AirInstaller

Posted: October 18, 2013

Threat Metric

The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to give every identifiable malware threat. Our Threat Meter includes several criteria based off of specific malware threats to value their severity, reach and volume. The Threat Meter is able to give you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count, Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic breakdown of how all threats are ranked within our own extensive malware database. The scoring for each specific malware threat can be easily compared to other emerging threats to draw a contrast in its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to remove a threat or pursue additional analytical research for all types of computer users.

The following fields listed on the Threat Meter containing a specific value, are explained in detail below:

Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.

Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.

Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.

Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.

% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.

Ranking:	6,796
Threat Level:	2/10
Infected PCs:	4,331

First Seen:	October 18, 2013
Last Seen:	October 15, 2023
OS(es) Affected:	Windows

AirInstaller is a generic software bundler that links the installation routines of various legitimate programs with those of Potentially Unwanted Programs, such as adware. One of the most recent issues involving AirInstaller disguised AirInstaller as a fake security update for Flash, using AirInstaller's capabilities to deliver nine separate types of PUPs. Practicing safe browsing habits and keeping good anti-malware protection for your browser should be enough to block AirInstaller from installing unwanted software onto your PC, but if AirInstaller does happen to sneak a payload through your security, SpywareRemove.com malware experts urge you to take every measure required to remove AirInstaller as soon as possible.

AirInstaller: Where the Forecast Usually is for Advertisements

While high-level PC threats often use exploit kits and other means to install themselves directly, adware, browser hijackers and certain inauspicious toolbars often prefer to use slightly less invasive – but no less duplicitous – means of installing themselves. Software bundles are one of the favored ways of distributing the latter such software, and AirInstaller is one common software-bundling utility that's often used for these operations. AirInstaller bundles may be reconfigured to install various types of different applications but usually prefer payloads related to adware or unwanted toolbars.

As an example of just how maliciously AirInstaller may be used, malware experts have a case in point: the fraudulent Flash 'security update' offered at updatedflashplayer.com. This 'update' installs a version of Adobe's Flash Player rather than a security update, and also includes many separate extras, courtesy of AirInstaller.

Additional software installed includes LyricalParty, Bomblabio, Default Tab, Fast Free Converter, Linksicle, Iminent, SweetPacks and SySaver. The symptoms of these PUPs range from new advertisements in your browser to homepage hijacks, and most of them are reported to have histories of being difficult to remove once they're installed.

Cleaning the Adware that AirInstaller Dumps Onto Your Computer

Although AirInstaller doesn't have to be used for harmful purposes, AirInstaller almost always is involved in the installation of programs that don't benefit you and are from third parties unrelated to the main software being offered through download links. Considering that, you usually shouldn't need to pause and consider whether or not you should remove software that's installed by AirInstaller. This especially goes for any software that piggybacks off of fraudulent security updates in a delivery method that's little different from that of a common Trojan.

Because AirInstaller may, as seen above, install many types of different PUPs through a single installer, removing these PUPs individually may be extremely tedious. SpywareRemove.com malware experts consider anti-malware scans to be both more convenient and safer than most other alternatives. However, they also find it recommendable that you do your best to avoid software updates from third parties that are so likely to be used as vehicles for the distribution of AirInstaller and other bundling utilities that install low-level PC threats.

Technical Details

Additional Information

The following URL's were detected:

.netflowcorp.com