home

Dennis Nazarenko

Publisher Information

Dennis Nazarenko is a brand of publishers/developers run by WebPick Internet Holdings Ltd. located in Ramat Ha'Chayal Tel Aviv, Israel. The company is a primary distributor of unwanted software. Dennis Nazarenko is a developer of WebPick Internet Holdings and publishes a number of adware web browser plugins designed to monitor web browser behavior and inject advertisements (banner, popups, text-links, etc.) in the browser by using the WebPick InstalleRex monetization delivery platform. These programs from Dennis Nazarenko are typiclaly installed on a variety of names and misspellings and are very difficult to remove. According to WebPick, they use developers to sign their adware in order to "throw off competitors". There is one additional code signing certificate issued to this publisher.
Authority:
The USERTRUST Network

Valid from:
11/2/2008 1:00:00 AM

Valid to:
11/3/2009 12:59:59 AM

Subject:
CN=Dennis Nazarenko, O=Dennis Nazarenko, POBox=15A, STREET=Jovtneva 7A, L=Vishneve, S=Kievskaya, PostalCode=08132, C=UA

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
009ca1956f3a54a095ba9d02bc02272cfa

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.DennisNazarenko.J, PUP.Startup.DennisNazarenko.O, PUP.DennisNazarenko.M, PUP.DennisNazarenko.K, PUP.DennisNazarenko.O, PUP.DennisNazarenko.F, PUP.DennisNazarenko.V, PUP.DennisNazarenko.N, PUP.Installer.DennisNazarenko.Z, PUP.Installer.DennisNazarenko.c, PUP.Bundler.WebPick, Threat.WebPick.Bundler, PUP.WebPick.Bundler, PUP.WebPick.DennisNazarenko.Bundler (M), PUP.WebPick.DennisNazarenko (M), PUP.WebPick.DennisNa.Bundler (M), PUP.WebPick.DennisNa (M), PUP.WebPick (M)
100.00%

Avira AntiVirus
TR/Dropper.Gen
2.00%

ESET NOD32
Detection.Undefined
2.00%

1 / 68      (Adware)
vistastartmenu_setup_3_2_pro.exe.infected (Vista Start Menu by OrdinarySoft)  (dda23ce5485baa8a92b1c495cb5e5f43)

1 / 68      (Adware)
vistastartmenu_setup_3_31_freeware.exe (Vista Start Menu by OrdinarySoft)  (62fcc31943cbeb896651700cfd73be0b)

1 / 68      (Adware)
vistastartmenu.exe (Vista Start menu by OrdinarySoft)  (962c46f441effaa63db47ebdb34305a3)

1 / 68      (Adware)
VSM64bitProcessing.exe (Vista Start Menu by Vista Start Menu 64bit processing Application)  (080098f7c856e583ef2a81b90cf35a9f)

1 / 68      (Adware)
vistahookapp.exe (Vista Start Menu by OrdinarySoft)  (39660b55fdc54272a42a7670202d569a)

1 / 68      (Adware)
a0023241.exe (Vista Start Menu by OrdinarySoft)  (7c629476763d28ddcbb2259995a12cee)

1 / 68      (Adware)
installbrowserbuttons.exe  (ae8286973bbda61da14fe84e10877e9d)

1 / 68      (Adware)
tidyfavoritiesservice.exe  (884b8a9272349a607c66bb057a00d6e9)

1 / 68      (Adware)
openfav.dll  (a6a7bfe28676bd33427688f4c8629a85)

1 / 68      (Adware)
addtofav.dll  (2140f8f0bdff03ef367afcd6337d27f6)

1 / 68      (Adware)
transformxptovista_setup_3_1.exe (Transform XP to Vista by OrdinarySoft)  (fde6f4b308c2d3f329c90fc5fecf3c0b)

1 / 68      (Adware)
installbrowserbuttons.exe  (d94033c59acbec6cca376936d3e3ffcf)

1 / 68      (Adware)
openfav.dll  (ec2c5f11bb604ec178064d2fd3898364)

1 / 68      (Adware)
addtofav.dll  (c4d687465578eba7b82e1e59219f2fb7)

1 / 68      (Adware)
TidyFavorites.exe (Tidy Favorites by OrdinarySoft)  (d65b2c20bf378a0d234e46012c76d598)

1 / 68      (Adware)
TIDYFavoritiesService.exe  (863d9c405e4950567e7d94a8db5b99ec)

