com/download/request/.../znuw8ZE7?__tc=1409937343.348&lpsl=601cad41f2d1a017542ca2a245bbd52d&expire=1410023698&tgu_src_lp_domain=www.pcsoftultimate.com&ClickID=Ym89NiZzbGlkPTQwNTQ4JnN1YmlkPTQ0OTU0OCZzbz02JmNpY21wPTI4NDg1OCZwdWJpZD01ODIyOCZjaXBpZD0xODUwOTAmY2lzaWQ9QjFGRTU1RkQ5MjM1NDA3MzExMjQzNDgwNzgmY2lyaWQ9QjFGRTU1RkQ5MjM1NDA3NDg1MjI5MTE5MiZjaXVpZD00NDYwOTI5MzkwNTAwMjMzMTM3JmNyaWQ9MjE5MjQzOCZleGNpZD0yMiZtbXQ9MiZjbnRyeT0yMjc=&PubID=58228&fileName=Setup (setup.exe)

18 / 68 (Adware)

http://yt.clkaa.com/?request=24863371e397b07b98d3bd392c4ea5a9019f72907ffc52f60d8f99065b729829334bd064c5b0b9c9a8350456ffe1722c9103ad3782d10e900f6ba18a0603c3cca00c32413d2499d65896fbe2373f6f16 (setup.exe)

18 / 68 (Adware)

http://win.updatergo.com/?request=24863371e397b07b98d3bd392c4ea5a9019f72907ffc52f60d8f99065b729829334bd064c5b0b9c9a8350456ffe1722c9103ad3782d10e900f6ba18a0603c3cca00c32413d2499d65896fbe2373f6f16 (setup.exe)

16 / 68 (Adware)

https://djtkh1hova1ix.cloudfront.net/download/.../9z1xd4xyty2 (setup.exe)

16 / 68 (Adware)

http://djtkh1hova1ix.cloudfront.net/download/.../9z1xd4xyty2 (setup.exe)

18 / 68 (Adware)

http://program.updatergo.com/?request=24863371e397b07b98d3bd392c4ea5a9019f72907ffc52f60d8f99065b729829334bd064c5b0b9c9a8350456ffe1722c9103ad3782d10e900f6ba18a0603c3cca00c32413d2499d65896fbe2373f6f16 (setup.exe)

Distribution

The following websites host and distribute files published by Software Updater.

yt.clkaa.com

win.updatergo.com

program.updatergo.com

djtkh1hova1ix.cloudfront.net

ttb.lpmxp2152.com

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Software Updater by DigiCert Inc on September 14, 2014 with the serial number '0ff7aaec26db76ce357ce9b815a9e4bc'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.