» Clovermedia SLU
Digital Signature
Analysis
Files (50)
Downloads (6)
Distribution (3)
Related (19)

Clovermedia SLU

Publisher Information

Clovermedia SLU is a software developer located in Adeje, Santa Cruz De Tenerife in Spain*. The company is a primary distributor of unwanted software. There is one additional code signing certificate issued to this publisher.

Authority:

VeriSign, Inc.

Valid from:

2/14/2014 1:00:00 AM

Valid to:

2/15/2015 12:59:59 AM

Subject:

CN=Clovermedia SLU, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Clovermedia SLU, L=Adeje, S=Santa Cruz de tenerife, C=ES

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

0524a867f334951775cd16fbb2ed7e9b

Scanner detections:

Detections (100% detected)

Scan engine

Details

Detections

Reason Heuristics

PUP.Installer.ClovermediaSLU.F, PUP.ClovermediaSLU.G, PUP.Tuguu.ClovermediaU.Bundler (M), PUP.Tuguu.Cloverme.Bundler (M), PUP.Tuguu (M), PUP.Tuguu.Bundler

100.00%

Malwarebytes

PUP.Optional.DomaIQ, PUP.Optional.DomalQ

12.00%

Kaspersky

not-a-virus:AdWare.MSIL.DomaIQ

12.00%

Comodo Security

Application.Win32.DomaIQ.PUP, UnclassifiedMalware

12.00%

Avira AntiVirus

APPL/DomaIQ.Gen

12.00%

AVG

DomaIQ, DomaIQ_r.I, DomaIQ.X, Adware DomaIQ_r.I

12.00%

MicroWorld eScan

Gen:Variant.Adware.Graftor.139070, Adware.Generic.923740, Gen:Variant.Application.Bundler.DomaIQ.3, Gen:Variant.Adware.Symmi.41510, Gen:Variant.Adware.Kazy.374465

12.00%

Agnitum Outpost

PUA.DomaIQ, PUA.Lollipop

12.00%

Lavasoft Ad-Aware

Gen:Variant.Adware.Graftor.139070, Adware.Generic.923740, Gen:Variant.Application.Bundler.DomaIQ.3, Gen:Variant.Adware.Symmi.41510

12.00%

VIPRE Antivirus

DomaIQ, Trojan.Win32.Generic, Threat.4150696

12.00%

1 / 68 (Adware)

player.exe (952bed664bc8c5897e51eed41232b830)

1 / 68 (Adware)

player.exe (50f71b38d93ea6f8707f29c137181c05)

1 / 68 (Adware)

setup.exe (f2d2b4a49db9c7913fd6ede47b8d30a0)

1 / 68 (Adware)

player.exe (688733ce7889eea8bfca0ec77b64603a)

1 / 68 (Adware)

player.exe (5f4a9ec45902b34006242de802393a0d)

1 / 68 (Adware)

player.exe (bc381f57ad19d665e7d8c19567d67c20)

1 / 68 (Adware)

setup.exe (6729902bdc360e2a63ad43d18f1f2154)

1 / 68 (Adware)

player.exe (13218b565db73c7db167e7c0e25d98b3)

1 / 68 (Adware)

player.exe (3d78c22b282f7ed52d8fa8cca9e61812)

1 / 68 (Adware)

avast.exe (32a4ddcfa8641b05b4e89426f94cad00)

1 / 68 (Adware)

zipper.exe (c702d7c1ce1ac365e4708a56b68057ba)

1 / 68 (Adware)

00000003 (50b9babb5b57da815921533cbf426f9c)

1 / 68 (Adware)

player.exe (ca94b45d6c5f2725e50bdd3d51b27f5e)

1 / 68 (Adware)

setup.exe (49b53db44d6ace38abf34d7e59d1ae53)

1 / 68 (Adware)

00000000 (431df9c8a559091f080e2ebf900a430a)

1 / 68 (Adware)

setup.exe (6814cb25adff44043a2350aaea747a32)

1 / 68 (Adware)

setup.exe (b35538ca8f08e76870060031bf95d32b)

1 / 68 (Adware)

setup.exe (f392b9c89930803d44b3ae3cb6f28a24)

1 / 68 (Adware)

player.exe (1c006e6f17f74c4ba41af685e6ec50fd)

1 / 68 (Adware)

player.exe (f0840daceb5cbc97865d4d291d6bf6e1)

1 / 68 (Adware)

player.exe (53da74da09e2d768b639d5d6a84d9b07)

1 / 68 (Adware)

player.exe (d6bf87fc6be0d353840d6ebb1a23472c)

1 / 68 (Adware)

player.exe (c66f64c31d40e47f73f309ebd598956a)

1 / 68 (Adware)

player.exe (495f8aca390f8b9f5855d6c21e213a44)

1 / 68 (Adware)

player.exe (02519a99d481eae4c621dce5ac9c3104)

1 / 68 (Adware)

player.exe (a7f03d52db51e4af0af425832d66b467)

1 / 68 (Adware)

player.exe (7ad93772c7800e9106d449511cda10bc)

1 / 68 (Adware)

setup.exe (d305bb94d56da7692de596b6982ad188)

1 / 68 (Adware)

player.exe (9dc12f7ae2c276234ba3b5583231633d)

1 / 68 (Adware)

player.exe (ecf67ecc50cf8ee69dfb4d9820908aa6)

Latest 30 of 50 files

Downloads URLs for files signed by Clovermedia SLU.

1 / 68 (Adware)

http://winrar.com/.../Setup.exe (f2d2b4a49db9c7913fd6ede47b8d30a0)

1 / 68 (Adware)

http://www.lpcloudsvr0100.com/.../Player.exe (bc381f57ad19d665e7d8c19567d67c20)

1 / 68 (Adware)

http://ttb.famdls.com/download/request/.../RGGW7mMS?ClickID= (setup.exe)

23 / 68 (Adware)

http://www.lpcloudbox0120.com/.../Player.exe (641fd40ab50e3ddec3eabb5a1af45db7)

22 / 68 (Adware)

http://www.winrar.com/.../Setup.exe (2883362b25e9b14fda59a212d18e68b2)

20 / 68 (Adware)

http://dlp.allfiles129.com/osNKJn5OTZOmtC8TsgTwG0mzMkRPrZvBbOzhLCo6dJLg998gONMEZRZbo_P3qGlpptHPRt79UPSiFqg3O7FgGmbzN5ug0e2YAtEncTjjgs_FUOEKhhMqjALmxkadrdB6 (setup.exe)

Distribution

The following websites host and distribute files published by Clovermedia SLU.

www.winrar.com

dlp.allfiles129.com

www.lpcloudbox0120.com

The following certificate is also signed by Clovermedia SLU.

009737188425E0819038CFB58398A6812A (Feb 28, 2014 to Mar 01, 2015)

The following publishers (by Authenticode signature organization name) are related.

Payments Interactive SL

Payments Interactive S.L.

* Note, the details and description above are based on the code signing digital signature issued to Clovermedia SLU by VeriSign, Inc. on February 14, 2014 with the serial number '0524a867f334951775cd16fbb2ed7e9b'.

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.