{"id":1469,"date":"2014-08-19T08:13:12","date_gmt":"2014-08-19T08:13:12","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=1469"},"modified":"2018-05-29T12:02:46","modified_gmt":"2018-05-29T12:02:46","slug":"oleh-aleksyuk-file","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/oleh-aleksyuk-file\/","title":{"rendered":"Oleh Aleksyuk &#8211; Stay away from files signed this publisher!"},"content":{"rendered":"<p>Hello readers, just wanted to warn you about a publisher called <strong>Oleh Aleksyuk<\/strong>. I downloaded <a href=\"http:\/\/www.freefixer.com\/library\/file\/%5Bshare_ebook%5D%20MediaWiki%20Administrators%20%20Tutorial%20Guide%20%5BReUpload%5D.exe-137843\/\">a file that claimed to be an e-book<\/a>, but instead the file had an .exe extension and was digitally signed by someone named\u00a0<strong>Oleh Aleksyuk<\/strong>. When launching the file, a bunch of bundled programs was offered in the installer. <a href=\"http:\/\/www.freefixer.com\/library\/file\/ezdownloader%5B1%5D.exe-123665\/\">EZDownloader<\/a>, <a href=\"http:\/\/www.freefixer.com\/b\/sw-booster-exe-sw-sustainer-1-80\/\">SW-Booster<\/a>\u00a0and <a href=\"http:\/\/www.freefixer.com\/b\/pricechop-ads-removal\/\">Adblocker<\/a> were some of the programs that appeared after running the file.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/Oleh-Aleksyuk.png\"><img loading=\"lazy\" class=\"alignnone wp-image-1471 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/Oleh-Aleksyuk.png\" alt=\"Oleh Aleksyuk\" width=\"475\" height=\"287\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/Oleh-Aleksyuk.png 475w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/Oleh-Aleksyuk-300x181.png 300w\" sizes=\"(max-width: 475px) 100vw, 475px\" \/><\/a><\/p>\n<p>The digital certificate appears to be rather new. It&#8217;s valid from the 24th of June, 2014. According to the certificate,\u00a0Oleh Aleksyuk is located in Russia.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/Oleh-Aleksyuk-certificate.png\"><img loading=\"lazy\" class=\"alignnone wp-image-1472 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/Oleh-Aleksyuk-certificate.png\" alt=\"Oleh Aleksyuk certificate. Valid from 24 june 2014.\" width=\"533\" height=\"632\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/Oleh-Aleksyuk-certificate.png 533w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/Oleh-Aleksyuk-certificate-253x300.png 253w\" sizes=\"(max-width: 533px) 100vw, 533px\" \/><\/a><\/p>\n<p>Currently the detection rate for the\u00a0Oleh Alexsyuk file is very low. When I uploaded the file to VirusTotal, only MalwareBytes detected the file. The detection name is <strong>PUP.Optional.MultiPlug<\/strong>. It will be interesting to see if the other anti-virus programs will detect it in the future.<\/p>\n<p><a href=\"http:\/\/www.freefixer.com\/library\/file\/%5Bshare_ebook%5D%20MediaWiki%20Administrators%20%20Tutorial%20Guide%20%5BReUpload%5D.exe-137843\/\"><img loading=\"lazy\" class=\"alignnone wp-image-1470 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/Oleh-Aleksyok-virustotal-report.png\" alt=\"Oleh Aleksyok virustotal report\" width=\"694\" height=\"190\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/Oleh-Aleksyok-virustotal-report.png 694w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/Oleh-Aleksyok-virustotal-report-300x82.png 300w\" sizes=\"(max-width: 694px) 100vw, 694px\" \/><\/a><\/p>\n<p>Did you also find a file digitally signed by\u00a0Oleh Aleksyuk? Do you remember where you downloaded it? Please share by posting a comment.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Hello readers, just wanted to warn you about a publisher called Oleh Aleksyuk. I downloaded a file that claimed to be an e-book, but instead the file had an .exe extension and was digitally signed by someone named\u00a0Oleh Aleksyuk. When launching the file, a bunch of bundled programs was offered in the installer. EZDownloader, SW-Booster\u00a0and &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/oleh-aleksyuk-file\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Oleh Aleksyuk &#8211; Stay away from files signed this publisher!<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[54],"tags":[97],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1469"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=1469"}],"version-history":[{"count":4,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1469\/revisions"}],"predecessor-version":[{"id":1476,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1469\/revisions\/1476"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=1469"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=1469"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=1469"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}