{"id":7977,"date":"2015-11-06T08:12:37","date_gmt":"2015-11-06T08:12:37","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=7977"},"modified":"2018-05-29T11:55:41","modified_gmt":"2018-05-29T11:55:41","slug":"click-to-start-24-detection-rate-outbrowse","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/click-to-start-24-detection-rate-outbrowse\/","title":{"rendered":"ClIck to StaRt &#8211; 24% Detection Rate &#8211; OutBrowse"},"content":{"rendered":"<p>Hello readers! Just a quick post on a publisher called <strong>ClIck to StaRt<\/strong> that I found while running some tests for the upcoming FreeFixer release. The suspicious file is named Animal Porn On Android.exe.<\/p>\n<p>The following screenshot shows the User Account Control dialog when running the ClIck to StaRt file:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/11\/ClIck-to-StaRt-publisher.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-7980\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/11\/ClIck-to-StaRt-publisher.png\" alt=\"ClIck to StaRt publisher\" width=\"491\" height=\"284\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/11\/ClIck-to-StaRt-publisher.png 491w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/11\/ClIck-to-StaRt-publisher-300x174.png 300w\" sizes=\"(max-width: 491px) 100vw, 491px\" \/><\/a><\/p>\n<p>To get more details on the publisher, you can view the certificate by right-clicking on the file, and looking under the Digital Signatures tab.. The screenshot below shows the <strong>Click\u00a0to StaRt<\/strong> certificate. From the certificate info we can see that ClIck to StaRt appears to be located in Dublin, Ireland.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/11\/ClIck-to-StaRt-certificate.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-7979\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/11\/ClIck-to-StaRt-certificate.png\" alt=\"ClIck to StaRt certificate\" width=\"387\" height=\"388\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/11\/ClIck-to-StaRt-certificate.png 387w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/11\/ClIck-to-StaRt-certificate-150x150.png 150w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/11\/ClIck-to-StaRt-certificate-300x300.png 300w\" sizes=\"(max-width: 387px) 100vw, 387px\" \/><\/a><\/p>\n<p>The reason I&#8217;m writing this blog post is that the ClIck to StaRt file is detected by many of the anti-virus software at <a title=\"How To Scan a File for Viruses with VirusTotal\" href=\"http:\/\/www.freefixer.com\/b\/scan-files-for-viruses-virustotal\/\">VirusTotal<\/a>. AVG reports <strong>Luhe.Fiha.A<\/strong>, McAfee reports <strong>Adware-OutBrowse.h<\/strong>, Avast names Animal Porn On Android.exe as <strong>Win32:Malware-gen<\/strong>, ClamAV detects it as <strong>Win.Adware.Outbrowse-1167<\/strong> and DrWeb detects it as <strong>Trojan.OutBrowse.1694<\/strong>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/11\/ClIck-to-StaRt-anti-virus-report.png\"><img loading=\"lazy\" class=\"alignnone size-full wp-image-7978\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/11\/ClIck-to-StaRt-anti-virus-report.png\" alt=\"ClIck to StaRt anti-virus report\" width=\"788\" height=\"444\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/11\/ClIck-to-StaRt-anti-virus-report.png 788w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2015\/11\/ClIck-to-StaRt-anti-virus-report-300x169.png 300w\" sizes=\"(max-width: 788px) 100vw, 788px\" \/><\/a><\/p>\n<p>Did you also find a ClIck to StaRt file? What kind of download was it? If you remember the download link, please post it in the comments below.<\/p>\n<p>Thanks for reading.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello readers! Just a quick post on a publisher called ClIck to StaRt that I found while running some tests for the upcoming FreeFixer release. The suspicious file is named Animal Porn On Android.exe. The following screenshot shows the User Account Control dialog when running the ClIck to StaRt file: To get more details on &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/click-to-start-24-detection-rate-outbrowse\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">ClIck to StaRt &#8211; 24% Detection Rate &#8211; OutBrowse<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[370,369,172],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7977"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=7977"}],"version-history":[{"count":1,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7977\/revisions"}],"predecessor-version":[{"id":7981,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/7977\/revisions\/7981"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=7977"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=7977"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=7977"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}