Adware.DownloadAssistant.INNO removal guide

The Adware.DownloadAssistant.INNO is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.DownloadAssistant.INNO virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Creates RWX memory
• Possible date expiration check, exits too soon after checking local time
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Attempts to identify installed AV products by installation directory

How to determine Adware.DownloadAssistant.INNO?

File Info:
name: 6D45F7873B925E597882.mlw
path: /opt/CAPEv2/storage/binaries/015feed597171d22c1f810a21e974a603d2d3f513c9c43e5d0a96966b70ed7cf
crc32: 7C61886C
md5: 6d45f7873b925e597882f59d3bce8827
sha1: c8a9e971e88c91f3b950d8d5321dcf3d95213b29
sha256: 015feed597171d22c1f810a21e974a603d2d3f513c9c43e5d0a96966b70ed7cf
sha512: 83fa960e67eca17644396fbf56acc42e55dcdd14df09d397d4d74326b6f5c2d7b4d26ad62432aeb14c964f7e60d279d768433a765ade3e12b92eda3b05c91cb2
ssdeep: 49152:xcW4fgLJ98e0kJjKLDu/XXlEHRTOziBMySfj+xELVEcEJ7CQOgitC75PRUaP7x7V:xX4qB0iSD/xTbM/fyKycEgQ/uMyazx1X
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1A3060227B298653EC4AE2B354673A05058FBB66DF417BE1677F0C88DCF250C11E3AA25
sha3_384: 478b409db037457d32463f788d47148e910e48ae0134dfe19823c5124c87c1fc55ead1375cb1928c973a69f78597c16f
ep_bytes: 558bec83c4a453565733c08945c48945
timestamp: 2019-04-27 08:22:11

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName:                                                             
FileDescription: oVgtf Setup                                                 
FileVersion:                     
LegalCopyright:                                                                                                     
OriginalFileName:                                                   
ProductName: oVgtf                                                       
ProductVersion: 5.1.4.1                                           
Translation: 0x0000 0x04b0

Adware.DownloadAssistant.INNO also known as:

How to remove Adware.DownloadAssistant.INNO?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.