{"id":2626,"date":"2014-11-04T20:14:33","date_gmt":"2014-11-04T20:14:33","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=2626"},"modified":"2018-05-29T12:01:53","modified_gmt":"2018-05-29T12:01:53","slug":"andrey-hmelnikov-detected-as-kazy-multiplug","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/andrey-hmelnikov-detected-as-kazy-multiplug\/","title":{"rendered":"Andrey Hmelnikov &#8211; 35% Detection Rate &#8211; Kazy\/MultiPlug"},"content":{"rendered":"<p>Hi there! Just wanted to give you the heads up on files digitally signed by <strong>Andrey Hmelnikov<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Andrey-Hmelnikov-publisher.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-2628\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Andrey-Hmelnikov-publisher.png\" alt=\"Andrey  Hmelnikov publisher\" width=\"479\" height=\"309\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Andrey-Hmelnikov-publisher.png 479w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Andrey-Hmelnikov-publisher-300x193.png 300w\" sizes=\"(max-width: 479px) 100vw, 479px\" \/><\/a><\/p>\n<p>It is also possible to check a digital signature by looking at a file&#8217;s properties. Here&#8217;s a screenshot of the Andrey Hmelnikov certificate. He&#8217;s located in Russia.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Andrey-Hmelnikov-certificate.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-2627\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Andrey-Hmelnikov-certificate.png\" alt=\"Andrey  Hmelnikov certificate\" width=\"517\" height=\"459\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Andrey-Hmelnikov-certificate.png 517w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Andrey-Hmelnikov-certificate-300x266.png 300w\" sizes=\"(max-width: 517px) 100vw, 517px\" \/><\/a><\/p>\n<p>So, what does the anti-virus programs say about the Andrey Hmelnikov file? No problem, I just uploaded the file to <a href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a> and it turned out that many of the anti-virus programs detects the Andrey Hmelnikov file, with names such as <strong>Gen:Variant.Adware.Kazy<\/strong>, and\u00a0<strong>MultiPlug<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Andrey-Hmelnikov-virustotal.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-2630\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Andrey-Hmelnikov-virustotal.png\" alt=\"Andrey Hmelnikov virustotal\" width=\"754\" height=\"506\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Andrey-Hmelnikov-virustotal.png 754w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Andrey-Hmelnikov-virustotal-300x201.png 300w\" sizes=\"(max-width: 754px) 100vw, 754px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>To see more in details what changes the Andrey Hmelnikov file would do on a user&#8217;s computer I decided to run the file on my lab machine. The installer bundled some additional software such as <a title=\"Remove GoSave \u2013 Ads by GoSave Removal Instructions\" href=\"http:\/\/www.freefixer.com\/b\/remove-gosave-ads\/\">GoSave<\/a> and <a title=\"YouTubeAdBlocke \u2013 Removal Instructions\" href=\"http:\/\/www.freefixer.com\/b\/remove-youtubeadblocke\/\">YoutubeAdBlocke<\/a>.<\/p>\n<p>Did you also find an Andrey Hmelnikov file? Do you remember the download link? Please post it in the comments below and I&#8217;ll upload it to VirusTotal to see if that one is also detected.<\/p>\n<p>Thank you for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hi there! Just wanted to give you the heads up on files digitally signed by Andrey Hmelnikov. It is also possible to check a digital signature by looking at a file&#8217;s properties. Here&#8217;s a screenshot of the Andrey Hmelnikov certificate. He&#8217;s located in Russia. So, what does the anti-virus programs say about the Andrey Hmelnikov &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/andrey-hmelnikov-detected-as-kazy-multiplug\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Andrey Hmelnikov &#8211; 35% Detection Rate &#8211; Kazy\/MultiPlug<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[130,97],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2626"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=2626"}],"version-history":[{"count":2,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2626\/revisions"}],"predecessor-version":[{"id":2720,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/2626\/revisions\/2720"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=2626"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=2626"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=2626"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}