{"id":2248,"date":"2014-10-22T08:26:52","date_gmt":"2014-10-22T08:26:52","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=2248"},"modified":"2018-05-29T12:01:57","modified_gmt":"2018-05-29T12:01:57","slug":"green-tech-software-llc-virustotal-report","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/green-tech-software-llc-virustotal-report\/","title":{"rendered":"Green Tech Software LLC &#8211; Detected as InstallBrain &#8211; 37% Detection Rate"},"content":{"rendered":"<p>Hello! If you are a regular visitor here on the FreeFixer blog you know that I&#8217;ve been looking on the certificates used to sign files that bundled various types of potentially unwanted softwares. Today I found another certificate, used by a publisher called <strong>Green Tech Software LLC<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-LLC-publisher.png\"><img loading=\"lazy\" class=\"alignnone wp-image-2251 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-LLC-publisher.png\" alt=\"Green Tech Software LLC publisher in the User Account Control\" width=\"490\" height=\"288\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-LLC-publisher.png 490w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-LLC-publisher-300x176.png 300w\" sizes=\"(max-width: 490px) 100vw, 490px\" \/><\/a><\/p>\n<p>This is how it looks when double-clicking on the file and Green Tech Software LLC appears as the publisher. You can also see the Green Tech Software LLC certificate by looking under the Digital Signature tab on the file&#8217;s properties. According to the certificate, Green Tech Software LLC is located in Beaverton, Oregon, USA.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-LLC-certificate.png\"><img loading=\"lazy\" class=\"alignnone wp-image-2250 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-LLC-certificate.png\" alt=\"Green Tech Software LLC certificate for the Softango downloader\" width=\"506\" height=\"446\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-LLC-certificate.png 506w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-LLC-certificate-300x264.png 300w\" sizes=\"(max-width: 506px) 100vw, 506px\" \/><\/a><\/p>\n<p>The download I found was the &#8220;<strong>Softango Downloader<\/strong>&#8220;. It downloads some third party software, in my case a <a href=\"http:\/\/en.wikipedia.org\/wiki\/Zip\">Zip<\/a> program, and during the installation process, it will offer the user to install additional software.<\/p>\n<p>The reason for posting about Green Tech Software LLC is that the file is detected by many of the anti-virus programs. F-Secure reports SoftangoDownloader_Zip.exe as <strong>Application.Bundler.InstallBrain<\/strong>, Malwarebytes detects it as <strong>PUP.Optional.Softango.A<\/strong> and VIPRE classifies it as <strong>InstallBrain (fs)<\/strong>. The detection rate is 37%<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-virustotal-report.png\"><img loading=\"lazy\" class=\"alignnone wp-image-2252 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-virustotal-report.png\" alt=\"Green Tech Software virus total report: InstallBrain, Eldorado, etc\" width=\"781\" height=\"531\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-virustotal-report.png 781w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-virustotal-report-300x203.png 300w\" sizes=\"(max-width: 781px) 100vw, 781px\" \/><\/a><\/p>\n<p>I decided to run the Green Tech Software LLC signed file, and it offered four additional programs called <strong>Speed Test<\/strong>, <strong>PC Performer<\/strong>, <a title=\"What is UnknownFile? And How To Remove It\" href=\"http:\/\/www.freefixer.com\/b\/remove-unknownfile\/\">UnknownFile<\/a> and <strong>MyPC Backup<\/strong> in the installer.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-bundle-list.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-2249\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-bundle-list.png\" alt=\"Green Tech Software bundle list\" width=\"658\" height=\"261\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-bundle-list.png 658w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/10\/Green-Tech-Software-bundle-list-300x118.png 300w\" sizes=\"(max-width: 658px) 100vw, 658px\" \/><\/a><\/p>\n<p>Since you probably came here after finding a file that was signed by Green Tech Software LLC, please share what kind of download it was and if it was reported by the anti-malware software at VirusTotal.<\/p>\n<p>Hope this blog post helped you avoid some potentially unwanted software on your machine.<\/p>\n<p>Thank you for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello! If you are a regular visitor here on the FreeFixer blog you know that I&#8217;ve been looking on the certificates used to sign files that bundled various types of potentially unwanted softwares. Today I found another certificate, used by a publisher called Green Tech Software LLC. This is how it looks when double-clicking on &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/green-tech-software-llc-virustotal-report\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Green Tech Software LLC &#8211; Detected as InstallBrain &#8211; 37% Detection Rate<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[189,129],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2248"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=2248"}],"version-history":[{"count":1,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2248\/revisions"}],"predecessor-version":[{"id":2253,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2248\/revisions\/2253"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=2248"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=2248"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=2248"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}