» Clovermedia SL
Digital Signature
Analysis
Files (22)
Downloads (3)
Distribution (2)
Related (35)

Clovermedia SL

Publisher Information

Clovermedia SL is a software publisher located in Adeje, Santa Cruz De Tenerife in Spain*. The company is a primary distributor of unwanted software. Thre are 3 additional code signing certificates issued to this publisher.

Authority:

Thawte, Inc.

Valid from:

3/11/2014 8:00:00 PM

Valid to:

3/12/2015 7:59:59 PM

Subject:

CN=Clovermedia SL, O=Clovermedia SL, L=Adeje, S=Santa Cruz de Tenerife, C=ES

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

63da06e73c9409afd0724b0c61e7b745

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.ClovermediaSL.J, PUP.Installer.ClovermediaSL.I, PUP.Tuguu.Clovermedia.Bundler (M), PUP.Tuguu.Cloverme.Bundler (M), PUP.Tuguu (M)

100.00%

VIPRE Antivirus

Threat.4783262, Threat.4150696

18.18%

MicroWorld eScan

Gen:Variant.Adware.Strictor.56855, Application.Bundler.DomaIQ.Q

18.18%

avast!

DomaIQ-CC [PUP]

18.18%

Kaspersky

not-a-virus:AdWare.Win32.Lollipop

18.18%

Bitdefender

Gen:Variant.Adware.Strictor.56855, Application.Bundler.DomaIQ.Q

18.18%

Emsisoft Anti-Malware

Gen:Variant.Adware.Strictor.56855, Application.Bundler.DomaIQ.Q

18.18%

F-Secure

Gen:Variant.Adware.Strictor.56855, Application.Bundler.DomaIQ

18.18%

G Data

Gen:Variant.Adware.Strictor.56855, Application.Bundler.DomaIQ

18.18%

ESET NOD32

MSIL/DomaIQ.X potentially unwanted application, Win32/DomaIQ.BI potentially unwanted application

18.18%

1 / 68 (Adware)

setup_v2.exe (24cda4397bd3ebb844a8dcd64c5ec64f)

1 / 68 (Adware)

setup_v2.exe (43907adc23d5028ef5466faf54c0bf21)

1 / 68 (Adware)

setup_v2.exe (b74898161a9f7c39c1481e72dcc97c19)

1 / 68 (Adware)

setup_v2.exe (06207ab94ec00772d28aedfcc43bdba8)

1 / 68 (Adware)

fun_games.exe (2bd634e54a535fa22077f86c0012874f)

1 / 68 (Adware)

setup_v2.exe (408ba386209b477aae6f3b136a7871e1)

1 / 68 (Adware)

setup_v2.exe (522fe3d1aad71b64ca2c4eaf1ccbec87)

1 / 68 (Adware)

setup_v2.exe (6f8b9f09b59d91ad1c8ab1330f564266)

1 / 68 (Adware)

flvplayer update v13.0.0.206.exe (ecaea150cea4638001739acf2cf4815b)

1 / 68 (Adware)

setup_v2.exe (163f81bec7505fec1d19228de4b4b53a)

1 / 68 (Adware)

setup_v2.exe (e46bfe63072fdd192f45eef15877f949)

1 / 68 (Adware)

setup_v2.exe (b85044f96e3afbf0e62cf857317eb3d0)

1 / 68 (Adware)

Setup.exe (424d9f91834d9aa01fd8bd97315df3f2)

1 / 68 (Adware)

setup.exe (14869d42ffb048c845804e809761b642)

1 / 68 (Adware)

fun_games.exe (7ad4765e12c55d5be47477b1a33aa2bb)

1 / 68 (Adware)

setup_v2.exe (5e25cb71e602f7fe0d5633603ae8b87d)

1 / 68 (Adware)

setup_v2.exe (f053950e0f584442b3283acf08f1faa0)

1 / 68 (Adware)

setup_v2.exe (817292a8ea0474e681137ce2fa220659)

28 / 68 (Adware)

setup_v2.exe (363feea2bd2e801f2a405dcbef497282)

28 / 68 (Adware)

setup_v2.exe (69c95224286968beec3f35264df869dc)

28 / 68 (Adware)

setup_v2.exe (0dbd7f112899dd353f8349398f826832)

28 / 68 (Adware)

fun_games.exe (eb8f74689ffc605689e96256b4b00f77)

Downloads URLs for files signed by Clovermedia SL.

1 / 68 (Adware)

http://ttb.newallsoft.com/download/request/.../B9mOwwUs?PubID=79_3811_3027&ClickID=5883460590 (flvplayer update v13.0.0.206.exe)

28 / 68 (Adware)

http://ttb.javdownsoft.net/download/request/.../SEezCR5K?PubID=79_3811_3027&ClickID=5883256738 (setup_v2.exe)

28 / 68 (Adware)

http://dl.game-time.co/.../donwload?CID=277490&SID=US&AFID=296812&rd=1&AffiliateReferenceID=271783645-25715&__tc=1401138932233&fileName=exename (fun_games.exe)

Distribution

The following websites host and distribute files published by Clovermedia SL.

dl.game-time.co

ttb.javdownsoft.net

The certificates below are also signed by Clovermedia SL.

1121FAB97DC7FB0477755E47A50ECFDC36A0 (Apr 29, 2014 to Apr 30, 2015)

112168F91EF65A6728FFFA559E8ED6A2EEC5 (Feb 12, 2014 to Feb 13, 2015)

281161B1143F2B (Feb 13, 2014 to Feb 13, 2015)

The following publishers (by Authenticode signature organization name) are related.

Payments Interactive SL

Payments Interactive S.L.

Binarit personal computer peripheral equipment

Smart Secure Software S.l.

Video Plugin software SL

30 of 35 publishers

* Note, the details and description above are based on the code signing digital signature issued to Clovermedia SL by Thawte, Inc. on March 11, 2014 with the serial number '63da06e73c9409afd0724b0c61e7b745'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.