{"id":7130,"date":"2015-09-03T06:36:09","date_gmt":"2015-09-03T06:36:09","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=7130"},"modified":"2015-09-08T10:49:55","modified_gmt":"2015-09-08T10:49:55","slug":"llc-foto-tsentr-7-detection-rate-qvm10-1-malware-gen-amonetize","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/llc-foto-tsentr-7-detection-rate-qvm10-1-malware-gen-amonetize\/","title":{"rendered":"LLC FOTO-TSENTR – 7% Detection Rate – QVM10.1.Malware.Gen \/ Amonetize"},"content":{"rendered":"

Welcome! Just a short post on a publisher called LLC `FOTO-TSENTR `<\/strong>. I just found a download named Moboroboexe__15022_i1619995140_il543480.exe<\/a> that was digitally by this publisher, and it turns out that it is detected by some anti-virus programs.<\/p>\n

\"LLC<\/a><\/p>\n

You may see LLC `FOTO-TSENTR ` appear as the publisher when double-clicking on the Moboroboexe__15022_i1619995140_il543480.exe file. To view more information about the embedded certificate you can right-click on the file, then choose Properties and then select the Digital Signatures tab. According to the certificate we can see that LLC `FOTO-TSENTR ` seems to be located in Ukraine and that the certificate is issued by COMODO RSA Code Signing CA.<\/p>\n

\"LLC<\/a><\/p>\n

Here’s Comodo in the certificate chain:<\/p>\n

\"LLC<\/a><\/p>\n

The issue with the LLC `FOTO-TSENTR ` file is that it is detected by some of the anti-viruses. Here are some of the detection names: ADWARE\/Amonetize.Gen, a variant of Win32\/Amonetize.HU potentially unwanted and HEUR\/QVM10.1.Malware.Gen.<\/p>\n

\"LLC<\/a><\/p>\n

Since you probably came here after finding a file that was digitally signed by LLC `FOTO-TSENTR `, please share what kind of download it was and if it was detected by the anti-malwares at VirusTotal<\/a>.<\/p>\n

Thank you for reading.<\/p>\n

Update 2015-09-08<\/strong>: I found another file signed by\u00a0LLC FOTO-TSENTR<\/strong>. The detection rate has increased to 13\/56:<\/p>\n

\"LLC<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Welcome! Just a short post on a publisher called LLC `FOTO-TSENTR `. I just found a download named Moboroboexe__15022_i1619995140_il543480.exe that was digitally by this publisher, and it turns out that it is detected by some anti-virus programs. You may see LLC `FOTO-TSENTR ` appear as the publisher when double-clicking on the Moboroboexe__15022_i1619995140_il543480.exe file. To view … Continue reading LLC FOTO-TSENTR – 7% Detection Rate – QVM10.1.Malware.Gen \/ Amonetize<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[726,305],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7130"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=7130"}],"version-history":[{"count":4,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7130\/revisions"}],"predecessor-version":[{"id":7236,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7130\/revisions\/7236"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=7130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=7130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=7130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}