InstantAccess

Catégorie: Adwares et PUA Protection disponible depuis:14 janv. 2006 00:00:00 (GMT)
Type: Adware Dernière mise à jour :01 juil. 2013 14:12:52 (GMT)

Download Téléchargez notre outil gratuit de suppression des virus - Découvrez ce que votre antivirus actuel n'a pas su détecter

InstantAccess is an adware application that usually contains dialer functionality.

InstantAccess encompasses a number of related applications including some known as Electronic-Group, EGroup, IEAccess, Phone2Enter and P2E.

InstantAccess provides an uninstall option which can be accessed via the Add or Remove Programs dialog in the Windows Control Panel. The software is listed as: "winmgts", "wincomp", "simcss", "navpmc" and "mslagent".

Detailed analysis

Example behaviours of InstantAccess follow:

Example 1

File Information

Size
160K
SHA-1
af83ebcb8d0aa38da437f7acf7db65b6c39ff13a
MD5
4b521e15d5a00b1e03b2de313e258499
CRC-32
79a5619a
File type
application/x-ms-dos-executable
First seen
2010-07-23

Runtime Analysis

Processes Created
  • c:\windows\system32\drwtsn32.exe
  • c:\windows\system32\dwwin.exe

Example 2

File Information

Size
233K
SHA-1
207f53e7226ba7b0390ddf2a0cd392f0bd41f34b
MD5
b8b9bba62f05a64b61e9fb8f809621e2
CRC-32
d2151484
File type
application/x-ms-dos-executable
First seen
2010-07-16

Example 3

Runtime Analysis

Registry Keys Created
  • HKCU\Software\EGDHTML
    CERT_DISPLAYED
    YES
  • HKCR\CLSID\{093F9CF8-0DE1-491C-95D5-5EC257BD4CA3}\InprocServer32
    (Default)
    c:\sample.dll

download Essayez les produits Sophos gratuitement
Téléchargez maintenant