{"id":4703,"date":"2015-02-20T12:02:36","date_gmt":"2015-02-20T12:02:36","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=4703"},"modified":"2018-05-29T12:00:30","modified_gmt":"2018-05-29T12:00:30","slug":"ooo-premer-servis-anti-virus-detection-rate-installcore","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/ooo-premer-servis-anti-virus-detection-rate-installcore\/","title":{"rendered":"OOO PREM&#8221;ER-SERVIS &#8211; 11% Anti-Virus Detection Rate &#8211; InstallCore"},"content":{"rendered":"<p>Welcome! I was playing around and testing some downloads when I found a file digitally signed by <strong>OOO PREM&#8221;ER-SERVIS<\/strong>.\u00a0The OOO PREM&#8221;ER-SERVIS certificate shows that the publisher is located in Moscow, Russia.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/OOO-PREMER-SERVIS-certificate.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-4705\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/OOO-PREMER-SERVIS-certificate.png\" alt=\"OOO PREM''ER-SERVIS certificate\" width=\"430\" height=\"466\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/OOO-PREMER-SERVIS-certificate.png 430w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/OOO-PREMER-SERVIS-certificate-276x300.png 276w\" sizes=\"(max-width: 430px) 100vw, 430px\" \/><\/a><\/p>\n<p>The problem here is that if adobe_flash_setup.exe really was an installer file for Adobe Flash Player, it should have been signed by <strong>Adobe Systems Incorporated<\/strong> and not by some unknown company. Here&#8217;s how the <strong>authentic Adobe Flash Player<\/strong> looks like when you double click on it. Notice that the &#8220;Verified publisher&#8221; says &#8220;Adobe Systems Incorporated&#8221;.<br \/>\n<a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Adobe-Systems-Incorporated-Adobe-Flashplayer-Installer.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-3187\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Adobe-Systems-Incorporated-Adobe-Flashplayer-Installer.png\" alt=\"Adobe Systems Incorporated - Adobe Flashplayer Installer\" width=\"534\" height=\"324\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Adobe-Systems-Incorporated-Adobe-Flashplayer-Installer.png 534w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/11\/Adobe-Systems-Incorporated-Adobe-Flashplayer-Installer-300x182.png 300w\" sizes=\"(max-width: 534px) 100vw, 534px\" \/><\/a><\/p>\n<p>Right now, 6 of the antimalware scanners detected the file. Some of the detection names for the adobe_flash_setup.exe file are Adware\/InstallCore.783896, a variant of Win32\/InstallCore.WX potentially unwanted, Trojan ( 004b61851 ) and Trojan ( 004b61851 ).<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/OOO-PREMER-SERVIS-anti-virus-report.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-4704\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/OOO-PREMER-SERVIS-anti-virus-report.png\" alt=\"OOO PREM''ER-SERVIS anti-virus report\" width=\"752\" height=\"426\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/OOO-PREMER-SERVIS-anti-virus-report.png 752w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/02\/OOO-PREMER-SERVIS-anti-virus-report-300x169.png 300w\" sizes=\"(max-width: 752px) 100vw, 752px\" \/><\/a><\/p>\n<p>Did you also find a file digitally signed by OOO PREM&#8221;ER-SERVIS? Where did you find it and are the anti-virus programs detecting it? Please share in the comments below.<\/p>\n<p>Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Welcome! I was playing around and testing some downloads when I found a file digitally signed by OOO PREM&#8221;ER-SERVIS.\u00a0The OOO PREM&#8221;ER-SERVIS certificate shows that the publisher is located in Moscow, Russia. The problem here is that if adobe_flash_setup.exe really was an installer file for Adobe Flash Player, it should have been signed by Adobe Systems &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/ooo-premer-servis-anti-virus-detection-rate-installcore\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">OOO PREM&#8221;ER-SERVIS &#8211; 11% Anti-Virus Detection Rate &#8211; InstallCore<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[104,448,447],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4703"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=4703"}],"version-history":[{"count":2,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4703\/revisions"}],"predecessor-version":[{"id":4707,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4703\/revisions\/4707"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=4703"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=4703"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=4703"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}