home

NIA

Publisher Information

NIA is a software developer located in Bucheon, Wonmi-Gu in Korea*. Thre are 2 additional code signing certificates issued to this publisher.
Authority:
eBiz Networks Ltd

Valid from:
1/6/2010 9:00:00 AM

Valid to:
1/7/2011 8:59:59 AM

Subject:
CN=NIA, OU=Software Development Team, O=NIA, STREET="Weve The State Apt., Jung 2-dong, Wonmi-gu, Bucheon-si, Gyeonggi-do, Korea", STREET=502-1001, L=Bucheon, S=Wonmi-gu, PostalCode=420-776, C=KR

Issuer:
CN=eBiz Networks Certificate Services, O=eBiz Networks Ltd, C=KR

Serial number:
2d45fbb87e41f57ddc127f237bb9d1c9

Status:
Inconclusive detections from multiple engines

Scan engine
Details
Detections

McAfee
Artemis!5C682511AFCA
25.00%

Norman
W32/Suspicious_Gen2.SNPFD
25.00%

Kaspersky
Trojan-Downloader.Win32.Agent
25.00%

Emsisoft Anti-Malware
Trojan.Win32.BHO!IK
25.00%

VIPRE Antivirus
Trojan.Win32.Generic!SB.0
25.00%

Avira AntiVirus
TR/Agent.356776
25.00%

ViRobot
Trojan.Win32.A.Downloader.360448.V
25.00%

Vba32 AntiVirus
TrojanDownloader.Agent.gniy
25.00%

ESET NOD32
Win32/TrojanDownloader.Agent.QYY (variant)
25.00%

IKARUS anti.virus
Trojan.Win32.BHO
25.00%

0 / 68
nzellbell_20100208.exe  (b1a9cc3b78917b276273800e1ad4bdfe)

0 / 68
NZellBell.exe (by NZellSoft)  (ca37817752d25de03d2681b7933da214)

0 / 68
nzellcodecpackwin7.exe  (06146efb0a4de0109cf09ea8e087f38f)

1 / 68      (inconclusive)
nitromemoptimizerv1.exe  (717ea057e87475a42037276418934ebb)

0 / 68
NitroBell.exe (NitroBell by Nitro-Soft.com)  (b041de7a41d2df54814b52ddb8abca55)

1 / 68      (inconclusive)
NitroBellUPdate.exe (NitroBellUPdate by Nitro-Soft.com)  (efe4917ec37fd0c2558aaff0db9b92f0)

0 / 68
nzellbell_20100310.exe  (78163ee9d96c28d82a09b25f8166ba32)

0 / 68
nzellbell_20100219.exe  (613700c429d590691b3ba016f1f9e209)

0 / 68
nzellbell_20100208.exe  (8fb0052ea488c07f8c216a7487bd42fe)

11 / 68    (Malware)
NzellEncoderUpdater.exe (NzellEncoderUpdater.exe by NZellSoft)  (5c682511afcaeaf8e9d7f65260dad1c6)

0 / 68
nzellbell_20100120.exe  (9dcee92a3b9c2143010dc67d82af720f)

0 / 68
NzellEncoder.EXE  (1b120987b43f77b216531aca898a88a3)

0 / 68
nzellencoder(2010 02 08)-설치.exe  (3d4dfe33bd10b13e73c34b603dcbf680)

0 / 68
NZellBellUPGrade.exe (by NZellSoft)  (5d0501bc02547a28109586e9ac36106f)

0 / 68
NZellBell.exe (by NZellSoft)  (109a5034a4e669d78542b82f6bf15784)

0 / 68
NitroMemOptimizer.exe (Nitro-MemOptimizer by Nitro-Soft.com)  (8ecbf31665d2b11b8c21522553ec3649)

Downloads URLs for files signed by NIA.

0 / 68
http://cfile25.uf.tistory.com/.../167662134B61577E4CBD27  (nzellbell_20100120.exe)

The following websites host and distribute files published by NIA.

cfile25.uf.tistory.com

The certificates below are also signed by NIA.

0BC9141581239027E6B947E710DC8A15  (May 25, 2012 to Jun 25, 2013)

6E868A375E635D77A1BD8F554B41F7D3  (May 27, 2011 to May 27, 2012)

The following publishers (by Authenticode signature organization name) are related.

Florian Heidenreich

KIRILL CHERMENIN

Gibson Research Corporation

Process Clean Corp

* Note, the details and description above are based on the code signing digital signature issued to NIA by eBiz Networks Ltd on January 06, 2010 with the serial number '2d45fbb87e41f57ddc127f237bb9d1c9'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.