{"id":5832,"date":"2015-04-12T11:26:00","date_gmt":"2015-04-12T11:26:00","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=5832"},"modified":"2018-05-29T11:58:31","modified_gmt":"2018-05-29T11:58:31","slug":"app-secure-llc-30-anti-virus-detection-softpulse-strictor-hfsadware-driverupd","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/app-secure-llc-30-anti-virus-detection-softpulse-strictor-hfsadware-driverupd\/","title":{"rendered":"App secure LLC &#8211; 30% Anti-Virus Detection &#8211; SoftPulse \/ Strictor \/ HfsAdware \/ DriverUpd"},"content":{"rendered":"<p>Hello! If you are a regular here on the FreeFixer blog you know that I&#8217;ve been looking on the certificates used to sign files that bundled various types of unwanted software. Today I found another certificate, used by a publisher called <strong>App secure LLC<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/04\/App-secure-LLC-publisher.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-5834\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/04\/App-secure-LLC-publisher.png\" alt=\"App secure LLC publisher\" width=\"502\" height=\"292\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/04\/App-secure-LLC-publisher.png 502w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/04\/App-secure-LLC-publisher-300x174.png 300w\" sizes=\"(max-width: 502px) 100vw, 502px\" \/><\/a><\/p>\n<p>Windows will display App secure LLC as the publisher when running the file. Information about a digital signature and the certificate can also be found under the Digital Signature tab. The screenshot below shows the App secure LLC certificate. From the certificate info we can see that App secure LLC appears to be located in Wilmington, Delaware in the US.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/04\/App-secure-LLC-certificate.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-5833\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/04\/App-secure-LLC-certificate.png\" alt=\"App secure LLC certificate\" width=\"417\" height=\"405\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/04\/App-secure-LLC-certificate.png 417w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/04\/App-secure-LLC-certificate-300x291.png 300w\" sizes=\"(max-width: 417px) 100vw, 417px\" \/><\/a><\/p>\n<p>When I uploaded the App secure LLC file to <a title=\"How To Scan a File for Viruses with VirusTotal\" href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a>, it came up with a 30% detection rate. The file is detected as <strong>Win32:SoftPulse-FZ [PUP]<\/strong> by Avast, <strong>W32.HfsAdware.8302<\/strong> by Bkav, <strong>Gen:Variant.Strictor.83505 (B)<\/strong> by Emsisoft, <strong>a variant of Win32\/SoftPulse.AB potentially unwanted<\/strong> by ESET-NOD32, <strong>not-a-virus:Downloader.Win32.DriverUpd.wui<\/strong> by Kaspersky and <strong>SoftPulse<\/strong> by Sophos.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/04\/App-secure-LLC-virus-report.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-5835\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/04\/App-secure-LLC-virus-report.png\" alt=\"App secure LLC virus report\" width=\"742\" height=\"433\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/04\/App-secure-LLC-virus-report.png 742w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/04\/App-secure-LLC-virus-report-300x175.png 300w\" sizes=\"(max-width: 742px) 100vw, 742px\" \/><\/a><\/p>\n<p>The company web site appears to be\u00a0<strong>APPSECURELLC.COM<\/strong>. Here&#8217;s some of the info from the WHOIS database:<\/p>\n<pre>Registrant Name: Roberto Blangino \r\nRegistrant Organization: App Software LLC\r\nRegistrant Street: 501 Silverside Road, Suite 105 \r\nRegistrant City: Wilmington\r\nRegistrant State\/Province: Delaware\r\nRegistrant Postal Code: 19809\r\nRegistrant Country: US<\/pre>\n<p>I checked some of services that provides domain info based on an IP address, and the following sites appears to be or have been located on the same IP:<\/p>\n<ul>\n<li>123maxmusic.com<\/li>\n<li>88dls.com<\/li>\n<li>acpsoftwarellc.com<\/li>\n<li>www.magnoplayer.com<\/li>\n<li>www.newvideoplayer.com<\/li>\n<\/ul>\n<p>Did you also find a file that was signed by App secure LLC? What kind of download was it and was it detected by the anti-virus scanners at <a title=\"How To Scan a File for Viruses with VirusTotal\" href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a>? Please share in posting comments below.<\/p>\n<p>Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello! If you are a regular here on the FreeFixer blog you know that I&#8217;ve been looking on the certificates used to sign files that bundled various types of unwanted software. Today I found another certificate, used by a publisher called App secure LLC. Windows will display App secure LLC as the publisher when running &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/app-secure-llc-30-anti-virus-detection-softpulse-strictor-hfsadware-driverupd\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">App secure LLC &#8211; 30% Anti-Virus Detection &#8211; SoftPulse \/ Strictor \/ HfsAdware \/ DriverUpd<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[607,506,117,306,510,511],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/5832"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=5832"}],"version-history":[{"count":3,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/5832\/revisions"}],"predecessor-version":[{"id":5838,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/5832\/revisions\/5838"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=5832"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=5832"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=5832"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}