home

battlefield_3-reloaded_secure.exe

PrivitizeVPN Installer

OOO

The application battlefield_3-reloaded_secure.exe by OOO has been detected as adware by 18 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from privitize.com and multiple other hosts.
Publisher:
OOO Industry  (signed by OOO )

Product:
PrivitizeVPN Installer

Version:
1.0.0.1

MD5:
c63c9bc18de063b555f2b21c40f1de45

SHA-1:
525eb01389c7da0fded058bca3b0a73271e4a700

SHA-256:
df4e3ae3c949d37cc48730e0b5e33b9830612febfd6c4a334eb80a60304643e7

Scanner detections:
18 / 68

Status:
Adware

Analysis date:
4/25/2024 10:08:44 AM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
Adware/Rogue.1224272.1
7.11.136.218

avast!
Win32:Adware-gen [Adw]
2014.9-140406

Clam AntiVirus
W32S.Adware.TopMedia
0.98/18355

Comodo Security
TrojWare.Win32.Agent.oebs
17925

Dr.Web
Trojan.DownLoader10.14700
9.0.1.096

ESET NOD32
Win32/TopMedia
8.9540

Fortinet FortiGate
W32/TopMedia.A
4/6/2014

F-Prot
W32/Backdoor2.HMTP
v6.4.7.1.166

IKARUS anti.virus
AdWare.Win32.TopMedia
t3scan.2.2.29

K7 AntiVirus
Trojan
13.176.11436

McAfee
Generic.mn
5600.7169

NANO AntiVirus
Trojan.Win32.Siggen.crfrno
0.28.0.58394

Reason Heuristics
PUP.Installer.OOO.DD
14.4.6.7

Sophos
PrivitizeVPN
4.98

Trend Micro House Call
ADW_COUPONBHO
7.2.96

Trend Micro
TROJ_GEN.R0CBC0OKC13
10.465.06

VIPRE Antivirus
Adware.Privitize
27348

XVirus List
Win32.Detected
2.4.6

File size:
1.2 MB (1,224,272 bytes)

Product version:
1.0.0.1

Copyright:
Copyright 2012

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\users\{user}\downloads\battlefield_3-reloaded_secure.exe

Digital Signature
Signed by:
OOO

Authority:
COMODO CA Limited

Valid from:
8/2/2012 2:00:00 AM

Valid to:
8/3/2015 1:59:59 AM

Subject:
CN="OOO ""Industry""", O="OOO ""Industry""", STREET="Vsevolzhsky 2, bld. 2", L=Moscow, S=Moscow, PostalCode=119034, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00D139BDA20096871840DCE08E6A80B6F0

File PE Metadata
Compilation timestamp:
12/5/2009 11:50:52 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:6wvzdcNUIJcbJd5A8hWMKsFbTpEd08eef81W1GiZ3Jbkpxm4Js0M6z9pyNyPc:BAJcbS/MKsFbadI11wb6m4Js0p9/Pc

Entry address:
0x30FA

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 18, EC, 42, 00, E8, F1, 2B, 00, 00, A3, 64, EB, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, 8F, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 60, E3, 42, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, 40, 43, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
23.5 KB (24,064 bytes)

The file battlefield_3-reloaded_secure.exe has been seen being distributed by the following 25 URLs.

http://privitize.com/get/Project 64 1.6 (N64 emulator)?piu=http://torrage.com/.../CC9BA393D112403727DD55213A78E1C32AB62238.torrent

http://privitize.com/get/Mulan (Hua Mulan) (2009) PAL DVD5 - Custom Eng Nl subs 2Lions-Te?piu=http://torrage.com/.../4C431F66DD6FE0DD9277CEFEA74891B8544E0D77.torrent

http://privitize.com/.../Hammock-Departure_Songs-2CD-2012-KALBAR

http://privitize.com/.../Johan.Falk.107.Patrioter.2012.SWEDiSH.DvDRip.XviD-SWAXXON

http://privitize.com/.../Minecraft_Cracked_for_either_Mac_or_PC

http://privitize.com/get/Guitar Pro 6 with keygen?piu=http://torrage.com/.../CF305A06FF3D20EBD8D26D5091DA71A274AC94F4.torrent

http://privitize.com/.../Nathaniel_Mechaly_and_VA_-_Taken_2_(2012)_320

http://privitize.com/.../BBW_DEPOT___Entire_Site_RIP!!!!___Warning!!_Huge_Women_inside!!!

http://privitize.com/.../Agora.2009.BRRiP.720p.x264~PlutO~

http://privitize.com/.../My_fucking_collection_of_rap_&_hip_hop_classic

http://privitize.com/.../80_best_script_fonts

http://privitize.com/.../Adobe_Photoshop_Lightroom_v4.0_Multilingual_Incl._Key

http://privitize.com/.../Stockholm-Eyes_In_The_Dark-2012-ThePirateBay

http://privitize.com/.../How_To_Save_A_Fortune_In_Taxes__[Robert_kiyosaki,_Tony_Robbins,_

http://privitize.com/get/ePUB Fantasy eBook Flood (138 Books) {BBS}?piu=http://torrage.com/.../C4FE8920BABDF693586EE60D7867C28570A41A32.torrent

http://privitize.com/get/Stephen.King.The.Dark.Tower.All.7.Audio.Books.Unabridged.TeNNRee?piu=http://torrage.com/.../502D8DC5320DDF6D4D12508A9F20D4AE1D9C90C9.torrent

http://turbohide.com/browse.php?u=Oi8vcHJpdml0aXplLmNvbS9nZXQvUmFpc2luZ19Ib3BlX1MwM0UwMV9IRFRWX1h2aUQtQXVYJTVCZXR0diU1RA==&b=5

http://privitize.com/.../Justin_Bieber_-_Believe_(Deluxe_Edition)_{2012-Album}_[NL]

http://privitize.com/.../Supernatural_Season_7_Complete_(S07E01_-_S07E23)

http://privitize.com/.../The.Avengers.2012.DVDRip.XviD-NYDIC

http://privitize.com/get/Resident Evil Retribution 2012 TS x264 AAC-UNiQUE?piu=http://torrage.com/.../66E0160EA8DE85A456503D2B6E7CAEACBC4E41EE.torrent

http://7.hidemyass.com/ip-1/.../Oi8vcHJpdml0aXplLmNvbS9nZXQvVGhlLkNvbGQuTGlnaHQuT2YuRGF5LkRWRFJpcC5YdmlELkFDMy1QVHBPV2VS

http://privitize.com/.../Seth_Sentry_-_This_Was_Tomorrow_(2012)-stevez

http://privitize.com/.../A_Very_Harold_and_Kumar_Christmas_(2011)_3D_HSBS_-_YIFY

http://privitize.com/get/Sherlock.Holmes[2009]DvDrip?piu=http://torrage.com/.../C0A5D1FD2A2D76D5B268F5151DA3E727A4B0D767.torrent

Remove battlefield_3-reloaded_secure.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.