AirInstaller

Category: Adware and PUAs Protection available since:03 May 2013 23:37:07 (GMT)
Type: Unspecified PUA Last Updated:01 Oct 2013 19:13:50 (GMT)

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

AirInstaller is an installer which bundles legitimate applications with offers for additional third party applications that may be unwanted by the user. Such third party applications are typically installed onto users' computers by default, but may include an option to 'opt-out' during or after the installation process.

Examples of AirInstaller include:

Example 1

File Information

Size
1.1M
SHA-1
000b9d4291d34bc27f4fd89ff76d2ac8b16e84f8
MD5
00db9003237bb77b0d355aa76df05a4e
CRC-32
3949a379
File type
Windows executable
First seen
2013-04-19

Runtime Analysis

HTTP Requests
  • http://trk.airinstaller.com/get/log_level/
DNS Requests
  • trk.airinstaller.com

Example 2

File Information

Size
1.1M
SHA-1
0011f7ce2d5f51e4abc80444230e2b0f63c843d8
MD5
0283ac04710154f7accb9bf34502decf
CRC-32
e13e53d6
File type
Windows executable
First seen
2013-04-03

Runtime Analysis

HTTP Requests
  • http://trk.airinstaller.com/get/log/
  • http://trk.airinstaller.com/get/log_level/
DNS Requests
  • trk.airinstaller.com

Example 3

File Information

Size
1.1M
SHA-1
00239b2996894028ecd23d3f58ecccb222386430
MD5
e8eeb5dd8acc0be7c411dfbbd38fa80f
CRC-32
83650616
File type
Windows executable
First seen
2013-05-10

Runtime Analysis

Copies Itself To
  • c:\Documents and Settings\test user\Local Settings\Temp\setup.exe
Processes Created
  • c:\docume~1\support\locals~1\temp\setup.exe
HTTP Requests
  • http://trk.airinstaller.com/get/log/
  • http://trk.airinstaller.com/get/log_level/
DNS Requests
  • trk.airinstaller.com

download Try Sophos products for free
Download now