stopusb-deksi.msi

Everstrike OOO

The file stopusb-deksi.msi by Everstrike OOO has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the Windows MSI installer.
Publisher:
Everstrike OOO  (signed and verified)

MD5:
c4e69ef09997a3e977e809aff065183f

SHA-1:
8eba6ac73981020323bf00880562348c9d238353

SHA-256:
c6e7fc5cc67315449cccd72d06f10abc556750a9dc05e7efdc7cea0e2dfed825

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
2/12/2017 2:09:17 AM UTC  (eight months ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.2.11.21

File size:
2.6 MB (2,732,032 bytes)

File type:
Windows Installer (used for software installtaion and updates)

Installer:
Windows MSI

Common path:
C:\Program Files\usb security enterprise\stopusb-deksi.msi

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
1/16/2013 7:00:00 AM

Valid to:
2/16/2014 6:59:59 AM

Subject:
CN=Everstrike OOO, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Everstrike OOO, L=Ulyanovsk, S=Ulyanovsk, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
49A93C592149572F4142F301F1998E04

Remove stopusb-deksi.msi - Powered by Reason Core Security