home

iszoneupdate.exe

Gaia Media Group Inc.

It runs as a scheduled task under the Windows Task Scheduler named ISZone triggered to execute each time a user logs in. This file is installed with the program InternetSafeZone.
Publisher:
Gaia Media Group Inc.  (signed and verified)

Version:
1.0.0.0

MD5:
552bcc406267996062b834e6b37a6927

SHA-1:
b6e802c92f379e40feb4f214ef93abead6d3e455

SHA-256:
5bc120a7630c376327901e1b9ba4263dd48265e147ce972aa5bfee45c91a5f2a

Scanner detections:
4 / 68

Status:
Clean  (4 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
5/7/2024 8:54:01 PM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
PUP/Win32.Helper
2013.12.05

Comodo Security
Heur.Suspicious
17386

nProtect
Adware/W32.KrAdword.2216008
13.12.04.01

VIPRE Antivirus
Trojan.Win32.Generic!SB.0
24020

File size:
2.1 MB (2,216,008 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\iszone\iszoneupdate.exe

Digital Signature
Signed by:
Gaia Media Group Inc.

Authority:
Thawte, Inc.

Valid from:
11/8/2012 9:00:00 AM

Valid to:
11/9/2013 8:59:59 AM

Subject:
CN=Gaia Media Group Inc., OU=Internet Dept, O=Gaia Media Group Inc., L=Gangseo-gu, S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2290AFA8D7BCD34872ABFC6240F731F6

File PE Metadata
Compilation timestamp:
8/20/2013 9:48:24 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:fAqZ7TdFlAhSSnSjVtdBJEKP2l9+66vw98T+97:hZ7BFLBJEKP2law9f

Entry address:
0x1D4D78

Entry point:
55, 8B, EC, 83, C4, F0, B8, 8C, 96, 5C, 00, E8, 40, 66, E3, FF, A1, A8, 07, 5E, 00, 8B, 00, E8, 90, 54, F4, FF, A1, A8, 07, 5E, 00, 8B, 00, B2, 01, E8, A2, 71, F4, FF, A1, A8, 07, 5E, 00, 8B, 00, C6, 40, 5F, 00, 68, 1C, 4E, 5D, 00, 6A, 00, 68, 01, 00, 1F, 00, E8, 1A, 9C, E3, FF, 85, C0, 74, 08, 50, E8, E4, 98, E3, FF, EB, 4D, 68, 1C, 4E, 5D, 00, 6A, 00, 6A, 00, E8, 1C, 99, E3, FF, 8B, 0D, 20, 09, 5E, 00, A1, A8, 07, 5E, 00, 8B, 00, 8B, 15, 4C, 7D, 5C, 00, E8, 4C, 54, F4, FF, A1, 20, 09, 5E, 00, 8B, 00, 80...
 
[+]

Entropy:
6.5377

Developed / compiled with:
Microsoft Visual C++

Code size:
1.8 MB (1,914,880 bytes)

Scheduled Task
Task name:
ISZone

Trigger:
Logon (Runs on logon)


The file iszoneupdate.exe has been discovered within the following program.

InternetSafeZone  by Gaia Media Group
InternetSafeZone is a potentially unwanted web browser extension that is ad-supported and will display various popup and banner ads as well as modify the user's web browser search and home page settings.
58% remove it
 
Powered by Should I Remove It?

Scan iszoneupdate.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.