{"id":4975,"date":"2015-03-02T09:14:47","date_gmt":"2015-03-02T09:14:47","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=4975"},"modified":"2015-03-02T09:36:58","modified_gmt":"2015-03-02T09:36:58","slug":"installx-llc-51-anti-virus-detection-rate-installiq-safeinstall","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/installx-llc-51-anti-virus-detection-rate-installiq-safeinstall\/","title":{"rendered":"InstallX LLC &#8211; 51% Anti-Virus Detection Rate &#8211; InstallIQ \/ SafeInstall"},"content":{"rendered":"<p>Welcome! Lately I&#8217;ve been looking on the digital signatures on those files that push various types of unwanted programs. This morning I found a new file called <a href=\"http:\/\/www.freefixer.com\/library\/file\/filewhiz.exe-169205\/\">filewhiz.exe<\/a>, digitally signed by <strong>InstallX, LLC<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/InstallX-LLC-make-changes.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-4978\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/InstallX-LLC-make-changes.png\" alt=\"InstallX, LLC make changes\" width=\"490\" height=\"287\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/InstallX-LLC-make-changes.png 490w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/InstallX-LLC-make-changes-300x175.png 300w\" sizes=\"(max-width: 490px) 100vw, 490px\" \/><\/a><\/p>\n<p>If you have a InstallX, LLC file on your machine you may have noticed that InstallX, LLC is displayed as the publisher in the UAC dialog when double-clicking on the file. The certificate is issued by DigiCert Assured ID Code Signing CA-1.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/InstallX-LLC-certificate.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-4977\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/InstallX-LLC-certificate.png\" alt=\"InstallX, LLC certificate\" width=\"483\" height=\"450\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/InstallX-LLC-certificate.png 483w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/InstallX-LLC-certificate-300x279.png 300w\" sizes=\"(max-width: 483px) 100vw, 483px\" \/><\/a><\/p>\n<p>&nbsp;<\/p>\n<p>According to the certificate shown above, InstallX LCC is located in Sartell, Minnesota, US.<\/p>\n<p>The scan result from <a title=\"How To Scan a File for Viruses with VirusTotal\" href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a> below clearly shows why you probably should avoid the InstallX, LLC files. It is detected under names such as <strong>InstallIQ Installer<\/strong> (fs), <strong>W32.HfsAdware.D2DC<\/strong>, PUA.InstallIQ, PUP.Optional.SafeInstall.A, Riskware.Win32.Searcher.csnymk, Trj\/CI.A and InstallIQ Installer (fs).<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/InstallX-LLC-anti-virus-report.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-4976\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/InstallX-LLC-anti-virus-report.png\" alt=\"InstallX, LLC anti-virus report\" width=\"775\" height=\"440\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/InstallX-LLC-anti-virus-report.png 775w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/03\/InstallX-LLC-anti-virus-report-300x170.png 300w\" sizes=\"(max-width: 775px) 100vw, 775px\" \/><\/a><\/p>\n<p>When I tested the InstallX, LLC file it installed Web United and a bunch of other programs.<\/p>\n<p>I also found another <a href=\"http:\/\/www.freefixer.com\/library\/file\/java.exe-169209\/\">file signed by InstallX LLC, named java.exe<\/a>.<\/p>\n<p>Did you also find a file that was signed by InstallX, LLC? What kind of download was it and was it detected by the anti-malware software at <a title=\"How To Scan a File for Viruses with VirusTotal\" href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a>? Please share by posting a comment.<\/p>\n<p>Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Welcome! Lately I&#8217;ve been looking on the digital signatures on those files that push various types of unwanted programs. This morning I found a new file called filewhiz.exe, digitally signed by InstallX, LLC. If you have a InstallX, LLC file on your machine you may have noticed that InstallX, LLC is displayed as the publisher &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/installx-llc-51-anti-virus-detection-rate-installiq-safeinstall\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">InstallX LLC &#8211; 51% Anti-Virus Detection Rate &#8211; InstallIQ \/ SafeInstall<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[480],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4975"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=4975"}],"version-history":[{"count":1,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4975\/revisions"}],"predecessor-version":[{"id":4979,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/4975\/revisions\/4979"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=4975"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=4975"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=4975"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}