What is "Adware.DLAssistant.INNO"?

The Adware.DLAssistant.INNO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.DLAssistant.INNO virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs
Attempts to identify installed AV products by installation directory

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Adware.DLAssistant.INNO?


File Info:
crc32: AE155060
md5: 9ace5335398120cc8a6a87030aa2818e
name: lua-aimware-bb4cf10.exe
sha1: bf4bc80d3a4091d8651abcbc637909a2f96c7d47
sha256: d4b791d06670c0a972ab21ab49872c193612bce76a42762c94c8f799b1586495
sha512: 9a24c094a088d2f9e378e5d613a373513be1980b107371fe9af75be90af2456fb26888bca12e299e61ab7ab21b6c15f49652a733d04c346396467bcaba7e21cb
ssdeep: 98304:zX4/+w+Z/UZV94ZekFbMmo272wvdoUvENLLDyazx1K:TE+t0V9nkJZopQLvijyam
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName:                                                             
Comments: This installation was built with Inno Setup.
ProductName: CZISXCXiDvZ                                                 
ProductVersion: 2.9.4.4                                           
FileDescription: CZISXCXiDvZ Setup                                           
OriginalFileName:                                                   
Translation: 0x0000 0x04b0

Adware.DLAssistant.INNO also known as:

Bkav	W32.AIDetectVM.malware1
DrWeb	Program.Unwanted.3985
McAfee	Artemis!9ACE53353981
Cylance	Unsafe
K7AntiVirus	Adware ( 0054243d1 )
K7GW	Adware ( 0054243d1 )
Cyren	W32/Trojan.FDOL-6039
Symantec	ML.Attribute.HighConfidence
Paloalto	generic.ml
GData	Win32.Trojan.Agent.HBW4V3
Kaspersky	Trojan.Win32.Ekstak.ymvu
AegisLab	Trojan.Win32.Ekstak.4!e
Sophos	Generic PUA LP (PUA)
F-Secure	Heuristic.HEUR/AGEN.1043160
Invincea	heuristic
McAfee-GW-Edition	Artemis!Trojan
Ikarus	Trojan-Dropper.Win32.Agent
Avira	HEUR/AGEN.1043160
ZoneAlarm	Trojan.Win32.Ekstak.ymvu
Microsoft	Program:Win32/Wacapew.B!ml
VBA32	Trojan.Ekstak
Malwarebytes	Adware.DLAssistant.INNO
ESET-NOD32	Win32/DownloadAssistant.G potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R002H0CLF19
eGambit	PE.Heur.InvalidSig
Fortinet	W32/Ekstak.XLHQ!tr
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
Qihoo-360	HEUR/QVM42.3.E84B.Malware.Gen

How to remove Adware.DLAssistant.INNO?

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

What is “Adware.DLAssistant.INNO”?