{"id":2058,"date":"2014-10-13T05:24:34","date_gmt":"2014-10-13T05:24:34","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=2058"},"modified":"2018-05-29T12:01:59","modified_gmt":"2018-05-29T12:01:59","slug":"webcellence-ltd-detected-by-avg-nod32-and-drweb","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/webcellence-ltd-detected-by-avg-nod32-and-drweb\/","title":{"rendered":"Webcellence Ltd. – Detected by AVG, NOD32 and DrWeb"},"content":{"rendered":"

Hi there! If you’ve been following me for the last year you know that I’ve been examining many software publishers that put a digital signature on their downloads. A few days ago\u00a0I found another publisher called Webcellence Ltd.<\/strong>.<\/p>\n

\"Webcellence<\/a><\/p>\n

To get more details on the publisher, you can view the certificate by right-clicking on the file, and looking under the Digital Signatures tab: According to the certificate we can see that Webcellence Ltd. is located in Moshav Ora<\/strong>, Israel<\/strong> and that the certificate is issued by VeriSign Class 3 Code Signing 2010 CA.<\/p>\n

\"Webcellence<\/a><\/p>\n

The reason I’m writing this blog post is that the Webcellence Ltd. file is detected by a few of the anti-virus progams at VirusTotal. DrWeb classifies adobe_flash_player.exe<\/strong> as Trojan.MulDrop5.38502<\/strong> and ESET-NOD32 calls it a variant of Win32\/InstallCore.QD<\/strong>.<\/p>\n

\"Webcellence<\/a>Although the file is named\u00a0adobe_flash_player.exe<\/strong>\u00a0it’s not the official download for the Adobe Flash Player. The real flash player installer should be digitally signed by the Adobe company.<\/p>\n

Did you also find an Webcellence Ltd.? Do you remember the download link? Please post it in the comments below and I’ll upload it to VirusTotal to see if that one is also detected.<\/p>\n

Thank you for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"

Hi there! If you’ve been following me for the last year you know that I’ve been examining many software publishers that put a digital signature on their downloads. A few days ago\u00a0I found another publisher called Webcellence Ltd.. To get more details on the publisher, you can view the certificate by right-clicking on the file, … Continue reading Webcellence Ltd. – Detected by AVG, NOD32 and DrWeb<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[104],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2058"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=2058"}],"version-history":[{"count":4,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2058\/revisions"}],"predecessor-version":[{"id":2066,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2058\/revisions\/2066"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=2058"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=2058"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=2058"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}