Categories: Adware

What is “Adware.DLAssistant.INNO”?

The Adware.DLAssistant.INNO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.DLAssistant.INNO virus can do?

Executable code extraction
Presents an Authenticode digital signature
Creates RWX memory
Possible date expiration check, exits too soon after checking local time
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs
Attempts to identify installed AV products by installation directory

Related domains:

z.whorecord.xyz

a.tomx.xyz

How to determine Adware.DLAssistant.INNO?


File Info:
crc32: AE155060md5: 9ace5335398120cc8a6a87030aa2818ename: lua-aimware-bb4cf10.exesha1: bf4bc80d3a4091d8651abcbc637909a2f96c7d47sha256: d4b791d06670c0a972ab21ab49872c193612bce76a42762c94c8f799b1586495sha512: 9a24c094a088d2f9e378e5d613a373513be1980b107371fe9af75be90af2456fb26888bca12e299e61ab7ab21b6c15f49652a733d04c346396467bcaba7e21cbssdeep: 98304:zX4/+w+Z/UZV94ZekFbMmo272wvdoUvENLLDyazx1K:TE+t0V9nkJZopQLvijyamtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright:                                                                                                     FileVersion:                     CompanyName:                                                             Comments: This installation was built with Inno Setup.ProductName: CZISXCXiDvZ                                                 ProductVersion: 2.9.4.4                                           FileDescription: CZISXCXiDvZ Setup                                           OriginalFileName:                                                   Translation: 0x0000 0x04b0

Adware.DLAssistant.INNO also known as:

Bkav	W32.AIDetectVM.malware1
DrWeb	Program.Unwanted.3985
McAfee	Artemis!9ACE53353981
Cylance	Unsafe
K7AntiVirus	Adware ( 0054243d1 )
K7GW	Adware ( 0054243d1 )
Cyren	W32/Trojan.FDOL-6039
Symantec	ML.Attribute.HighConfidence
Paloalto	generic.ml
GData	Win32.Trojan.Agent.HBW4V3
Kaspersky	Trojan.Win32.Ekstak.ymvu
AegisLab	Trojan.Win32.Ekstak.4!e
Sophos	Generic PUA LP (PUA)
F-Secure	Heuristic.HEUR/AGEN.1043160
Invincea	heuristic
McAfee-GW-Edition	Artemis!Trojan
Ikarus	Trojan-Dropper.Win32.Agent
Avira	HEUR/AGEN.1043160
ZoneAlarm	Trojan.Win32.Ekstak.ymvu
Microsoft	Program:Win32/Wacapew.B!ml
VBA32	Trojan.Ekstak
Malwarebytes	Adware.DLAssistant.INNO
ESET-NOD32	Win32/DownloadAssistant.G potentially unwanted
TrendMicro-HouseCall	TROJ_GEN.R002H0CLF19
eGambit	PE.Heur.InvalidSig
Fortinet	W32/Ekstak.XLHQ!tr
AVG	Win32:Malware-gen
Avast	Win32:Malware-gen
Qihoo-360	HEUR/QVM42.3.E84B.Malware.Gen