What is nta1mtm1zj?

nta1mtm1zj is part of Disqbas Driver Soft and developed by Disqbas Inc. according to the nta1mtm1zj version information.

nta1mtm1zj is digitally signed by chavanactechnology.com.

nta1mtm1zj is usually located in the 'c:\windows\system32\drivers\' folder.

Some of the anti-virus scanners at VirusTotal detected nta1mtm1zj.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

Vendor and version information [?]

The following is the available information on nta1mtm1zj:

PropertyValue
Product nameDisqbas Driver Soft
Company nameDisqbas Inc.
Legal copyrightCopyright (C) 2019
Product version13.14.1.311
File version13.14.1.311

Here's a screenshot of the file properties when displayed by Windows Explorer:

Product nameDisqbas Driver Soft
Company nameDisqbas Inc.
Legal copyrightCopyright (C) 2019
Product version13.14.1.311
File version13.14.1.311

Digital signatures [?]

nta1mtm1zj has a valid digital signature.

PropertyValue
Signer namechavanactechnology.com
Certificate issuer nameGlobalSign CodeSigning CA - G3
Certificate serial number2aa7c828e42df6c2274716d5

VirusTotal report

5 of the 65 anti-virus programs at VirusTotal detected the nta1mtm1zj file. That's a 8% detection rate.

ScannerDetection Name
Endgame malicious (high confidence)
Malwarebytes Adware.Zdengo
Microsoft PUA:Win32/Wajam
Rising Trojan.Generic!8.C3/N3#94% (RDM+:cmRtazrqF1qQcYhLP4LgQpDboIYd)
Webroot W32.Malware.Gen
5 of the 65 anti-virus programs detected the nta1mtm1zj file.

Sandbox Report

The following information was gathered by executing the file inside Cuckoo Sandbox.

Summary

ERROR: Failed to execute process.

Generic

[
    {
        "process_path": "C:\\Windows\\System32\\lsass.exe",
        "process_name": "lsass.exe",
        "pid": 476,
        "summary": {},
        "first_seen": 1604699586.328125,
        "ppid": 376
    }
]

Signatures

[
    {
        "markcount": 2,
        "families": [],
        "description": "The executable contains unknown PE section names indicative of a packer (could be a false positive)",
        "severity": 1,
        "marks": [
            {
                "category": "section",
                "ioc": "PAGE",
                "type": "ioc",
                "description": null
            },
            {
                "category": "section",
                "ioc": "INIT",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "pe_features"
    },
    {
        "markcount": 1,
        "families": [],
        "description": "The file contains an unknown PE resource name possibly indicative of a packer",
        "severity": 1,
        "marks": [
            {
                "category": "resource name",
                "ioc": "B9T5X1YF",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "pe_unknown_resource_name"
    }
]

Yara

The Yara rules did not detect anything in the file.

Network

{
    "tls": [],
    "udp": [
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 826,
            "time": 4.167766094207764,
            "dport": 5355,
            "sport": 53595
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 990,
            "time": 3.0629079341888428,
            "dport": 5355,
            "sport": 55314
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 1318,
            "time": 4.196008920669556,
            "dport": 3702,
            "sport": 49152
        }
    ],
    "dns_servers": [],
    "http": [],
    "icmp": [],
    "smtp": [],
    "tcp": [],
    "smtp_ex": [],
    "mitm": [],
    "hosts": [],
    "pcap_sha256": "e518bba0cc486a9dda70ecbbf4214c6e006348a82dc5106d495d76aa9e81fd2a",
    "dns": [],
    "http_ex": [],
    "domains": [],
    "dead_hosts": [],
    "sorted_pcap_sha256": "5dee1e401f16cd78b619288d460a9e14d01d9991b2bdb8df4289e8ef1eee02e6",
    "irc": [],
    "https_ex": []
}

nta1mtm1zj removal instructions

The instructions below shows how to remove nta1mtm1zj with help from the FreeFixer removal tool. Basically, you install FreeFixer, scan your computer, check the nta1mtm1zj file for removal, restart your computer and scan it again to verify that nta1mtm1zj has been successfully removed. Here are the removal instructions in more detail:

  1. Download and install FreeFixer: http://www.freefixer.com/download.html
  2. Start FreeFixer and press the Start Scan button. The scan will finish in approximately five minutes.
    Screenshot of Start Scan button
  3. When the scan is finished, locate nta1mtm1zj in the scan result and tick the checkbox next to the nta1mtm1zj file. Do not check any other file for removal unless you are 100% sure you want to delete it. Tip: Press CTRL-F to open up FreeFixer's search dialog to quickly locate nta1mtm1zj in the scan result.
    Red arrow point on the unwanted file
    c:\windows\system32\drivers\nta1mtm1zj
  4. Scroll down to the bottom of the scan result and press the Fix button. FreeFixer will now delete the nta1mtm1zj file.
    Screenshot of Fix button
  5. Restart your computer.
  6. Start FreeFixer and scan your computer again. If nta1mtm1zj still remains in the scan result, proceed with the next step. If nta1mtm1zj is gone from the scan result you're done.
  7. If nta1mtm1zj still remains in the scan result, check its checkbox again in the scan result and click Fix.
  8. Restart your computer.
  9. Start FreeFixer and scan your computer again. Verify that nta1mtm1zj no longer appear in the scan result.
Please select the option that best describe your thoughts on the removal instructions given above








Free Questionnaires

Hashes [?]

PropertyValue
MD5b8e19397de6e2b678c9ed985ffba7513
SHA256f5e20839c23795a17b698ced1e86580cb93313c2a318a62df931c528ebe91e47

What will you do with nta1mtm1zj?

To help other users, please let us know what you will do with nta1mtm1zj:



Comments

Please share with the other users what you think about this file. What does this file do? Is it legitimate or something that your computer is better without? Do you know how it was installed on your system? Did you install it yourself or did it come bundled with some other software? Is it running smoothly or do you get some error message? Any information that will help to document this file is welcome. Thank you for your contributions.

I'm reading all new comments so don't hesitate to post a question about the file. If I don't have the answer perhaps another user can help you.

No comments posted yet.

Leave a reply