Expired UpdateStar Premium Edition - Free 6 Months License

[Shadowave]

UpdateStar Premium Edition provides 20 times more updates and upgrades, such as the Freeware edition. So, do not lose all your upgrades and save time seamless endless search for available software updates personnel. UpdateStar Premium Edition offers complete protection from PC vulnerability due to outdated software - for optimized PC security. It displays the security levels and alerts, updates, minor and major, and you can export the individual's profile of the software for backup purposes. UpdateStar With Premium you make sure to always use the most up-to-date software, maximizing all your experiences-user per day. UpdateStar covers all of your freeware, shareware, demos, commercial software, and includes special offers. Old Software can lead to problems and system crashes. You can even leave it vulnerable to attacks from the outside. UpdateStar puts a stop to this! As soon as a new version is available, UpdateStar lets you know automatically, and you can download the update now!

Note by BoraMurdar
​

This program is not really advertising supported but may offer to install third party programs that are not required for the program to run.
Program itself is not harmful but during update process of your "outdated" programs it downloads software bundled with adware.
These may include a toolbar, changing your homepage, default search engine or other third party programs.
Please watch the installation carefully to opt out if available.

 

[software182]

Great Promo

 

[clyde]

Eset doesn't like this page.I think it is a false positive?

 

[Venustus]

Eset doesn't like this page.I think it is a false positive?

Yes it's a FP

 

[BoraMurdar]

It's not quite that

UpdateStar GmbH is a software developer located in Berlin, Germany*. The publisher primarily developes software that can be classifed as adware. There is one additional code signing certificate issued to this publisher.

Digital Signature

Authority: COMODO CA Limited
Valid from: 1/2/2013 1:00:00 AM
Valid to: 1/3/2016 12:59:59 AM
Subject: CN=UpdateStar GmbH, O=UpdateStar GmbH, STREET=Hauptstraße 20, L=Berlin, S=Berlin, PostalCode=10827, C=DE
Issuer: CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB
Serial number: 009ed227324380b40dde36c8d31a33831f

Analysis


Reason Heuristics PUP.Installer.UpdateStarGmbH.S, Adware.UpdateStarGmbH.Q, 100.00%
VIPRE Antivirus InstallCore.b (fs), Trojan.Win32.Generic!BT, Adware.Win32.InstallCore.ba (v) 82.00%
ESET NOD32 Win32/InstallCore.JE.gen (variant), Win32/InstallCore.ES (variant), Win32/InstallCore.DC, Win32/InstallCore.BL, Win32/InstallCore.GN 82.00%
Avira AntiVir ADWARE/InstallCore.Gen7, APPL/InstallCore.AG.2, APPL/UpdateStar.IE, APPL/InstallCore.AX 80.00%
Rising Antivirus PE:Malware.XPACK-LNR/Heur!1.5594, PE:Malware.InstallCore!6.1B8 76.00%
Dr.Web Adware.InstallCore.113, Trojan.Packed.24524, Trojan.KillProc.30849, Adware.Downware.1283, Adware.InstallCore.133, Trojan.MulDrop5.10078 76.00%
Malwarebytes PUP.Optional.InstallCore.A, PUP.Optional.UpdateStar.A, PUP.Optional.Installcore 72.00%
Trend Micro House Call TROJ_GEN.F47V1230, TROJ_GEN.F47V0927, TROJ_GEN.F47V0131, TROJ_GEN.F47V0114, TROJ_GEN.F47V1208, TROJ_GEN.F47V1028, TROJ_GEN.F47V0306 72.00%
Vba32 AntiVirus Downware.InstallCore 70.00%
McAfee Artemis!31181921FD4E, Artemis!8BF2EB0733E4, Artemis!AD5E8193F922, Artemis!40C599D84F09, Artemis!56B39B26179D, Artemis!8AA7678D5823, Artemis!E4ECCE20BB09 70.00%

