home

Sergiy Maratov

Publisher Information

Sergiy Maratov is a brand of publishers/developers run by WebPick Internet Holdings Ltd. located in Ramat Ha'Chayal Tel Aviv, Israel. The company is a primary distributor of unwanted software. Sergiy Maratov is a developer of WebPick Internet Holdings and publishes a number of adware web browser plugins designed to monitor web browser behavior and inject advertisements (banner, popups, text-links, etc.) in the browser by using the WebPick InstalleRex monetization delivery platform. These programs from Sergiy Maratov are typiclaly installed on a variety of names and misspellings and are very difficult to remove. According to WebPick, they use developers to sign their adware in order to "throw off competitors". There is one additional code signing certificate issued to this publisher.
Authority:
COMODO CA Limited

Valid from:
8/1/2013 7:00:00 AM

Valid to:
8/2/2014 6:59:59 AM

Subject:
CN=Sergiy Maratov, O=Sergiy Maratov, STREET=Nikolaya Vasilenko 2, L=Kyiv, S=Kyiv, PostalCode=03124, C=UA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
5edc27d0f7538d67813acf4e44ea7896

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Adware.WebPick.Installer (M), PUP.WebPick.SergiyMaratov.Installer (M), PUP.WebPick.SergiyMa.Installer (M), Adware (M), PUP.WebPick (M)
100.00%

1 / 68      (Adware)
unconfirmed 599976.torchdownload (TopApp software)  (8edf133be074465f1f73d3a6bbce4619)

1 / 68      (Adware)
unduhan (TopApp software)  (d9eeddc1ec1bc17a5afbcf4536378007)

1 / 68      (Adware)
instrumental tahu diri maudy ayunda.mp3.exe (TopApp software)  (6fd9b5981601e96d72c406403f009b44)

1 / 68      (Adware)
00000000 (TopApp software)  (75f364888ab84744fa16685430374aa3)

1 / 68      (Adware)
hulog ng langit.mp3.exe (TopApp software)  (3e9c27e1df7a33c0f6632c5450005ec9)

1 / 68      (Adware)
coldplay – ghost stories (deluxe edition).exe (TopApp software)  (ac0e11c0eb7c7b4d5665a4862f3c274f)

1 / 68      (Adware)
coldplay – ghost stories (deluxe edition).exe (TopApp software)  (26a0e1dcd64d400dbee9e61376469aa4)

1 / 68      (Adware)
turn down for what.mp3.exe (TopApp software)  (bb2486c7c73ba6dca792e62f885b7ddc)

1 / 68      (Adware)
tulus sewindu.mp3.exe (TopApp software)  (06e63f1bb82955c91b7e3fe24ea8d7f7)

1 / 68      (Adware)
tulus sewindu.mp3.exe (TopApp software)  (3685e8c4eefad3dfcee8b963f6d9bc83)

1 / 68      (Adware)
medina – welcome to medina.exe (TopApp software)  (8911019f106222a50d73235a0c8425f1)

1 / 68      (Adware)
glamour of the kill – savages.exe (TopApp software)  (ac23d1f21c2142e307577739ea5124b2)

1 / 68      (Adware)
glamour of the kill – savages.exe (TopApp software)  (77e4e660c233ea584ac5857a62519403)

1 / 68      (Adware)
glamour of the kill – savages.exe (TopApp software)  (1cbc5ababb313d3b1024bc51cccc79be)

1 / 68      (Adware)
duke dumont ft. jax jones.mp3.exe (TopApp software)  (09d6e08b2c1c236a383bce36da39469f)

1 / 68      (Adware)
seka aleksic brodolom.mp3.exe (TopApp software)  (f813c756342605b5ad907fab0888c35e)

1 / 68      (Adware)
somebody i used to know gotye.mp3.exe (TopApp software)  (86763eab63c03547fb0762acd072a31d)

1 / 68      (Adware)
hardwell ocarina.mp3.exe (TopApp software)  (6f9ea455a1553a670e331be73575ef4c)

1 / 68      (Adware)
Setup.exe (TopApp software)  (1145f20d6f4b60d44f03fd6fcad4edf8)

1 / 68      (Adware)
00000001 (TopApp software)  (39cd16fe14fa07eb864789a901491414)

1 / 68      (Adware)
00000000 (TopApp software)  (6c4e37a0f827186ffba35d18348237d1)

1 / 68      (Adware)
hello goodbye hyorin.mp3.exe (TopApp software)  (dc6a69a22128a746ef7bcab194b3b877)

1 / 68      (Adware)
alter bridge – fortress.exe (TopApp software)  (6a59e28ae3cffaa9cac2e4b51335c3f4)

Downloads URLs for files signed by Sergiy Maratov.

1 / 68      (Adware)
http://downloaddbobr.info/.../?&q=Glamour of the Kill – Savages&product_name=Glamour of the Kill – Savages&installer_file_name=Glamour of the Kill – Savages&q=Glamour of the Kill – Savages&external_id=1403170474003341469&self_redirect=1  (glamour of the kill – savages.exe)

The following certificate is also signed by Sergiy Maratov.

774A5B60838D600A3706CAB0BC5A6286  (Jun 24, 2014 to Jun 24, 2015)

* Note, the details and description above are based on the code signing digital signature issued to Sergiy Maratov by COMODO CA Limited on August 01, 2013 with the serial number '5edc27d0f7538d67813acf4e44ea7896'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.