IMALI – N.I. MEDIA TD – Detection Rate: 1/54 – Legit or malware?

Hi there! Just a quick post this Friday evening. Did you see a file, such as setup.exe, on your system signed by IMALI – N.I. MEDIA TD? Then read on..

You can see who the signer is when double-clicking on an executable file. IMALI – N.I. MEDIA TD appears in the publisher field in the dialog that pops up.

IMALI - N.I. MEDIA TD publisher

It is also possible to check a digital signature by looking at a file’s properties. Here’s a screenshot of the IMALI – N.I. MEDIA TD certificate.

IMALI - N.I. MEDIA TD certificate

The detection rate is only 1/54, that is 2%. The setup.exe file is detected as suspected of Trojan.Downloader.gen.h by VBA32. What do you think, is it a false positive or should the other anti-virus programs detect it?

IMALI - N.I. MEDIA TD virustotal

Did you also find a IMALI – N.I. MEDIA TD file? Do you remember where you downloaded it?

Thank you for reading.

Update 2015-01-28: Found another file signed by IMALI – N.I. MEDIA TD. It’s called ESy1Avb1ax.exe and it is detected by 7 of the 57 anti-virus programs at VirusTotal:

IMALI - N.I. MEDIA TD virus total detections

 

Update 2015-02-16: Found another file, with a slightly different publisher name: “IMALI – N.I. MEDIA LTD“. The publisher is located in Ramat Gan, Israel according to the certificate. These are the detections (8/57):

  • Avira TR/Dldr.Agent.443648
  • AVware Trojan.Win32.Generic!BT
  • GData Win32.Trojan.Agent.W8AUB8
  • Ikarus Trojan-Downloader.Agent
  • Qihoo-360 HEUR/QVM10.1.Malware.Gen
  • Symantec Infostealer.Limitail
  • TrendMicro-HouseCall Suspicious_GEN.F47V0210
  • VIPRE Trojan.Win32.Generic!BT

IMALI – N.I. MEDIA LTD anti-virus report - 14% Detection Rate

18 thoughts on “IMALI – N.I. MEDIA TD – Detection Rate: 1/54 – Legit or malware?

  1. checked it out. This one actually looks to be okay. Unlike some of the s##@$ i see out there

  2. Yeah , I checked it too, a lot of advertisement but completely legitimate and at least clear about them.

  3. True, looks okay. and also true they have TOO many advertisements but gave the full free product as promised and didn’t force anything to the PC.

  4. I installed 3 other links, 2 links don’t work , another gave me only ads and the software was not installed. This one was the only one that gave me the player I needed and it works perfect with all my files

  5. I got a product called win fix pro by the same company and it was actually really good and didn’t have any ads, they only tried to sell the premium version which is okay Recommended software that cleans registry and malware.

  6. Took this one as a project, will publish my report soon. So far seems like it’s legit. A lot of advertising but installing properly only what I agree taking. Will add more soon

  7. I got the media player promised too. Looking at the replies here and at the weird results in the anti viruses “generic”, “downloader”, “agent” just shows me how right I was not installing this fulish Anti virus software that slow the computer and block software you want to use. Only Microsoft defender is more than enough, I know it for years

    1. AGREE! THEY ONLY TAKE CPU AND POP MESSAGES, NO NEED IN ANTI VIRUS ONLY MICROSOFT DEFENDER. EVERYBODY HERE SAY IT’S OKAY BUT ANTI VIRUS BLOCKS IT THAT IS STUPID

  8. Before I installed the social tab I googled the company and this was helpful. Installed it and it’s a pretty simple product and not as good as I expected but still kind of cool and was really easy to install the addon. The social tab product is legit.

    1. It is lovely! Thanks to your comment i felt better installing it and startjoy, the music player extension is actually sooo good i shared it with everyone I know

Comments are closed.