home

NOSIBAY

Publisher Information

NOSIBAY is a software developer located in Montpellier, Herault in France*. The publisher primarily developes software that can be classified as adware. Thre are 8 additional code signing certificates issued to this publisher.
Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/14/2008 12:57:33 PM

Valid to:
6/4/2009 3:12:51 PM

Subject:
CN=NOSIBAY, OU=Provided by TBS INTERNET http://www.tbs-certificats.com/, OU=Secure Application Development Team, O=NOSIBAY, L=Montpellier, S=Herault, C=FR

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
307981c65d6a8119a688907eefa9d836

Scanner detections:
Detections  (100% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.Startup.NOSIBAY.I, PUP.NOSIBAY.O, PUP.NOSIBAY.Installer (M), PUP.NOSIBAY (M), PUP (M)
100.00%

1 / 68      (PUP)
lclicjet.exe (ClicJet by Nosibay)  (e503e6ba8188ecc3a6aac08fde82e1e7)

1 / 68      (PUP)
install_bubbleshopping meilleurs prix.exe (Bubble Shopping by Nosibay)  (203392084a2ef7f6916ee0abff900e4f)

1 / 68      (PUP)
setupvpbubble.exe (VPbubble by vente-privee.com)  (ee31bb5995eb0e7f59058a6e711f8ab0)

1 / 68      (PUP)
lbubble foot.exe (Bubble Foot by Nosibay)  (0a23c6e99b73fe26a30503b73b5d0d46)

1 / 68      (PUP)
Coach Clarins.exe (Coach Clarins by Nosibay)  (16ba34dd0a24d4c5b709ca106170f47c)

1 / 68      (PUP)
setupvpbubble.exe (VPbubble by vente-privee.com)  (5806ea058a877db7d8b94297f2ec5a65)

1 / 68      (PUP)
installationwidgetlequipe.exe (Widget LEquipe.fr by Widget L'equipe.fr)  (363a3f723385915ea7b032be2c994010)

1 / 68      (PUP)
install_bubblefoot-belgique.exe (Bubble Foot by Nosibay)  (36b38d6be2c07b80ee828d5d05c61537)

1 / 68      (PUP)
Les Echos Desk.exe (Les Echos Desk by Nosibay)  (728e70684f9df761845042a4deaa2b2a)

1 / 68      (PUP)
VPbubble.exe (VPbubble by vente-privee.com)  (3ca54f7576ce3cdcf6f1174408e4cfcc)

1 / 68      (PUP)
launcher.exe (VPbubble by vente-privee.com)  (843d16ba38230004ab1e4975d0d7e303)

1 / 68      (PUP)
install_bubbleshopping.exe (Bubble Shopping by Nosibay)  (8df4c22decd3a5e7f8c6ce293cbcddbf)

1 / 68      (PUP)
launcher.exe (Bubble Foot by Nosibay)  (36ac3343c11061a32b2aa8a1989cbbac)

1 / 68      (PUP)
Bubble Foot.exe (Bubble Foot by Nosibay)  (8a6ce3296c7e5d67cc6248272eb059bb)

1 / 68      (PUP)
widget_gmf.exe (Widget GMF by GMF)  (5237765311b2680114fd31fadd0af7dc)

1 / 68      (PUP)
install.exe (Mon Widget RMC)  (e7ae011566968716338426d4f77e1367)

1 / 68      (PUP)
Mon Widget RMC.exe (Mon Widget RMC)  (d004d9ffce96ce588815b9d94d076d9e)

1 / 68      (PUP)
launcher.exe (Mon Widget RMC)  (92759b3149c2a2d61a86c2cf8bee8954)

The certificates below are also signed by NOSIBAY.

5F167BED0657C4880A327813C55256A5  (Oct 25, 2015 to Jan 24, 2017)

52E368957AD1C7202A103C7CFD7BD6C2  (Sep 25, 2014 to Dec 26, 2015)

4F1CA396B891ED381AFEECC074DB8714  (Sep 21, 2013 to Nov 21, 2014)

15D415FC07F39945D54BD293F72D8A5F  (Sep 16, 2012 to Oct 17, 2013)

48B8CBA6DE2D386D8CD5DE3D94F2FAEE  (Jun 28, 2011 to Jul 28, 2012)

0FCD5C77E68CFE177F34E23FB835BDD8  (May 28, 2010 to Jun 28, 2011)

7BDAB8D9F7DB7DA29DA510A8659CEC65  (May 28, 2009 to Jun 04, 2010)

1782D0A558B8C92D9E3A1CA9993F2050  (Jun 05, 2007 to Jun 04, 2008)

* Note, the details and description above are based on the code signing digital signature issued to NOSIBAY by Thawte Consulting (Pty) Ltd. on May 14, 2008 with the serial number '307981c65d6a8119a688907eefa9d836'.
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.