{"id":6263,"date":"2015-05-25T19:51:25","date_gmt":"2015-05-25T19:51:25","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=6263"},"modified":"2015-05-26T07:31:45","modified_gmt":"2015-05-26T07:31:45","slug":"vyacheslav-kulov-30-detection-rate-at-virustotal","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/vyacheslav-kulov-30-detection-rate-at-virustotal\/","title":{"rendered":"VYACHESLAV KULOV &#8211; 30% Detection Rate at VirusTotal"},"content":{"rendered":"<p>Hello! Lately I&#8217;ve been looking on the digital signatures on those files that push various types of unwanted programs. This morning I found a new file called Medal Of Honour PC Game Full version Free Download.exe, digitally signed by <strong>VYACHESLAV KULOV<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/VYACHESLAV-KULOV-publisher.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6266\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/VYACHESLAV-KULOV-publisher.png\" alt=\"VYACHESLAV KULOV publisher\" width=\"508\" height=\"317\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/VYACHESLAV-KULOV-publisher.png 508w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/VYACHESLAV-KULOV-publisher-300x187.png 300w\" sizes=\"(max-width: 508px) 100vw, 508px\" \/><\/a><\/p>\n<p>You can see who the signer is when double-clicking on an executable file. VYACHESLAV KULOV appears in the publisher field in the dialog that pops up and he appears to be located in Russia. The certificate is issued by Certum Code Signing CA.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/VYACHESLAV-KULOV-certificate.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6265\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/VYACHESLAV-KULOV-certificate.png\" alt=\"VYACHESLAV KULOV certificate\" width=\"435\" height=\"408\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/VYACHESLAV-KULOV-certificate.png 435w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/VYACHESLAV-KULOV-certificate-300x281.png 300w\" sizes=\"(max-width: 435px) 100vw, 435px\" \/><\/a><\/p>\n<p>When I uploaded the VYACHESLAV KULOV file to <a title=\"How To Scan a File for Viruses with VirusTotal\" href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a>, it came up with a 30% detection rate. The file is detected as <strong>a variant of Win32\/Adware.MultiPlug.KU<\/strong> by ESET-NOD32, <strong>Gen:Variant.Adware.Mplug<\/strong> by F-Secure, <strong>MultiPlug<\/strong> by Sophos and <strong>suspected of Heur.Malware-Cryptor.Multiplug<\/strong> by VBA32.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/VYACHESLAV-KULOV-anti-virus-report.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6264\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/VYACHESLAV-KULOV-anti-virus-report.png\" alt=\"VYACHESLAV KULOV anti-virus report\" width=\"730\" height=\"453\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/VYACHESLAV-KULOV-anti-virus-report.png 730w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/VYACHESLAV-KULOV-anti-virus-report-300x186.png 300w\" sizes=\"(max-width: 730px) 100vw, 730px\" \/><\/a><\/p>\n<p>The download bundled a bunch of other software, such as <a title=\"Remove PriceMinus \u2013 \u201cAds by PriceMinus\u201d Removal\" href=\"http:\/\/www.freefixer.com\/b\/remove-priceminus-ads-by-priceminus-removal\/\">PriceMinus<\/a> and <a title=\"Remove BestAdBlocker Adware\" href=\"http:\/\/www.freefixer.com\/b\/remove-bestadblocker-adware\/\">BestAdBlocker<\/a>.<\/p>\n<p>Did you also find a VYACHESLAV KULOV file? What kind of download was it? If you remember the download link, please post it in the comments below.<\/p>\n<p>Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello! Lately I&#8217;ve been looking on the digital signatures on those files that push various types of unwanted programs. This morning I found a new file called Medal Of Honour PC Game Full version Free Download.exe, digitally signed by VYACHESLAV KULOV. You can see who the signer is when double-clicking on an executable file. VYACHESLAV &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/vyacheslav-kulov-30-detection-rate-at-virustotal\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">VYACHESLAV KULOV &#8211; 30% Detection Rate at VirusTotal<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[97,447],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/6263"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=6263"}],"version-history":[{"count":3,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/6263\/revisions"}],"predecessor-version":[{"id":6284,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/6263\/revisions\/6284"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=6263"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=6263"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=6263"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}