home

Evgen Kugitko

Publisher Information

Evgen Kugitko is a brand of publishers/developers run by WebPick Internet Holdings Ltd. located in Ramat Ha'Chayal Tel Aviv, Israel. The company is a primary distributor of unwanted software. Evgen Kugitko is a developer of WebPick Internet Holdings and publishes a number of adware web browser plugins designed to monitor web browser behavior and inject advertisements (banner, popups, text-links, etc.) in the browser by using the WebPick InstalleRex monetization delivery platform. These programs from Evgen Kugitko are typiclaly installed on a variety of names and misspellings and are very difficult to remove. According to WebPick, they use developers to sign their adware in order to "throw off competitors".
Authority:
Thawte, Inc.

Valid from:
9/24/2014 3:00:00 AM

Valid to:
9/25/2015 2:59:59 AM

Subject:
CN=Evgen Kugitko, OU=Individual Developer, O=No Organization Affiliation, L=Kiev, S=Kiev, C=UA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
4179ea1bec59d4ca7e66862832555480

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Webpick (M)
100.00%

1 / 68      (Adware)
dmaster.exe (InstallModule by InstallShield Software)  (e6cd0b6e26539be722f87b257e45f0f8)

1 / 68      (Adware)
dmaster.exe (uTorrent Setup Engine)  (cdfe3ef713a9806038a812d8ab88ab88)

1 / 68      (Adware)
hamachi-msi.exe (Windows Install Engine)  (c428ca8ea8d2ca106ac2f5c9d171beda)

1 / 68      (Adware)
dmaster.exe  (35cedffa60973d6b2f50ccaed0d7ae71)

1 / 68      (Adware)
dmaster.exe (uTorrent Setup Engine)  (d1d17467bcf4873dc0159b5657f87d8b)

1 / 68      (Adware)
programma izmeneniya golosa dlya cs 1.6-rar.exe (NirSoft Installer)  (459b4ef992defe7dce9f34483019aa7b)

1 / 68      (Adware)
dmaster.exe (NirSoft Installer)  (55d1a6455f18013fdc54178ac065ead3)

1 / 68      (Adware)
dmaster.exe (InstallModule by InstallShield Software)  (99d79694d6e953800a82fe34842651c4)

1 / 68      (Adware)
the-crew-gold-torrent.exe  (bafbb061c0775c39297c3cfd95368983)

1 / 68      (Adware)
gta_-_vice_city-torrent.exe  (3142f672ea464f214410b14c162b4213)

1 / 68      (Adware)
gta_-_vice_city-torrent.exe  (d062fbd8d922dce3f403463703dd74d2)

1 / 68      (Adware)
gta_-_vice_city-torrent.exe  (2794efa6894f8f57d46c73945ecc8278)

1 / 68      (Adware)
1396198284_holodnoe.serdce.2013.dual.bdrip.-torrent.exe (BIT Technology by Marc Ferranti)  (0878802843dcdbc5e62eb96ffeef5c3c)

1 / 68      (Adware)
need_for_speed_prostreet-torrent.exe (BIT Technology by Marc Ferranti)  (feb40b41f79fefa9c6c178a5abca6b86)

1 / 68      (Adware)
dmaster.exe (uTorrent Setup Engine)  (e71adb9cc1816b391fccab40751d7d2c)

1 / 68      (Adware)
hp_compaq_6720s_xp-rar.exe (uTorrent Setup Engine)  (5a2e74cad4389ec245d96b556bf9dc15)

1 / 68      (Adware)
my-nero6.exe (I n s t a l l e r P l u g i n by Alexander Roshan)  (53ec8c7fca0c603c617356a77b04214c)

1 / 68      (Adware)
my-nero6.exe (I n s t a l l e r P l u g i n by Alexander Roshan)  (f7bda758b3b650cb2c3c384cb913684b)

1 / 68      (Adware)
my-nero6.exe (I n s t a l l e r P l u g i n by Alexander Roshan)  (560172f3bbc29f6f7355cfcb74d9cc80)

1 / 68      (Adware)
dmaster.exe (Astonsoft DeepBurner by Astonsoft)  (c3dd465210b695455e25283e240e5773)

1 / 68      (Adware)
pro_evolution_soccer_2015_repack-torrent.exe (uTorrent Setup Engine)  (99a5cf76c6bbf946abfee1a9a39a2e75)

1 / 68      (Adware)
dd878bf6be0ed8b90fb299743cc7f344-torrent.exe (Windows Install Engine)  (1bbb6e05c106f98801a721ea26abf890)

1 / 68      (Adware)
dmaster.exe (NirSoft Installer)  (bfcfbe9f0b4bb105640b65c544dae351)

1 / 68      (Adware)
dmaster.exe (7-Zip SFX by Oleg N. Scherbakov)  (f13d16e8418eb91d84417b9fb88a86ba)

1 / 68      (Adware)
transformers_war_for_cybertron_rus-1c-torrent.exe (InstallModule by InstallShield Software)  (d2d0eef40cca97084c940f4db6377c81)

1 / 68      (Adware)
setup (cs 1.6)_rutracker.org2-torrent.exe (InstallModule by InstallShield Software)  (b227e10d64028acc5a4ccf46f8ad8935)

1 / 68      (Adware)
gtasa_globalmodsrar-.exe (Astonsoft DeepBurner by Astonsoft)  (316f37405e7c3dbca1a07b5b32d1d2ce)

1 / 68      (Adware)
gtasa_globalmodsrar-.exe (Astonsoft DeepBurner by Astonsoft)  (59082c12a066b5316003faf63cc3a5f9)

1 / 68      (Adware)
winInstall.exe (Windows Install Engine)  (98cc4d311b426d53c0d8863896f5b7ce)

1 / 68      (Adware)
winInstall.exe (Windows Install Engine)  (428147992708c53df586b75d7c3e4e37)

 
Latest 30 of 1,667 files

Downloads URLs for files signed by Evgen Kugitko.

1 / 68      (Adware)
http://ec2-54-88-185-190.compute-1.amazonaws.com/QCXbJx1C3Qc/lydCquoNukSWuQsobpV2Lg/lydCquoNukT88DAD8TZsAA/JfWmS8ZBI7_6Gyr-vtxVQg/.../8P2_ifLCEWCI2Dcba7osdA  (dmaster.exe)

1 / 68      (Adware)
http://ec2-54-88-185-190.compute-1.amazonaws.com/eRhrO5_u3ho/lydCquoNukSWuQsobpV2Lg/lydCquoNukT88DAD8TZsAA/JfWmS8ZBI7_6Gyr-vtxVQg/.../8P2_ifLCEWBdKz4sJDUbVg  (dmaster.exe)

1 / 68      (Adware)
http://ec2-54-88-185-190.compute-1.amazonaws.com/GaPiexDIS-4/lydCquoNukSRRkvU9U8BCQ/lydCquoNukTw_b-J8sIRYA/DY_0ewl300u1cWyY6-3lWriDID3SCDntLQe7NFdl55qsLD9B_MLT9g/.../8P2_ifLCEWC7ZNZKzR-V3A  (pro_evolution_soccer_2015_repack-torrent.exe)

The following publishers (by Authenticode signature organization name) are related.

Falcon Technology

* Note, the details and description above are based on the code signing digital signature issued to Evgen Kugitko by Thawte, Inc. on September 24, 2014 with the serial number '4179ea1bec59d4ca7e66862832555480'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.