{"id":7335,"date":"2015-09-11T08:33:43","date_gmt":"2015-09-11T08:33:43","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=7335"},"modified":"2018-05-29T11:55:46","modified_gmt":"2018-05-29T11:55:46","slug":"llc-tele-servis-5-detection-rate-win32amonetize-im-pup-optional-bundle","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/llc-tele-servis-5-detection-rate-win32amonetize-im-pup-optional-bundle\/","title":{"rendered":"LLC “TELE-SERVIS” – 5% Detection Rate – Win32\/Amonetize.IM \/ PUP.Optional.Bundle"},"content":{"rendered":"

Hello readers! Just wanted to let you know about a publisher called LLC “TELE-SERVIS”<\/strong> before going back to writing some code for FreeFixer.<\/p>\n

\"LLC<\/a><\/p>\n

This is how it looks when double-clicking on the file<\/a> and LLC TELE-SERVIS<\/strong> appears as the publisher. You can also view the certificate by right-clicking on the file, and looking under the Digital Signature tab: According to the embedded certificate we can see that LLC “TELE-SERVIS” appears to be located in Kiev<\/strong> in Ukraine<\/strong> and that the certificate is issued by COMODO RSA Code Signing CA.<\/p>\n

\"LLC<\/a><\/p>\n

Here’s a screenshot that shows more clearly that Comodo has issued the certificate:<\/p>\n

\"LLC<\/a><\/p>\n

The problem is that FlashPlayer__6741_i1639556241_il15144.exe<\/a> is not an official Adobe Flash Player download. If it was, it would be signed by Adobe Systems Incorporated<\/strong>. Here’s how the authentic Adobe Flash Player<\/strong> looks like when you double click on it. Notice that the “Verified publisher” says “Adobe Systems Incorporated”.
\n\"Adobe<\/a><\/p>\n

Here’s how the installer looks like:<\/p>\n

\"LLC<\/a><\/p>\n

As you can see, this is not the official Adobe Flash Installer.<\/p>\n

So, what does the anti-virus programs say about the LLC”TELE-SERVIS file? No problem, I just uploaded the file to VirusTotal<\/a> and it turned out that a few of the anti-virus programs detects the LLC “TELE-SERVIS” file, with names such as a variant of Win32\/Amonetize.IM<\/strong> potentially unwanted and PUP.Optional.Bundle<\/strong>.<\/p>\n

\"LLC<\/a><\/p>\n

Since you probably came here after finding a download that was signed by LLC “TELE-SERVIS”, please share what kind of download it was and if it was reported by the anti-virus tools at VirusTotal<\/a>.<\/p>\n

Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"

Hello readers! Just wanted to let you know about a publisher called LLC “TELE-SERVIS” before going back to writing some code for FreeFixer. This is how it looks when double-clicking on the file and LLC TELE-SERVIS appears as the publisher. You can also view the certificate by right-clicking on the file, and looking under the … Continue reading LLC “TELE-SERVIS” – 5% Detection Rate – Win32\/Amonetize.IM \/ PUP.Optional.Bundle<\/span> →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[726,304,305],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7335"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=7335"}],"version-history":[{"count":4,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7335\/revisions"}],"predecessor-version":[{"id":7345,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7335\/revisions\/7345"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=7335"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=7335"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=7335"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}