Files

19 / 68 (PUP)
7-zip.exe (e4ecce20bb0909eac6cd1d07239caab0)
16 / 68 (PUP)
realtek-high-definition-audio-driver.exe (c6510cc117127fd76ec7c0bff824211e)
16 / 68 (PUP)
minecraft-1-5-01.exe (77d999f952e60b53843fce6e72469ee5)
16 / 68 (PUP)
asus-smartdoctor.exe (94bcc1491cd6a5c113ac49c05544c00e)
16 / 68 (PUP)
icreinstall_skype.exe (c12f50c005f8e6b59bfc10194e216bcc)
16 / 68 (PUP)
7-zipws_en.exe (47bfaf37e413f7444c6589b2629d1f5a)
11 / 68 (PUP)
icreinstall_advanced-archive-password-recovery.exe (1ed96c9a7f63c5cb3d0b852c38db6817)
11 / 68 (PUP)
icreinstall_recover-my-files.exe (ab0fcdb46c383d072a224c395aea1228)
16 / 68 (PUP)
icreinstall_soundtaxi.exe (e9d22f3a0e30485b71c4a985bcf42b73)
11 / 68 (PUP)
web-freer.exe (4ff468b3b4c26ef904895037fc5dc11c)
11 / 68 (PUP)
icreinstall_updatestar.exe (8aa7678d58239c1b1948fbda30fb9aa5)
11 / 68 (PUP)
icreinstall_drivereasy.exe (397b0171cbf55864b9bf889c87bc6ec6)
11 / 68 (PUP)
rockstar-games-social-club.exe (188c39dea623f55623d87a874dd229e4)
16 / 68 (PUP)
skyhook-wireless-wi-fi-service.exe (b747836383ce652bd56d9e29c38bfb84)
13 / 68 (PUP)
icreinstall_acer-crystal-eye-webcam.exe (e0d3b52032b829ebe63b1835c92218a6)
11 / 68 (PUP)
icreinstall_samsung-usb-driver-for-mobile-phones.exe (ad21fa8675ca8be1bb7ff30b0c4c1c1e)
11 / 68 (PUP)
free-wordlist-generator.exe (6bf65ee8f891dce2784515d69bc756c3)
11 / 68 (PUP)
epsonnet-print.exe (f60381d24443299d3bf623a4d39e3345)
15 / 68 (PUP)
icreinstall_realtek-high-definition-audio-driver.exe (b9afe49d353a52455b5f52f936436d4b)
11 / 68 (PUP)
icreinstall_updatestar-drivers.exe (55986ec6d40ca4bf2f54c601a4fa7293)
15 / 68 (PUP)
icreinstall_bluetooth-stack-for-windows-by-toshiba.exe (0e68b65fec7a3d5ea3d1355b4e51c412)
11 / 68 (PUP)
icreinstall_recover-my-files.exe (e7cff4181362dbe9a1e278435f675daf)
12 / 68 (PUP)
mta-sa.exe (ac6aa6077eb381b13c9fd00c737d7ba7)
11 / 68 (PUP)
mcafee-security-scan-plus.exe (f15721349bacfde47ed9be8f8e4536fd)
13 / 68 (PUP)
icreinstall_samsung-usb-driver-for-mobile-phones.exe (ac7d113ef396d6276dfb911b68edf0bd)
1 / 68 (inconclusive)
icreinstall_nvidia-hd-audio-driver.exe (ae3ea930849b095e102ca98e1390ab5f)
11 / 68 (PUP)
icreinstall_wireless-wep-key-password-spy.exe (4caa7614d93b1da3ee8ac97595b5969b)
11 / 68 (PUP)
windows-7-codec-pack.exe (37ce7946cd8f788d2722ebb42197aff3)
11 / 68 (PUP)
updatestar-drivers.exe (a6178dd142bf37a24bcc34ce192ea844)
11 / 68 (PUP)
icreinstall_wifi-hopper.exe (9bf8441d1d6a7d6dcf244d2d3b72f353)



Downloads URLs for files signed by UpdateStar GmbH.
19 / 68 (PUP)
http://www.updatestar.com/.../2078253 (7-zip.exe)
16 / 68 (PUP)
http://www.updatestar.com/.../2074234 (minecraft-1-5-01.exe)
16 / 68 (PUP)
http://www.updatestar.com/.../2006404 (asus-smartdoctor.exe)
11 / 68 (PUP)
http://www.updatestar.com/.../2105277 (web-freer.exe)
11 / 68 (PUP)
http://www.updatestar.com/.../2093253 (rockstar-games-social-club.exe)
16 / 68 (PUP)
http://www.updatestar.com/.../2047653 (skyhook-wireless-wi-fi-service.exe)
11 / 68 (PUP)
http://www.updatestar.com/.../325247 (free-wordlist-generator.exe)
11 / 68 (PUP)
http://www.updatestar.com/.../2051522 (epsonnet-print.exe)
12 / 68 (PUP)
http://www.updatestar.com/.../1836358 (mta-sa.exe)
11 / 68 (PUP)
http://www.updatestar.com/.../2036636 (mcafee-security-scan-plus.exe)
11 / 68 (PUP)
http://www.updatestar.com/.../1632609 (windows-7-codec-pack.exe)
11 / 68 (PUP)
http://www.updatestar.com/.../1848042 (updatestar-drivers.exe)
11 / 68 (PUP)
http://www.updatestar.com/.../2078253 (7-zip.exe)
11 / 68 (PUP)
http://www.updatestar.com/.../1848042 (updatestar-drivers.exe)
16 / 68 (PUP)
http://www.updatestar.com/.../2079262 (mysql-server.exe)
13 / 68 (PUP)
http://www.updatestar.com/.../1848042 (updatestar-drivers.exe)
11 / 68 (PUP)
http://www.updatestar.com/.../2037068 (realtek-usb-card-reader.exe)
6 / 68 (PUP)
http://www.updatestar.com/.../2053779 (windows-7-codec-pack.exe)
1 / 68 (inconclusive)
http://www.updatestar.com/.../1384284 (manycam-remove-only.exe)
6 / 68 (PUP)
http://www.updatestar.com/.../2051535 (asus-ai-recovery.exe)

 

[Venustus]

Thanks for the analysis Bora!
I merely checked the URL,and not any particular file.

 

[BoraMurdar]

Thanks for the analysis Bora!
I merely checked the URL,and not any particular file.

I know I tried to download some installers from UpdateStar in the past, and ESET blocked it every time, so I just wanted to know why

 

[Venustus]

I know tried to download some installers from UpdateStar in the past, and ESET blocked it every time, so I just wanted to know why

Good "forensic" anaysis!

Cheers!

 

[Shadowave]

Thanks BoraMurdar for updating the post. It is RECOMMENDED to backup the drivers or THE ENTIRE SYSTEM before updating the drivers.

URLVoid 2/28 http://www.urlvoid.com/scan/updatestar.com/

1. SCUMWARE: http://hosts-file.net/?s=updatestar.com
2. hpHosts: http://www.scumware.org/search.scumware search IP: 91.250.81.8