Now Media Corp.

Publisher Information

Now Media Corp. is a software developer located in Uijeongbu-si, Gyeonggi-Do in Korea*. Software developed by Now Media Corp. has been typically classified as potentially unwanted software. Thre are 4 additional code signing certificates issued to this publisher.
Remove Now Media Corp. Malware - Powered by Reason Core Security
Authority:
Thawte, Inc.

Valid from:
4/23/2013 9:00:00 AM

Valid to:
5/24/2014 8:59:59 AM

Subject:
CN=Now Media Corp., OU=EC Team, O=Now Media Corp., L=Uijeongbu-si, S=Gyeonggi-do, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
749f0c73dd0e02a17770a43633f7eb21

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
Win32.Generic.NowMediaCorp.Meta, Win32.Generic.NowMediaCorp.Installer.Meta
100.00%

AhnLab V3 Security
PUP/Win32.Helper, PUP/Win32.WindowsNAS, Win-PUP/Helper.CloudGet.51832, PUP/Win32.UtilTop, PUP/Win32.CloudGet
22.00%

Malwarebytes
Adware.KorAd, Adware.Korad
16.00%

Dr.Web
Trojan.Adkor.16, Trojan.Adkor.63
12.00%

McAfee Web Gateway
Artemis, Artemis!98724526FAF2
8.00%

McAfee
Artemis!64B79E8ECE52, Artemis!C9EDDDC4F0E2, Artemis!F4B174C37F8B, Artemis!98724526FAF2
8.00%

Antiy Labs AVL
Trojan/Win32.SGeneric
8.00%

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
8.00%

NANO AntiVirus
Trojan.Win32.Adkor.csrmhh, Trojan.Win32.Kraddare.ctyrbm
6.00%

Trend Micro House Call
TROJ_GEN.F47V0414, TROJ_GEN.F47V0918, TROJ_GE.CAD55691
6.00%

1 / 68      (PUP)
setup_smtst.exe (Windows Toastjet)  (75b02a37d4214dfa4f7b7ad9b0c3e860)

1 / 68      (PUP)
setup_ln0003.exe (Windows Now Pack Drivers)  (04d52c18e0856ab87c4df940c21e9085)

1 / 68      (PUP)
tstsvp.exe (Windows Toastjet)  (79e1b0e9c32a5f337c8b66a043dbeb13)

1 / 68      (PUP)
tstjet.exe (Windows Toastjet)  (a2e7df14be4990a9cb74e868b4bed4d0)

1 / 68      (PUP)
tstctrl.exe (Windows Toastjet)  (be6d9abef05689f07e59a00742454d68)

4 / 68      (PUP)
clgsve.exe (Windows CloudGet)  (2f2ae7a4bbb7ccc97b08f2ecac74ac76)

1 / 68      (PUP)
tstsvc.exe (Windows Toastjet)  (b9390182132661590363fe6f83b440b4)

1 / 68      (PUP)
sidejet.dll (Windows Sidejet)  (4cdcac90a9b6c0fb8be976a59fdcdc0f)

1 / 68      (PUP)
sdjctrl.exe (Windows Sidejet)  (72b71a1d458d9fa19eaa260555fc2236)

1 / 68      (PUP)
wnstnas.dll  (a391b255a8985795ca5e7c5f9bacc0a4)

1 / 68      (PUP)
setup_s.exe (Windows Now Pack Drivers)  (4663beffc43f6b8298c116682c1fc108)

1 / 68      (PUP)
tpjctrl.exe (Windows Topjet)  (c4f19e666887c030a0c4dd1edc468c38)

1 / 68      (PUP)
topjet.dll (Windows Topjet)  (1e73b3f55d6555265e5235acfef9caef)

1 / 68      (PUP)
sidejet.dll (Windows Sidejet)  (796e838d219caea61a1441a472a07f13)

1 / 68      (PUP)
sdjsvp.exe (Windows Sidejet)  (c75f304de72beb654e4a04f74c83dbd3)

1 / 68      (PUP)
sdjctrl.exe (Windows Sidejet)  (355b1b4f170e6d41b3b5d8cc7b3674a2)

1 / 68      (PUP)
winever.dll  (68f3cd1f9151121287a024e69bf5c230)

1 / 68      (PUP)
winesru.EXE (Windows Everlive)  (390eaeb5a11cc01f3a9c8743be3294d1)

1 / 68      (PUP)
setup_e.exe (Windows Now Pack Drivers)  (617b2715d760e12abfc7b5935e55ae72)

1 / 68      (PUP)
setup_ln0003.exe (Windows Now Pack Drivers)  (e3beaaac43e9c7ced39090ce711822e9)

1 / 68      (PUP)
sdjsvc.exe (Windows Sidejet Manager)  (6640e6727aab1bab26fc70362cffb58b)

1 / 68      (PUP)
setup_sme1.exe (Windows Smart Pack)  (ddfcb53eb7d4d06d0ebd0053f3c15485)

1 / 68      (PUP)
setup_winer_tpj.exe (Windows Topjet)  (986bce490c03941d211db54f522f9684)

1 / 68      (PUP)
setup_winer_sdj.exe (Windows Sidejet)  (d7e0d39c6157b82d65914464fbdf40cd)

7 / 68      (PUP)
setup_ln0001.exe (Windows Now Pack Drivers)  (98724526faf29d9f5af5f029ac3c1025)

2 / 68      (PUP)
setup_wu0000.exe (Windows CloudGet)  (1769c11c49332cefdf90a07e672d0d82)

2 / 68      (PUP)
nvcjet.exe (Windows Now Pack Drivers)  (316b6c330edef2b51e037bdfc4764567)

3 / 68      (PUP)
nvtsjet.exe (Windows Now Pack Drivers)  (8494708a2ea5b467a4f7568aecd2ca49)

2 / 68      (PUP)
setup_sm0000.exe (Windows CloudGet)  (88072f7316b3ae0f94e0c8a87daa979c)

3 / 68      (PUP)
setup_s.exe (Windows Now Pack Drivers)  (1832aa07dc8bae6c675ec44f41f65fa1)

 
Latest 30 of 91 files

The certificates below are also signed by Now Media Corp..

7883D9D5206A6138CFE83DE378370E66  (Jun 10, 2015 to Jul 10, 2016)

25C372720A2798CEC8A2BEB593A4175F  (May 16, 2014 to Jun 16, 2015)

3ACFBF44AA68CA08512B1BA9C041D893  (Mar 24, 2012 to Apr 24, 2013)

29D5DBAF891AA1034589D2F65DC9286A  (Mar 21, 2011 to Mar 21, 2012)

The following publishers (by Authenticode signature organization name) are related.

Remove Now Media Corp. Malware - Powered by Reason Core Security
* Note, the details and description above are based on the code signing digital signature issued to Now Media Corp. by Thawte, Inc. on April 23, 2013 with the serial number '749f0c73dd0e02a17770a43633f7eb21'.