{"id":4201,"date":"2015-02-01T15:56:39","date_gmt":"2015-02-01T15:56:39","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=4201"},"modified":"2015-02-01T15:56:39","modified_gmt":"2015-02-01T15:56:39","slug":"software-association-llc-16-detection-rate-sevas-s-ibryte-opencandy","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/software-association-llc-16-detection-rate-sevas-s-ibryte-opencandy\/","title":{"rendered":"Software Association LLC – 16% Detection Rate – Sevas-S \/ iBryte \/ OpenCandy"},"content":{"rendered":"

Hi there! Just wanted to give you the heads up on a file called skypesetupfull.exe<\/strong> that’s digitally signed by Software Association LLC<\/strong>.\u00a0This is how it looks when double-clicking on the file and Software Association LLC appears as the publisher.<\/p>\n

\"Software<\/a><\/p>\n

Software Association LLC<\/strong> is located in Ukraine.\u00a0The certificate is issued by DigiCert SHA2 Assured ID Code Signing CA.<\/p>\n

\"Software<\/a><\/p>\n

The issue is that skypesetupfull.exe is not an official Skype download. If it was, it would have been digitally signed by Skype Software Sarl<\/strong>. Here’s how the authentic Skype<\/strong> looks like when you double click on it. Notice that the “Verified publisher” says “Skype Software Sarl”.
\n\"Skype<\/a><\/p>\n

The reason I’m writing this blog post is that the Software Association LLC file is detected by some of the anti-malware scanners at VirusTotal<\/a>. AVG detects skypesetupfull.exe as OpenCandy.F33<\/strong>, AVware names it Sevas-S Installer (fs)<\/strong>, Jiangmin detects it as Adware\/iBryte.hhhm<\/strong>, K7GW names it DoS-Trojan ( 200b63e51 )<\/strong> and Malwarebytes reports PUP.Optional.OpenCandy<\/strong>.<\/p>\n

\"Software<\/a><\/p>\n

Did you also find a file digitally signed by Software Association LLC? Where did you find it and are the anti-virus programs detecting it? Please share in the comments below.<\/p>\n

Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"

Hi there! Just wanted to give you the heads up on a file called skypesetupfull.exe that’s digitally signed by Software Association LLC.\u00a0This is how it looks when double-clicking on the file and Software Association LLC appears as the publisher. Software Association LLC is located in Ukraine.\u00a0The certificate is issued by DigiCert SHA2 Assured ID Code … Continue reading Software Association LLC – 16% Detection Rate – Sevas-S \/ iBryte \/ OpenCandy<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[184,385,384],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4201"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=4201"}],"version-history":[{"count":2,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4201\/revisions"}],"predecessor-version":[{"id":4206,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4201\/revisions\/4206"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=4201"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=4201"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=4201"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}