gora sah

Publisher Information

gora sah is a software publisher*. The company is a primary distributor of unwanted software. Thre are 2 additional code signing certificates issued to this publisher.
Remove gora sah Malware - Powered by Reason Core Security
Authority:
gora sah

Valid from:
12/31/2009 9:00:00 PM

Valid to:
12/31/2018 9:00:00 PM

Subject:
CN=gora sah

Issuer:
CN=gora sah

Serial number:
5e9a2ccaffe48f8e401d9cbcdb1ea1b3

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.gorasah.H, PUP.gorasah.G, PUP.gorasah.K, PUP.gorasah.I, PUP.gorasah.L, PUP.Installer.gorasah.I, PUP.gorasah.E, PUP.gorasah.DD, Threat.gorasah, PUP.gorasah (M)
100.00%

Vba32 AntiVirus
Trojan.Autoit.F, Trojan.Autoit.Injcrypt
22.00%

Baidu Antivirus
Trojan.Win32.Autoit, Hacktool.Win32.Autoit
22.00%

CMC Antivirus
Trojan.Win32.Generic!O
18.00%

ESET NOD32
Win32/Packed.Autoit
18.00%

Comodo Security
UnclassifiedMalware
16.00%

Commtouch SDK
W32/GenBl.83A3B1CA!Olympus, W32/GenBl.2433B776!Olympus, W32/GenBl.836354A0!Olympus, W32/GenBl.30B00C17!Olympus, W32/GenBl.E4E86BBF!Olympus
14.00%

K7 AntiVirus
Trojan
14.00%

Norman
Suspicious_Gen4.FMSIF, Suspicious_Gen4.FONLA, Suspicious_Gen2.VVKDF, Suspicious_Gen4.FMRVV
12.00%

K7 Gateway Antivirus
Trojan
12.00%

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
7zip.exe (7 Zip v9.32 alpha by Company 'gora-sah')  (d036222bd7b6016e3e4acb73637545cb)

1 / 68      (Adware)

1 / 68      (Adware)
7zip.exe (7 Zip v9.32 alpha by Company 'gora-sah')  (a2a8c36bc81e1dfac06eb074f3a49a98)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
settools.exe (Tools v7.4 by Company 'gora-sah')  (9a76c774499facf9d360725d63649e2c)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
7zipArch.exe (7 Zip v9.33 alpha by Company 'gora-sah')  (48a953198cf1eefce33eed6814daa7e7)

1 / 68      (Adware)
irfanview.exe (IrfanView 4.36 ru by Company 'gora-sah')  (b59d3b16f659a2072e4d4caf4b92f238)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
irfanview.exe (IrfanView 4.38 ru by Company 'gora-sah')  (8bcfb9e1b983248e19c1f8e63184d778)

1 / 68      (Adware)
7zip.exe (7 Zip v9.34 alpha by Company 'gora-sah')  (40f33acdd29c5abf60e0c5a46580c9d3)

1 / 68      (Adware)
settools.exe (Tools v7.5 by Company 'gora-sah')  (6b529cabe39a866c8dd2db9f0cdabe8e)

5 / 68      (Adware)

1 / 68      (Adware)

4 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
7zip.exe (7 Zip v9.20 by Company 'gora-sah')  (e4881b36a1b9c01c9006f029c6d6442a)

1 / 68      (Adware)
winrar51.exe (WinRAR v5.10 ru by Company 'gora-sah')  (5ab3cf5974ae5f8a15cdd5531a3e69d8)

1 / 68      (Adware)
winrar.exe (WinRAR v5.0 beta 8 ru by Company 'gora-sah')  (00e45cb09dd13b02195ef6e456b1ac42)

 
Latest 30 of 50 files

The certificates below are also signed by gora sah.

23007838C6E212BF41CFECBB6371C9DB  (Dec 31, 2009 to Dec 31, 2018)

ADAF0E82319793A54034B8E6FD6B222A  (Dec 31, 2009 to Dec 31, 2018)

The following publishers (by Authenticode signature organization name) are related.

Remove gora sah Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to gora sah by gora sah on December 31, 2009 with the serial number '5e9a2ccaffe48f8e401d9cbcdb1ea1b3'.