Oleg Korzut

Publisher Information

Oleg Korzut is a brand of publishers/developers run by WebPick Internet Holdings Ltd. located in Ramat Ha'Chayal Tel Aviv, Israel. The company is a primary distributor of unwanted software. Oleg Korzut is a developer of WebPick Internet Holdings and publishes a number of adware web browser plugins designed to monitor web browser behavior and inject advertisements (banner, popups, text-links, etc.) in the browser by using the WebPick InstalleRex monetization delivery platform. These programs from Oleg Korzut are typiclaly installed on a variety of names and misspellings and are very difficult to remove. According to WebPick, they use developers to sign their adware in order to "throw off competitors".
Authority:
COMODO CA Limited

Valid from:
9/26/2013 2:00:00 AM

Valid to:
9/27/2014 1:59:59 AM

Subject:
CN=Oleg Korzut, O=Oleg Korzut, STREET=Pohyla 17, L=Kiev, S=Kiev, PostalCode=03138, C=UA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00cfeb32b2789bb03ef7190286335b1888

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware (M), PUP.WebPick (M)
100.00%

1 / 68      (Adware)
渡濑晶black semen.exe (MountainApp)  (cfe1a932fe8aa409ad432a718e35be21)

1 / 68      (Adware)
00000004 (MountainApp)  (cb40ed5cb5a35b432ad4c8600c9a58c2)

1 / 68      (Adware)
00000003 (MountainApp)  (01f22d02ca41b332e87379baea8a63f3)

1 / 68      (Adware)
00000002 (MountainApp)  (d4605b8f77e1e16515a3aaf56c5ea5b8)

1 / 68      (Adware)
00000001 (MountainApp)  (83873673d829fba56ec91a681d1b8744)

1 / 68      (Adware)
00000000 (MountainApp)  (71b9152d80c2915056a28604989dbf15)

1 / 68      (Adware)
patch internet download manager (idm).exe (MountainApp)  (0e063761d5ce79c1b91e4e7f836cc57a)

1 / 68      (Adware)
download.exe (MountainApp)  (278ac9a2e0b6e0da14003783da594144)

1 / 68      (Adware)
download.exe (MountainApp)  (7ee8daaf0acc8b8c9afc992b2db6f718)

1 / 68      (Adware)
00000000 (MountainApp)  (74e58e775e27e41d26b84661f5739dc3)

1 / 68      (Adware)
mmpsfsg_.exe (MountainApp)  (f9f7fd205a1d58f2bd202d4572634844)

1 / 68      (Adware)
flavour blessed album zip.exe (MountainApp)  (0800e2cece6d289934c398494eec1734)

1 / 68      (Adware)
flavour blessed album download.exe (MountainApp)  (d942da3abbdef5a6cd396e915256933f)

1 / 68      (Adware)
flavour blessed album download.exe (MountainApp)  (c782bb0b59875a7fd10a4a20e1c639d6)

1 / 68      (Adware)
download.exe (MountainApp)  (b1f6677a1464ffc32f8cebb6aceb336a)

1 / 68      (Adware)
download.exe (MountainApp)  (56eceae4a1d3f1b8e142cd10c240418c)

1 / 68      (Adware)
download.exe (MountainApp)  (c876b32ba3edf7a49ad5fcf272841fe9)

1 / 68      (Adware)
descarga sin captcha.exe (MountainApp)  (bd2dba4969d59d21bbbbe7b88b558706)

1 / 68      (Adware)
non confirmé 1869.crdownload (MountainApp)  (7041776da6ecf63ea4f5ce7a14b0ea9e)

1 / 68      (Adware)

1 / 68      (Adware)
almir sater.exe (MountainApp)  (ef71f05700d12499cac45c98afc7ee35)

1 / 68      (Adware)
waavin+flag.exe (MountainApp)  (a726f57a99c176a89427e61ee91557c3)

1 / 68      (Adware)
el libro troll – el rubius epub.exe (MountainApp)  (9cda7a0bfa95e269b0afda322413f0ad)

1 / 68      (Adware)
00000000 (MountainApp)  (ea8c3a0c9dc6b93e8734b573165a7c65)

1 / 68      (Adware)

1 / 68      (Adware)

1 / 68      (Adware)
download.exe (MountainApp)  (0be24692d56696fcce99172280383d52)

1 / 68      (Adware)

1 / 68      (Adware)
download.exe (MountainApp)  (cc999732c6099e471be8ed9a75bbf889)

1 / 68      (Adware)
frozen let it go.mp3.exe (MountainApp)  (01d9dcb9313bd79e63b1dcfccb640dc9)

 
Latest 30 of 162 files

Downloads URLs for files signed by Oleg Korzut.

1 / 68      (Adware)
http://sharesuper.info/.../???BLACK SEMEN.exe  (cfe1a932fe8aa409ad432a718e35be21)

1 / 68      (Adware)
http://applicationgrabb.net/.../Download.exe  (c876b32ba3edf7a49ad5fcf272841fe9)

1 / 68      (Adware)

1 / 68      (Adware)
http://applicationgrabb.net/.../Download.exe  (0be24692d56696fcce99172280383d52)

The following publishers (by Authenticode signature organization name) are related.

* Note, the details and description above are based on the code signing digital signature issued to Oleg Korzut by COMODO CA Limited on September 26, 2013 with the serial number '00cfeb32b2789bb03ef7190286335b1888'.