German Web users, watch what you install on your PCs!
Our sensors just picked up yet another rogue/deceptive ad campaign enticing visitors to install the bogus PC performance enhancing software known as ‘PCPerformer’, which in reality is a Potentially Unwanted Application (PUA), that tricks users into installing (the Delta Toolbar in particular) on their PCs.
Sample screenshot of the actual advertisement:
Sample screenshot of the landing page:
The PUA is digitally signed by Performersoft LLC.
hxxp://www.fasterstrongerpc.net/pcperformer/st2/pcperformer-st2-de.php – 188.8.131.52; 184.108.40.206
Detection rate for the Potentially Unwanted Application (PUA) – MD5: d8c542ced7879d0ca4a1a69d0ca97a53 – detected by 4 out of 47 antivirus scanners as Adware.Downware.1295; APPL/InstallBrain.Gen.
Related MD5s part of the same family, known to have been downloaded from the same IPs (220.127.116.11; 18.104.22.168) in the past:
Webroot SecureAnywhere users are proactively protected from these PUAs.
You can find more about Dancho Danchev at his LinkedIn Profile. You can also follow him on Twitter.