1 / 68      (Adware)
setup.exe (Vista Start Menu by OrdinarySoft)  (291c9474d300f3504f8c2ac4d0d44bed)

1 / 68      (Adware)
bookmarkmanager_setup_4_08_free.exe (Tidy Favorites by OrdinarySoft)  (1d9ca9ae3614fed3d50ef2446cf214b6)

1 / 68      (Adware)
TidyFavorites.exe (Tidy Favorites by OrdinarySoft)  (7829ea94cd958edd0d20878b63be60c7)

1 / 68      (Adware)
tidyfavoritiesservice.exe  (150bea65fb42a17d2cc033f4467c7e98)

1 / 68      (Adware)
openfav.dll  (13b74564a581ff417d976bb6d9891dd7)

1 / 68      (Adware)
addtofav.dll  (73bb7df97dd96d75a79b310c1a3cc8ea)

1 / 68      (Adware)
vistahookapp.exe (Vista Start Menu by OrdinarySoft)  (9c1adac36b082095ba8041de1f06992d)

1 / 68      (Adware)
vistastartmenu.exe (Vista Start menu by OrdinarySoft)  (9ada16b2165c894acbf05a5d0641f62f)

1 / 68      (Adware)
unins000.exe  (9e34a5c5ef21ac52afef9e3ce5577deb)

1 / 68      (Adware)
tidyfavorites_setup_4_14_free.exe (Tidy Favorites by OrdinarySoft)  (46a465062eae9b10b8e4d6cb6aaac5ab)

1 / 68      (Adware)
tidyfavorites_setup_4_15_free.exe (Tidy Favorites by OrdinarySoft)  (af255814c4e451e11396e65617591ca3)

1 / 68      (Adware)
vistastartmenu.exe (Vista Start menu by OrdinarySoft)  (513a6df65a5332c2e417fecfa593ed49)

1 / 68      (Adware)
tidyfavorites_setup_4_25_free.exe (Tidy Favorites by OrdinarySoft)  (625fc9b6325213f8b46bbd4036ae4c17)

1 / 68      (Adware)
vistahookapp.exe (Vista Start Menu by OrdinarySoft)  (89fad032fafd53fce77e783580b6f647)

 
Latest 30 of 50 files

Downloads URLs for files signed by Dennis Nazarenko.

1 / 68      (Adware)
http://gsf-cf.softonic.com/ad1/371/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67549&instance=softonic_en&type=PROGRAM&Expires=1437611569&Signature=fSGRmwEzHpUZ~GwLN4bErWs0ikHi31vmDr~g1ImWvqyFw3fY9OK29pM3ntfJkX8uuOFYOg-QpSAlR~WNNURMgShjsgGROlpgLKyfLtk~hKshCHtWqJ3TuIyxOD6HfOn1VTNbtza5XUYweNobQffHS0cbHOmgv2yO0zcN5CGRp50_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=Transform_XP_to_Vista_3.11.exe  (26b4f0ecf379f8de930c5c92ac0ab5cc)

1 / 68      (Adware)
http://gsf-cf.softonic.com/ad1/371/.../file?SD_used=0&channel=WEB&fdh=no&id_file=67549&instance=softonic_en&type=PROGRAM&Expires=1434921573&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&Signature=ZPmCeMf-IEphyr6rwJiFfI6leL3J-UwhbEKly37mL63XZsDARgPLsqRKO6anMbxfPPfA6lCz~eqv1XMQEK1Wxa1xpgGs6RvxIYbC7QZL-73VxvtHUvJvaTaQlr7a869ap3nlCAaCdJ59R0LXPqbN3DqwuHK5Ap-dCFta~JL1ue0_&filename=Transform_XP_to_Vista_3.11.exe  (26b4f0ecf379f8de930c5c92ac0ab5cc)

1 / 68      (Adware)
http://www.vistastartmenu.com/VistaStartMenu_Setup_3_31_freeware.exe  (3ecdff793551495609e9fc7c8a9f322e)

The following websites host and distribute files published by Dennis Nazarenko.

www.vistastartmenu.com

The following certificate is also signed by Dennis Nazarenko.

00DBE65D78CE895A82ADCC70F584A6A0BB  (Nov 02, 2007 to Nov 02, 2008)

* Note, the details and description above are based on the code signing digital signature issued to Dennis Nazarenko by The USERTRUST Network on November 02, 2008 with the serial number '009ca1956f3a54a095ba9d02bc02272cfa'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.