Web Assistant

Web Assistant

Known Malware

by Perion Network Ltd.

What is Web Assistant?

Web Assistant is software application developed by Perion Network Ltd.. It is most commonly found on computers running Windows 7 with nearly 81.01% of installations running this operating system. Web Assistant's installer is typically 2.00 MB in size and installs around 9 files. The most common release is 2.0.0.611 with 24.74% of all installations currently using this version.

Web Assistant is most popular in Germany with 16.76% of installations residing in this country.

Web Assistant adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About Web Assistant?

Our Web Assistant software seamlessly integrates into popular web browsers such as Internet Explorer and Firefox, enhancing user experience by delivering advertiser-supported search results and addressing DNS errors. By becoming the default search provider, Web Assistant not only modifies search requests but also monitors internet browsing activity to deliver personalized advertising content.

Multiple virus scanners have detected malware in Web Assistant.

Extension64.dll (MD5: 3f9c8f7072794cbbb00fdf9932aa4303) has been flagged by 2 scanners:
Scanner Software Result
Sophos BitCocktail
TrendMicro-HouseCall TROJ_GEN.F47V0905
ExtensionUpdaterService.exe (MD5: d75398987c968dcbabc411e08029e387) has been flagged by 16 scanners:
Scanner Software Result
Antiy-AVL Trojan/Win32.Agent
ESET-NOD32 a variant of Win32/Toolbar.BitCocktail.B
Malwarebytes PUP.Optional.SweetPacks.A
Sophos BitCocktail
TrendMicro-HouseCall TROJ_GEN.F47V0315
ViRobot Trojan.Win32.A.Agent.188760
Bkav FE W32.Clodf1a.Trojan.5c3f
K7 AntiVirus Unwanted-Program ( 00454f261 )
K7GW Unwanted-Program ( 00454f261 )
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
McAfee Artemis!48AB00973A5D
McAfee-GW-Edition Artemis!48AB00973A5D
AVware BitCocktail
VIPRE Antivirus BitCocktail (not malicious)
Baidu-International Adware.Win32.Perion.E
Clam AntiVirus WIN.Trojan.Genome-43
Extension32.dll (MD5: 48ab00973a5d97961a6a728bfe5ae9f2) has been flagged by 13 scanners:
Scanner Software Result
Bkav FE W32.Clodf1a.Trojan.5c3f
ESET-NOD32 a variant of Win32/Toolbar.Perion.A
K7 AntiVirus Unwanted-Program ( 00454f261 )
K7GW Unwanted-Program ( 00454f261 )
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
McAfee Artemis!48AB00973A5D
McAfee-GW-Edition Artemis!48AB00973A5D
Sophos BitCocktail
TrendMicro-HouseCall TROJ_GEN.F47V0830
AVware BitCocktail
VIPRE Antivirus BitCocktail (not malicious)
Baidu-International Adware.Win32.Perion.E
Clam AntiVirus WIN.Trojan.Genome-43
DGChrome.exe (MD5: b742c116da61626fdee975b78d3b4a60) has been flagged by 7 scanners:
Scanner Software Result
AVware BitCocktail
ESET-NOD32 a variant of Win32/Toolbar.Perion.J potentially unwanted
TrendMicro-HouseCall Suspicious_GEN.F47V0305
VIPRE Antivirus BitCocktail (not malicious)
Baidu-International Adware.Win32.Perion.E
Clam AntiVirus WIN.Trojan.Genome-43
Sophos BitCocktail
source.crx (MD5: 49fd0aa8f267370768ca4776ae927bf8) has been flagged by 5 scanners:
Scanner Software Result
Baidu-International Adware.Win32.Perion.E
Clam AntiVirus WIN.Trojan.Genome-43
ESET-NOD32 Win32/Toolbar.Perion.D
Sophos BitCocktail
TrendMicro-HouseCall TROJ_GEN.F47V0905

Software Behaviors

Services:
  • ExtensionUpdaterService.exe runs as a service named 'Web Assistant Updater' (Web Assistant Updater).
Scheduled tasks:
  • DGChrome.exe is scheduled as a task named 'DGChrome27902 Watcher'.

Startup Entries

Startup tasks:
  • DGChrome.exe is automatically launched at startup through a scheduled task named DGChrome27750 Watcher.
  • DGChrome.exe is automatically launched at startup through a scheduled task named DGChrome24523 Watcher.

Software Details

URL:
https://www.incredibar.com
Support:
Installation path:
C:\Program Files\Web Assistant\
Uninstaller:
"C:\Program Files\Web Assistant\unins000.exe"
Size:
2.00 MB
Language:
English

Web Assistant Executable Details

Primary executable:
ExtensionUpdaterService.exe
Name:
Web Assistant
Path:
C:\Program Files\Web Assistant\ExtensionUpdaterService.exe
MD5:
d75398987c968dcbabc411e08029e387
SHA-1:
SHA-256:
Files installed by Web Assistant
File Type Filename MD5
EXE
02d09d23b1c544e2cc720df710c4845e
DLL
e2d12c87f244a95d0d655802c9ceff5c
DLL
ee5d238e204a74c2cf7d9b3554293189
DLL
3f9c8f7072794cbbb00fdf9932aa4303
EXE
d75398987c968dcbabc411e08029e387
DLL
48ab00973a5d97961a6a728bfe5ae9f2
EXE
b742c116da61626fdee975b78d3b4a60
CRX
source.crx
Malware
49fd0aa8f267370768ca4776ae927bf8
EXE
1751a076504e61195acc2aecc7a0187c