Covus Pro GmbH

Publisher Information

Covus Pro GmbH is a software publisher located in Berlin, Germany*. The company is a primary distributor of unwanted software. Thre are 4 additional code signing certificates issued to this publisher.
Authority:
COMODO CA Limited

Valid from:
2/5/2013 1:00:00 AM

Valid to:
2/6/2014 12:59:59 AM

Subject:
CN=Covus Pro GmbH, O=Covus Pro GmbH, STREET=Schwedter Str. 263, L=Berlin, S=Berlin, PostalCode=10119, C=DE

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00b3ec5582300459ebaeaa1dcabdecf1a8

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Installer.CovusProGmbH.AA, PUP.Installer.CovusProGmbH.h, PUP.Installer.CovusProGmbH.DD, PUP.Installer.CovusProGmbH.a, PUP.Covus.CovusPro.Bundler (M), PUP.Covus (M)
100.00%

ESET NOD32
MSIL/DownloadGuide (variant)
5.71%

Malwarebytes
PUP.Optional.BundleInstaller.A
2.86%

ESET NOD32
MSIL/DownloadGuide.D potentially unwanted application
2.86%

Dr.Web
Trojan.DownLoader9.26559
2.86%

1 / 68      (Adware)
skype_setup_download.exe (DownloadGuide)  (c3150af49dee15a3dfb9c0c236a77fc1)

1 / 68      (Adware)
pdfcreator_setup_download.exe (DownloadGuide)  (004704d4388692c62630f74bec2b7e56)

1 / 68      (Adware)
adwcleaner_setup_download.exe (DownloadGuide)  (024e37840c5e12161f2c4c9e29b98887)

1 / 68      (Adware)
royal-skat_setup_download.exe (DownloadGuide)  (76d1365c2ce3d28a28095e973aa137ed)

1 / 68      (Adware)
skype_setup_download.exe (DownloadGuide)  (0875e6bd503a64d23ffb0052094ec40a)

1 / 68      (Adware)
ccleaner_setup_download.exe (DownloadGuide)  (4af9db8be189c1f9def8c37cdae008fd)

1 / 68      (Adware)
pdfcreator_setup_download.exe (DownloadGuide)  (9e20aeb21d79163c94f68c5badcda22f)

1 / 68      (Adware)
vlc-media-player_setup_download.exe (DownloadGuide)  (cb9bbb52e845ce7a94f97595c2b4ebb6)

1 / 68      (Adware)
mkv-player_setup_download.exe (DownloadGuide)  (7b25ec1c8c8f58975683c8c68398196f)

1 / 68      (Adware)
skype_setup_download.exe (DownloadGuide)  (3141879d01f54840314cfbf374f3a75d)

1 / 68      (Adware)

1 / 68      (Adware)
vlc-media-player_setup_download.exe (DownloadGuide)  (a2e6a5613cb2fcfc01528dd365f2651a)

1 / 68      (Adware)
google-chrome_setup_download.exe (DownloadGuide)  (dd394296b988e4320c508de8d33d2ec0)

1 / 68      (Adware)
wavepad_setup_download.exe (DownloadGuide)  (192b65f294edc147473f218c4d9305ed)

1 / 68      (Adware)
opera_setup_download.exe (DownloadGuide)  (35f37e51cab429572e4c6ab411aefc89)

1 / 68      (Adware)
mozilla-thunderbird_setup_download.exe (DownloadGuide)  (fa959d0a0040bcafa9f0a63e4b760e91)

1 / 68      (Adware)
gimp_setup_download.exe (DownloadGuide)  (24dbff5d2d46e2e724f879cf79508670)

1 / 68      (Adware)

1 / 68      (Adware)
gimp_setup_download.exe (DownloadGuide)  (7a01b16d36c6296d2647bdce3c12b1e9)

1 / 68      (Adware)
paint.net_setup_download.exe (DownloadGuide)  (fee47a164836dd8c989e05c0b1f4e56d)

1 / 68      (Adware)
hypercam-3_setup_download.exe (DownloadGuide)  (a3a7458b13169c6c529f6c62179bed73)

1 / 68      (Adware)
libreoffice_setup_download.exe (DownloadGuide)  (4819b33a7426da9a37d1c903c198f9bb)

1 / 68      (Adware)

1 / 68      (Adware)
notepad++_setup_download.exe (DownloadGuide)  (2958d909c8e48ae047360e78a819d975)

1 / 68      (Adware)
transcribe!_setup_download.exe (DownloadGuide)  (268fd26d97c910a2047e3501529ced5a)

1 / 68      (Adware)
adwcleaner_setup_download.exe (DownloadGuide)  (7ae93341f9e15f0a9013803d453ef81a)

3 / 68      (Adware)

1 / 68      (Adware)
minecraft_setup_download.exe (DownloadGuide)  (43bf3d45c6fee0b724bf1088443e1326)

1 / 68      (Adware)
mozilla-thunderbird_setup_download.exe (DownloadGuide)  (5cb25935ef1b00d8f839e56b9f81ddf9)

1 / 68      (Adware)
7-zip-(32-bit)_setup_download.exe (DownloadGuide)  (5a2f274f1252fe16d732c06d83b099be)

 
Latest 30 of 35 files

Downloads URLs for files signed by Covus Pro GmbH.

3 / 68      (Adware)
http://mozilla-firefox.pro.de/.../download_do.php?id=15790  (mozilla-firefox_setup_download.exe)

1 / 68      (Adware)

1 / 68      (Adware)
http://hackthegame.pro.de/.../download_do.php?id=406  (hackthegame_setup_download.exe)

The following websites host and distribute files published by Covus Pro GmbH.

The certificates below are also signed by Covus Pro GmbH.

00B62BB34DE8E3FE56  (Mar 11, 2015 to Feb 23, 2016)

404873D3F4F98D31  (Feb 23, 2015 to Feb 23, 2016)

249E4122D3206380E8C5DB9AFC085C73  (Jan 23, 2014 to Jan 24, 2016)

61A79175C602D4C6B8D777D3A741B75A  (Feb 05, 2014 to Feb 06, 2015)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Covus Pro GmbH by COMODO CA Limited on February 05, 2013 with the serial number '00b3ec5582300459ebaeaa1dcabdecf1a8'.