Semen Korzuba – VirusTotal: 33% Detection – MultiPlug, Trj/Genetic.gen

digital signature,

Hello! Just a short post before I call it a day. I found yet another file that bundled a bunch of unwanted programs, and the file was signed by Semen Korzuba.

Semen Korzuba warning

Windows will display Semen Korzuba as the publisher when running the file. The certificate is issued by Certum Code Signing CA.

Semen Korzuba cert chain Semen Korzuba certificate

The VirusTotal report shows that the Semen Korzuba file should be avoided, since Download Uc Browser V Handler Zip.exe is detected as TR/Dropper.Gen by Avira, a variant of Win32/Adware.MultiPlug.NU by ESET-NOD32, PUP.Optional.Multiplug by Malwarebytes, Trj/Genetic.gen by Panda and MultiPlug (v) by VIPRE.

Semen Korzuba anti-virus report

Did you also find a file digitally signed by Semen Korzuba? Where did you find it and are the anti-virus programs detecting it? Please share in the comments below.

Thanks for reading.

1 thought on “Semen Korzuba – VirusTotal: 33% Detection – MultiPlug, Trj/Genetic.gen”

  1. I have also found a file digitally signed by Semen Korzuba: It is called gerausch.wav.exe and the anti-virus program kaspersky is NOT detecting it! This Little “tool” makes a short “click” noise every 10 … 60 seconds and I didn’t find a way to get it off.

Comments are closed.