{"id":6299,"date":"2015-05-27T18:58:37","date_gmt":"2015-05-27T18:58:37","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=6299"},"modified":"2015-05-27T18:59:52","modified_gmt":"2015-05-27T18:59:52","slug":"artem-leonidov-detection-rate-multiplug","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/artem-leonidov-detection-rate-multiplug\/","title":{"rendered":"Artem Leonidov &#8211; 18% Detection Rate &#8211; MultiPlug"},"content":{"rendered":"<p>Hello readers! Just a short note on a publisher called <strong>Artem Leonidov<\/strong>.\u00a0This is how Artem Leonidov appears when running the file:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Artem-Leonidov-publisher.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6301\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Artem-Leonidov-publisher.png\" alt=\"Artem  Leonidov publisher\" width=\"507\" height=\"329\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Artem-Leonidov-publisher.png 507w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Artem-Leonidov-publisher-300x194.png 300w\" sizes=\"(max-width: 507px) 100vw, 507px\" \/><\/a><\/p>\n<p>The certificate is issued by Certum Code Signing CA. And the publisher is located in <strong>Russia<\/strong>:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Artem-Leonidov-certificate.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6300\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Artem-Leonidov-certificate.png\" alt=\"Artem  Leonidov certificate\" width=\"374\" height=\"365\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Artem-Leonidov-certificate.png 374w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Artem-Leonidov-certificate-300x292.png 300w\" sizes=\"(max-width: 374px) 100vw, 374px\" \/><\/a><\/p>\n<p>When I uploaded the file to <a title=\"How To Scan a File for Viruses with VirusTotal\" href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a> &#8211; as I usually do when I find something that looks suspicious &#8211; 18% of the scanners detected the file. The file is detected as <strong>a variant of Win32\/Adware.MultiPlug.LG<\/strong> by ESET-NOD32, <strong>PUP.Optional.Bundle<\/strong> by Malwarebytes, <strong>Trojan.Win32.Qudamah.Gen.6<\/strong> by Tencent and <strong>suspected of Heur.Malware-Cryptor.Multiplug<\/strong> by VBA32.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Artem-Leonidov-virus-total-report.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-6302\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Artem-Leonidov-virus-total-report.png\" alt=\"Artem Leonidov virus total report\" width=\"717\" height=\"445\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Artem-Leonidov-virus-total-report.png 717w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/05\/Artem-Leonidov-virus-total-report-300x186.png 300w\" sizes=\"(max-width: 717px) 100vw, 717px\" \/><\/a><\/p>\n<p>Did you also find a Artem Leonidov file? Do you remember where you downloaded it?<\/p>\n<p>Thank you for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello readers! Just a short note on a publisher called Artem Leonidov.\u00a0This is how Artem Leonidov appears when running the file: The certificate is issued by Certum Code Signing CA. And the publisher is located in Russia: When I uploaded the file to VirusTotal &#8211; as I usually do when I find something that looks &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/artem-leonidov-detection-rate-multiplug\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Artem Leonidov &#8211; 18% Detection Rate &#8211; MultiPlug<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[97,447],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/6299"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=6299"}],"version-history":[{"count":2,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/6299\/revisions"}],"predecessor-version":[{"id":6304,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/6299\/revisions\/6304"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=6299"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=6299"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=6299"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}