Corsica Technologies Ltd.

Publisher Information

Corsica Technologies Ltd. is a software developer located in Tel-Aviv, Israel*. Software developed by Corsica Technologies Ltd. has been typically classified as potentially unwanted software. There is one additional code signing certificate issued to this publisher.
Remove Corsica Technologies Ltd. Malware - Powered by Reason Core Security
Authority:
VeriSign, Inc.

Valid from:
12/19/2013 12:00:00 AM

Valid to:
12/18/2014 11:59:59 PM

Subject:
CN=Corsica Technologies Ltd., OU=R&D, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Corsica Technologies Ltd., L=Tel-Aviv, S=Tel-Aviv, C=IL

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
70eca2b222e57f5330852a47ebb2a333

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Optional.CorsicaTechnologies.M, PUP.Optional.CorsicaTechnologies.K, PUP.Optional.CorsicaTechnologies.O, PUP.Optional.CorsicaTechnologies.N, PUP.Optional.CorsicaTechnologies.L, PUP.Optional.Installer, Win32.Generic.CorsicaTechnologies.Meta, Win64.Generic.CorsicaTechnologies.Installer.Meta
100.00%

VIPRE Antivirus
Threat.5063086, Revizer
88.00%

Sophos
AddLyrics, PUA 'AddLyrics' (of type Adware)
64.00%

ByteHero BDV
Virus.Win32.Heur.l
16.00%

ESET NOD32
Win32/Adware.AddLyrics.CS (variant), Win32/AdWare.AddLyrics.BJ (variant)
8.00%

Trend Micro House Call
Suspicious_GEN.F47V1125, Suspicious_GEN.F47V1126, Suspicious_GEN.F47V1201
8.00%

Dr.Web
Adware.AddLyrics.1
2.00%

IKARUS anti.virus
PUA.AddLyrics
2.00%

McAfee
Artemis!0838B7A97DE8
2.00%

McAfee Web Gateway
Artemis
2.00%

1 / 68      (PUP)
updater.exe (McClean by Corsica Interactive)  (f77d36deb1ce6a6e1b9e395ce28f2137)

1 / 68      (PUP)
Splash.exe (Splash)  (08bd5a4436f88b2a51847a59658d01f8)

1 / 68      (PUP)
mcclean.msi  (8920ea983ea1f2d8775d41cd77b06cbf)

1 / 68      (PUP)
McClean.exe (McClean)  (e844ff3395bd7d671dcc7663e8eafca4)

1 / 68      (PUP)
InstAct.exe  (d46c926525761d2806fb368c17d2d65c)

1 / 68      (PUP)
McCleanSetup.exe (McClean by Corsica Interactive)  (7b7308ecc91b925d84bcc9f5abf5e9e0)

6 / 68      (PUP)
webinstr.sys (Web Instrument by Corsica)  (5d1e312546e67533ce7192d4b3e5933b)

5 / 68      (PUP)
webinstrnewh.sys (Web Instrument New by Corsica)  (fe56abb7e2f8e279ba12e3b156edfb01)

4 / 68      (PUP)
webinstrnewh.sys (Web Instrument New by Corsica)  (dd83f157345db4c396840668647a8e68)

5 / 68      (PUP)
webinstrH.sys (Web Instrument New by Corsica)  (4ea2efc7a4ccd37174160e0fb0677706)

7 / 68      (PUP)
webinstrH.sys (Web Instrument New by Corsica)  (0838b7a97de8072f59d69ffe3b0e765b)

6 / 68      (PUP)
webinstrT.sys (Web Instrument New by Corsica)  (d32e94f0505df666706e0939d596bc90)

3 / 68      (PUP)
webinstrT.sys (Web Instrument New by Corsica)  (3a67c5cfe1475d317818861060ba1cbe)

3 / 68      (PUP)
webinstrNew.sys (Web Instrument by Corsica)  (fd252cb816cd1192b7db3126a667c819)

3 / 68      (PUP)
webinstrNew.sys (Web Instrument by Corsica)  (59b3c0c4e5afa5db7e0a1ff77694b0ae)

3 / 68      (PUP)
webinstrNew.sys (Web Instrument by Corsica)  (c21b073dd39644db158a93070a6e6ea8)

3 / 68      (PUP)
webinstrnew.sys (Web Instrument by Corsica)  (4bf67c381cb0a0031ee98db87a402818)

3 / 68      (PUP)
taskschedulerlib.dll  (c92cf527d74c94add3c0c326d32712db)

2 / 68      (PUP)

3 / 68      (PUP)
startupmanagerlib.dll  (b110e279ff4486d9031f8a6f07651e0e)

2 / 68      (PUP)

3 / 68      (PUP)

2 / 68      (PUP)
rescuecenterlib.dll  (83d04627f3a34c4579873062736f2684)

3 / 68      (PUP)
regdefraglib.dll  (82c029c2bcbb1e54eeb8a30072484374)

3 / 68      (PUP)

3 / 68      (PUP)
productlib.dll  (3b3fc73dc0b18e90511ef3a353b0c286)

3 / 68      (PUP)

2 / 68      (PUP)

3 / 68      (PUP)
immunizationusblib.dll  (725f829a00aabf2c2b75754f696db1be)

2 / 68      (PUP)
generallib.dll  (9ba2cf2fbde0b5729d57f4bcb760391c)

 
Latest 30 of 76 files

The following certificate is also signed by Corsica Technologies Ltd..

7949FFE63B1683DCCBED2E599AECDFFD  (Dec 27, 2014 to Jan 26, 2017)

Remove Corsica Technologies Ltd. Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Corsica Technologies Ltd. by VeriSign, Inc. on December 19, 2013 with the serial number '70eca2b222e57f5330852a47ebb2a333'.