home

CNESTY

Publisher Information

CNESTY is a software publisher located in "Geumcheon-gu ", Seoul in Korea*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
VeriSign, Inc.

Valid from:
1/9/2012 9:00:00 AM

Valid to:
1/9/2013 8:59:59 AM

Subject:
CN=CNESTY, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=CNESTY, L="Geumcheon-gu ", S=Seoul, C=KR

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
50cd3560342fbf8f3f50cf1ff5f14019

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

MicroWorld eScan
Trojan.GenericKD.2073148
100.00%

nProtect
Trojan.GenericKD.2073148
100.00%

McAfee
Artemis!E08888040899
100.00%

Bitdefender
Trojan.GenericKD.2073148
100.00%

Trend Micro House Call
Suspicious_GEN.F47V0112
100.00%

Lavasoft Ad-Aware
Trojan.GenericKD.2073148
100.00%

F-Secure
Trojan.GenericKD.2073148
100.00%

McAfee Web Gateway
Artemis
100.00%

Emsisoft Anti-Malware
Trojan.GenericKD.2073148
100.00%

G Data
Trojan.GenericKD.2073148
100.00%

0 / 68
nhcservice.exe (TODO: <Product name> by TODO: <Company name>)  (5d35acb8fd52487a4b89a4b7d6550944)

0 / 68
nhelpcompatcher.exe (TODO: <Product name> by TODO: <Company name>)  (da03c8252d8f326d6292d4ea28ede436)

0 / 68
hcvdrv3_win2003_x86.sys (HelpComBase 8.2 by Cnesty)  (d068781845f97633b71196894510f95c)

0 / 68
hcvdrv3_win2003_x86.dll (HelpComBase 8.2 by Cnesty)  (97c5f151e035a5aac12336f5975d2a37)

0 / 68
hcvdrv3_vista_x86.sys (HelpComBase 8.2 by Cnesty)  (0f9fad9ece736dad1f9d6532f00b5ee7)

0 / 68
hcvdrv3_vista_x86.dll (HelpComBase 8.2 by Cnesty)  (788ebe41319116b6746bc4f5b783e271)

11 / 68    (Malware)
hcvdrv3.dll (HelpComBase 8.2 by Cnesty)  (e08888040899725c667c72e8f826c082)

0 / 68
hcvdrv3.dll (HelpComBase 8.2 by Cnesty)  (a3c02faa137cb64ecb9eaa91b00600fd)

0 / 68
hcvdrv3_win7_x86.dll (HelpComBase 8.2 by Cnesty)  (3d03bcc87ed7da7276da896953ae64da)

0 / 68
hcvdrv3.sys (HelpComBase 8.2 by Cnesty)  (4bc59e86b589af715abb3d6b511cb2ed)

0 / 68
nPatcherX.DLL (nPatcherX Module)  (efb4de7eb6ee4c3a20fe9cef3a7e0c65)

0 / 68
hcvdrv3.sys (HelpComBase 8.2 by Cnesty)  (73cfa87d5a59d0e674d43a07dc788dbf)

0 / 68
nhelpcompatcher.exe (TODO: <Product name> by TODO: <Company name>)  (7654b2a677e82b39b5ea965a12a2afa8)

0 / 68
hcvdrv3.sys (HelpComBase 8.2 by Cnesty)  (ae6102dd942f4731e9a8e1645738103e)

Downloads URLs for files signed by CNESTY.

0 / 68
http://180.80.46.221/.../nHelpComPatcher.exe  (7654b2a677e82b39b5ea965a12a2afa8)

0 / 68
http://211.173.34.146/.../nHelpComPatcher.exe  (7654b2a677e82b39b5ea965a12a2afa8)

0 / 68
http://hc119.com/.../nHelpComPatcher.exe  (7654b2a677e82b39b5ea965a12a2afa8)

The following websites host and distribute files published by CNESTY.

hc119.com

The certificates below are also signed by CNESTY.

371126D2C98864C1503769E5F5A8E853  (Apr 08, 2011 to May 08, 2012)

36AC246084858B1C6BF36CAEE0867A3D  (Feb 11, 2008 to Feb 22, 2009)

* Note, the details and description above are based on the code signing digital signature issued to CNESTY by VeriSign, Inc. on January 09, 2012 with the serial number '50cd3560342fbf8f3f50cf1ff5f14019'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.