home

WeatherBug

Publisher Information

WeatherBug is a software publisher located in Gaithersburg, Maryland in the United States*. The publisher primarily developes software that can be classified as adware. Thre are 5 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
5/23/2005 8:00:00 PM

Valid to:
7/1/2006 7:59:59 PM

Subject:
CN=WeatherBug, OU=Consumer, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=WeatherBug, L=Gaithersburg, S=Maryland, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
4048fca621554caf18942add55975fb3

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.WeatherBug.S, PUP.Installer.WeatherBug.R, PUP.Installer.WeatherBug.S, PUP.Installer.WeatherBug.Q, PUP.WeatherBug.Installer (M), PUP.WeatherBug (M), PUP.WeatherB.Installer (M), PUP.WeatherB (M), PUP (M)
100.00%

McAfee
Generic PUP.x, Artemis!5CD3AF244259, Generic Adware.dr, Artemis!C01391FD0679
31.25%

Comodo Security
UnclassifiedMalware, TrojWare.Win32.Sasfis.aaxz
31.25%

Dr.Web
Adware.Minibug, infected with Trojan.Funweb.59
31.25%

IKARUS anti.virus
AdWare.Win32.Minibug, Trojan.Win32.Sasfis, not-a-virus:AdWare.Win32.WeatherBug
25.00%

Kaspersky
not-a-virus:AdWare.Win32.WeatherBug
25.00%

Norman
Suspicious_Gen2.ONTMM, W32/Suspicious_Gen2.ZAVM, Suspicious_Gen2.CJUVB
18.75%

Sophos
DataApp, Mal/Generic-L, DataApp Installer
18.75%

Avira AntiVirus
ADSPY/Minibug.A, SPR/Tool.346696, DR/WeatherBug.A.1
18.75%

Fortinet FortiGate
Dloader, Adware/WeatherBug
18.75%

1 / 68      (PUP)
wxbugsetup6.07.0.20.exe (by AWS Convergence Technologies)  (b47cd18f746dc76e1542fbef151ece9b)

1 / 68      (PUP)
4128newb (MiniBugTransporter Module by AWS Convergence Technologies)  (dbadd9f9a9fab96473168dcf92e7e0d1)

1 / 68      (PUP)
wxbugautoupgrade605b6.05.0.15d.exe (by AWS Convergence Technologies)  (92c78bbac6487812b524643bfe90cbf0)

1 / 68      (PUP)
WeatherBug.exe (WeatherBug Lite by WeatherBug)  (f94a41c5545c8b750f851d276b844968)

1 / 68      (PUP)
hppavillion_spring06.exe (by AWS Convergence Technologies)  (c849ee8d2965433cf9b46d1c34b05149)

1 / 68      (PUP)
compaqpresario_spring06.exe (by AWS Convergence Technologies)  (9a5e835cdff8935e260a90d3122d9e90)

1 / 68      (PUP)
weatherbugu3.exe  (d20f4dee308ff3ad3ba5347a5ac69550)

1 / 68      (PUP)
wxbugstandalone60.exe (by AWS Convergence Technologies)  (fe41bb5be56e205236148bbb3b216771)

3 / 68      (PUP)
9119935296344949793 (by AWS Convergence Technologies)  (8320a66591ee546c7b710347aecdd5a2)

12 / 68    (PUP)
wxbugstandalone60b6.05.0.15_z4543.exe (by AWS Convergence Technologies)  (c01391fd0679d7806db7dc3bb1133645)

8 / 68      (PUP)
wxbugsetup60b6.05.0.15i.exe (by AWS Convergence Technologies)  (7fcb00739064f0e770bdaf55a0d64aa6)

7 / 68      (PUP)
minibuginstaller.exe (by AWS Convergence Technologies)  (e12a1b4a12ec4e0d7f0b31d108545857)

8 / 68      (PUP)
wxbugmanupgrade605.exe (by AWS Convergence Technologies)  (5cd3af244259d1346cb524a77192cd3d)

4 / 68      (PUP)
wxbugstandalone60.exe (by AWS Convergence Technologies)  (9f701682356f3c6c11ec9a0ad1bd74ba)

16 / 68    (PUP)
MiniBugTransporter.DLL (MiniBugTransporter Module by AWS Convergence Technologies)  (d40d5756adbc2705ae8b550024b1c0f6)

7 / 68      (PUP)
MiniBugTransporter.DLL (MiniBugTransporter Module by AWS Convergence Technologies)  (d39fadcb286d18c62ff56c5adae746e7)

The certificates below are also signed by WeatherBug.

5753B94A4B4F428A574131A68539135D  (Jun 15, 2015 to Jul 15, 2018)

6EC929230A6A4AC487B2FE40F8468FDD  (May 14, 2012 to Jun 29, 2015)

2903A847102E13E755F4298C9D26C89E  (Jun 07, 2009 to Jun 29, 2012)

37BA9A6E807E4CC566D9E69FE45E7EB7  (Jun 04, 2006 to Jun 30, 2009)

0C6781C5116D7E57AAF9D99A5DE2A8B4  (Jun 30, 2004 to Jul 01, 2005)

* Note, the details and description above are based on the code signing digital signature issued to WeatherBug by VeriSign, Inc. on May 23, 2005 with the serial number '4048fca621554caf18942add55975fb3'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.