InstantAccess

Category: Adware and PUAs Protection available since:14 Jan 2006 00:00:00 (GMT)
Type: Adware Last Updated:08 Sep 2010 20:17:26 (GMT)

Download Download our free Virus Removal Tool - Find and remove threats your antivirus missed

InstantAccess is an adware application that usually contains dialer functionality.

InstantAccess encompasses a number of related applications including some known as Electronic-Group, EGroup, IEAccess, Phone2Enter and P2E.

InstantAccess provides an uninstall option which can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as: "winmgts", "wincomp", "simcss", "navpmc" and "mslagent".

Detailed analysis

Example behaviours of InstantAccess follow:

Example 1

File Information

Size
160K
SHA-1
af83ebcb8d0aa38da437f7acf7db65b6c39ff13a
MD5
4b521e15d5a00b1e03b2de313e258499
CRC-32
79a5619a
File type
application/x-ms-dos-executable
First seen
2010-07-23

Runtime Analysis

Processes Created
  • c:\windows\system32\drwtsn32.exe
  • c:\windows\system32\dwwin.exe

Example 2

File Information

Size
233K
SHA-1
207f53e7226ba7b0390ddf2a0cd392f0bd41f34b
MD5
b8b9bba62f05a64b61e9fb8f809621e2
CRC-32
d2151484
File type
application/x-ms-dos-executable
First seen
2010-07-16

Example 3

Runtime Analysis

Registry Keys Created
  • HKCU\Software\EGDHTML
    CERT_DISPLAYED
    YES
  • HKCR\CLSID\{093F9CF8-0DE1-491C-95D5-5EC257BD4CA3}\InprocServer32
    (Default)
    c:\sample.dll

download Try Sophos products for free
Download now