{"id":851,"date":"2014-06-09T07:12:29","date_gmt":"2014-06-09T07:12:29","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=851"},"modified":"2018-05-29T12:02:51","modified_gmt":"2018-05-29T12:02:51","slug":"v-x-technocom-publisher","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/v-x-technocom-publisher\/","title":{"rendered":"V.X. Technocom &#8211; Bundling, VirusTotal Detections and Digital Signature Information"},"content":{"rendered":"<p>If you&#8217;ve been following my recent posts here on the FreeFixer blog, you know that I&#8217;ve been looking at files that have a valid digital signature and bundle various types of potentially unwanted programs. A few days ago I found another publisher named <strong>V.X. Technocom<\/strong> that bundles software.<\/p>\n<p>The file was called\u00a0<a href=\"http:\/\/www.freefixer.com\/library\/file\/Game_of_Thrones_S04E02_HDTV_x264-2HD%5Bettv%5D.exe-129546\/\">Game_of_Thrones_S04E02_HDTV_x264-2HD[ettv].exe<\/a>.<\/p>\n<p>If you have a <strong>V.X. Technocom<\/strong> download on your computer you may have noticed that <strong>Closed Joint-Stock Company &#8220;V.X. Technocom<\/strong> appears as the publisher in the UAC dialog when double-clicking on the file.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-publisher.png\"><img loading=\"lazy\" class=\"alignnone wp-image-857 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-publisher.png\" alt=\"V.X. Technocom Publisher\" width=\"477\" height=\"290\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-publisher.png 477w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-publisher-300x182.png 300w\" sizes=\"(max-width: 477px) 100vw, 477px\" \/><\/a><\/p>\n<p>You can also see the\u00a0<strong>V.X. Technocom<\/strong>\u00a0certificate by looking under the Digital Signature tab on the file&#8217;s properties. According to the certificate,\u00a0<strong>V.X. Technocom<\/strong> is located in Moscow, Russia.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-digital-signature.png\"><img loading=\"lazy\" class=\"alignnone wp-image-855 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-digital-signature.png\" alt=\"v.x.-technocom-digital-signature\" width=\"431\" height=\"526\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-digital-signature.png 431w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-digital-signature-245x300.png 245w\" sizes=\"(max-width: 431px) 100vw, 431px\" \/><\/a><\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-moscow-russia.png\"><img loading=\"lazy\" class=\"alignnone wp-image-856 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-moscow-russia.png\" alt=\"v.x.-technocom-moscow-russia\" width=\"920\" height=\"596\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-moscow-russia.png 920w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-moscow-russia-300x194.png 300w\" sizes=\"(max-width: 920px) 100vw, 920px\" \/><\/a><\/p>\n<p>These are the current VirusTotal detections for the file. <strong>Adware\/Savy.ahdd<\/strong> and <strong>GetPrivate<\/strong> are the detection names by AntiVir and VIPRE:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-closed-joint-stock-company.png\"><img loading=\"lazy\" class=\"alignnone wp-image-854 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-closed-joint-stock-company.png\" alt=\"v.x.-technocom-closed-joint-stock-company-getprivate-adware-savy.ahdd\" width=\"802\" height=\"366\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-closed-joint-stock-company.png 802w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-closed-joint-stock-company-300x136.png 300w\" sizes=\"(max-width: 802px) 100vw, 802px\" \/><\/a><\/p>\n<p>Since the download was detected I decided to give it a try to see what it installed. During my test I could see <strong>Aducky<\/strong>,\u00a0<strong>Sweet-Page<\/strong>, <strong>ShopperFriend<\/strong> and <strong><a title=\"Ads By BlockAndSurf \u2013 Removal Instructions\" href=\"http:\/\/www.freefixer.com\/b\/ads-by-blockandsurf-removal\/\">Block-N-Surf<\/a><\/strong>, as shown in the screenshots below:<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-sweetpage.png\"><img loading=\"lazy\" class=\"alignnone wp-image-858 size-medium\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-sweetpage-300x286.png\" alt=\"v.x.-technocom is bundling SweetPage\" width=\"300\" height=\"286\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-sweetpage-300x286.png 300w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-sweetpage.png 498w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a> <a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-block-n-surf.png\"><img loading=\"lazy\" class=\"alignnone wp-image-853 size-medium\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-block-n-surf-300x286.png\" alt=\"v.x.-technocom is bundling Block-N-Surf\" width=\"300\" height=\"286\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-block-n-surf-300x286.png 300w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x.-technocom-block-n-surf.png 503w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a> <a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x-technocom-shopperfriend.png\"><img loading=\"lazy\" class=\"alignnone wp-image-852 size-medium\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x-technocom-shopperfriend-300x286.png\" alt=\"v.x-technocom ShopperFriend\" width=\"300\" height=\"286\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x-technocom-shopperfriend-300x286.png 300w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/v.x-technocom-shopperfriend.png 503w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/aducky.png\"><img loading=\"lazy\" class=\"alignnone size-medium wp-image-859\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/aducky-300x288.png\" alt=\"aducky\" width=\"300\" height=\"288\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/aducky-300x288.png 300w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/aducky.png 502w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>After accepting the offers a bunch of new files and settings appeared. Here are some of the files:<\/p>\n<ul>\n<li>WindowsUpdater.exe<\/li>\n<li>winsystem.exe<\/li>\n<li>svcsystem.exe<\/li>\n<li>PluginService.exe<\/li>\n<li>privoxy.exe<\/li>\n<\/ul>\n<p>A bunch of new ads also started to pop up, labeled <strong>monkeytize<\/strong> and <a title=\"Ads by Costmin and RightCoupon \u2013 Removal Instructions\" href=\"http:\/\/www.freefixer.com\/b\/ads-by-costmin-rightcoupon-remove\/\"><strong>RightCoupon<\/strong><\/a>.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/monkeytize-ads.png\"><img loading=\"lazy\" class=\"alignnone wp-image-861 size-medium\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/monkeytize-ads-300x156.png\" alt=\"Monkeytize Ads\" width=\"300\" height=\"156\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/monkeytize-ads-300x156.png 300w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/06\/monkeytize-ads.png 427w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<p>You can remove these unwanted ads, files and settings with help from the <a title=\"About FreeFixer\" href=\"http:\/\/www.freefixer.com\/b\/about-freefixer\/\">FreeFixer<\/a> tool.<\/p>\n<p>Where did you find the\u00a0<strong>V.X. Technocom<\/strong> download? What kind of download was it?<\/p>\n","protected":false},"excerpt":{"rendered":"<p>If you&#8217;ve been following my recent posts here on the FreeFixer blog, you know that I&#8217;ve been looking at files that have a valid digital signature and bundle various types of potentially unwanted programs. A few days ago I found another publisher named V.X. Technocom that bundles software. The file was called\u00a0Game_of_Thrones_S04E02_HDTV_x264-2HD[ettv].exe. If you have &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/v-x-technocom-publisher\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">V.X. Technocom &#8211; Bundling, VirusTotal Detections and Digital Signature Information<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/851"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=851"}],"version-history":[{"count":9,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/851\/revisions"}],"predecessor-version":[{"id":870,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/851\/revisions\/870"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=851"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=851"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=851"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}