Bogus antivirus program uses a dozen stolen signing certificates