Northcode Inc.

Publisher Information

Northcode Inc. is a software publisher located in Ottawa, On in Canada*. A majority of the programs developed by the company can be classified as adware or other potentially unwanted programs. Thre are 4 additional code signing certificates issued to this publisher.
Remove Northcode Inc. Malware - Powered by Reason Core Security
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
3/11/2009 1:00:00 AM

Valid to:
5/10/2010 1:59:59 AM

Subject:
CN=Northcode Inc., OU=SECURE APPLICATION DEVELOPMENT, O=Northcode Inc., L=Ottawa, S=ON, C=CA

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
418234f1a99f61f7c5ea116ab09ad596

Scanner detections:
Detections  (55% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Northcode (M), PUP.Northcode.K, PUP.Northcode.F, PUP.Northcode.Installer (M)
96.30%

Bkav FE
W32.Clodc95.Trojan
70.37%

Dr.Web
Win32.Wplugin.2
3.70%

Microsoft Security Essentials
Threat.Undefined
3.70%

VIPRE Antivirus
Threat.4314870
3.70%

McAfee
Virus.W32/Wplugin
3.70%

avast!
Win32:Patched-JI
3.70%

AVG
Win32/Slugin.A
3.70%

Norman
Win32.SlugIn.A
3.70%

Emsisoft Anti-Malware
Win32.SlugIn
3.70%

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (9d5ef9fb86d8312e6546f0cd11a78297)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (09fdc2adfb10c326b7740abcd92b6c0f)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (320884bec35d7d4f04915f43fed9cddb)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (40d28b20f9ad7135aceb6194b698b31d)

0 / 68
udp.dll  (5f1c55a65f7525e5a69192c1dd431afa)

0 / 68
tcp.dll  (e11d72717e9020decb310c3b16595132)

0 / 68
midi.dll  (197774451125cd4b3d6f4cb768e1e429)

0 / 68
joystick.dll  (2189edab70d91ea8443a4e8966db0b8f)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (72da39f3627d200decc9c4d0e0218561)

11 / 68    (Malware)
xshim.exe  (8617a1b540d0ca948ea8c05ad9655b87)

1 / 68      (Adware)
create_email.exe (Northcode proxy by Northcode)  (5e139c8d65d67514107388dee7224ca9)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (00a9d8beb36e4c9dcce3c0955149abe3)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (3242f9b295223ffde0eb31a3eb64bdef)

0 / 68
utility.dll  (b56da2faba0786ca11856448ca5c2ab2)

0 / 68
perfc009.dat  (1c6a96d01f8f180a84a385f50b7cce59)

1 / 68      (Adware)
test.exe (Northcode proxy by Northcode)  (d7f8689268e52e50cc4a31cf119d5762)

1 / 68      (Adware)
setupwlan.exe (Northcode proxy by Northcode)  (fc74607468fdf61a0ee983a4f2a613b4)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (6a5b38666dfd7e57615b6caf8affbd8d)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (98443ef7a3704973e2ac16fff3db045f)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (0a0fcf86b155469038c26f6476014fd8)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (15e23c2107226cf45a4061da915bf047)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (7394c410ad8954f2c7304f8ab4b5d999)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (f1ba650b209a9c316aae4221f76a1ce7)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (41a5eb6560da85669233524548edfdb0)

1 / 68      (Adware)
prog1.exe (Northcode proxy by Northcode)  (d4cbabfa11f07cf973605664a5301c49)

0 / 68
email.dll  (b267ca5c48a0e53761d1312c9c859c80)

0 / 68
catalog.dll  (49e246003ce46dd39dd3b88c5355fc33)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (f747304b89ce9d365dc006c17d6d5578)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (9b6521886b416d09258cd9426453c5db)

2 / 68      (Adware)
start.exe (Northcode proxy by Northcode)  (03be80df94a5073bc4738b18a0d8d1cd)

 
Latest 30 of 49 files

The certificates below are also signed by Northcode Inc..

70AF926C7906C590A0F701C227261101  (Apr 02, 2013 to May 08, 2014)

708FCDF55F21BAEA05B3CD8014C0F901  (Apr 29, 2011 to May 09, 2012)

6C8DEB50BE177678F343CDDB98DD1E31  (Apr 21, 2010 to May 10, 2011)

38D6BE3BC2E434D7A51FDB03DAB0F9B5  (May 08, 2008 to May 09, 2009)

Remove Northcode Inc. Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Northcode Inc. by Thawte Consulting (Pty) Ltd. on March 11, 2009 with the serial number '418234f1a99f61f7c5ea116ab09ad596'.