nbiz Ltd.

Publisher Information

nbiz Ltd. is a software developer located in Gangnam-gu, Seoul in Korea*. Thre are 3 additional code signing certificates issued to this publisher.
Remove nbiz Ltd. Malware - Powered by Reason Core Security
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
11/17/2009 9:00:00 AM

Valid to:
12/18/2010 8:59:59 AM

Subject:
CN=nbiz Ltd., OU=Development Department, O=nbiz Ltd., L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
33c94be607a8fca76527503bc6f9940a

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.nbiz.D, PUP.nbiz.J, PUP.nbiz (M)
100.00%

ESET NOD32
Win32/Adware.BonusCash.AB (variant), Win32/Adware.Kraddare.AH (variant)
50.00%

Avira AntiVirus
HEUR/Malware, Adware/BonusCash.AB.11, Adware/Kraddare.AB, TR/Gendal.5476571
50.00%

AVG
Generic4, unknown virus Win32/DH, Win32/DH{gRKBE0ETICVXTg}
50.00%

nProtect
Trojan-Clicker/W32.WSB.85160.B, Trojan.Generic.5779625, Trojan/W32.Agent_Packed.148648
37.50%

McAfee
Artemis!4C968975DD33, Artemis!B186739FFD09, Artemis!51356758D393
37.50%

Comodo Security
Heur.Suspicious, UnclassifiedMalware
37.50%

F-Secure
Suspicious:W32/Malware!Gemini, Trojan.Generic.5779625, Trojan.Generic.5476571
37.50%

Trend Micro
PAK_Generic.001, PAK_Generic.005
37.50%

McAfee Web Gateway
Artemis!4C968975DD33, Artemis!B186739FFD09, Artemis!51356758D393
37.50%

1 / 68      (Adware)
plustab__pt47.exe (Install by NBZ)  (0db314b27bde44f2ef05552e458422f4)

1 / 68      (Adware)
pg.exe (Install by NBZ)  (40bbd5d5ef670eb960a118c9db61cc79)

1 / 68      (Adware)
gampts.exe (Install by NBZ)  (296669c17f5788a443dbe4f7e82d38a2)

1 / 68      (Adware)
plustab__pt51.exe (Install by NBZ)  (f649b8ed556a278ea5c6e386d59a85ca)

35 / 68    (Adware)
plustab__pt06.exe (Install by NBZ)  (51356758d3934a9e54f32a5a927c9d33)

25 / 68    (Adware)
pinguide__pg30.exe (Install by NBZ)  (e79b8c82af9cea690bc5e8447a3471e6)

11 / 68    (Adware)
uninstall.exe  (b186739ffd091b18bd9b6dc3279b2494)

19 / 68    (Adware)
인포탭.exe  (4c968975dd334b8dc82610d9d0cb1061)

The certificates below are also signed by nbiz Ltd..

4169B218A122412E6D5CC3230C1EC9C2  (Feb 25, 2013 to Apr 27, 2015)

670AA12980346CE791E731546CA9D8AC  (Jan 08, 2012 to Mar 09, 2013)

68D3A7B1E914D885509C1651FE2008D0  (Dec 04, 2010 to Feb 03, 2012)

Remove nbiz Ltd. Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to nbiz Ltd. by Thawte Consulting (Pty) Ltd. on November 17, 2009 with the serial number '33c94be607a8fca76527503bc6f9940a'.