home

adanakuninstall.exe

Adanak

This is the installer/setup program for a Yontoo adware component, a web browser plugin that injects unwanted ads in the browser. The application adanakuninstall.exe by Adanak has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This file is typically installed with the program Adanak by Yontoo Technology, Inc. which is a potentially unwanted software program.
Publisher:
Adanak  (signed and verified)

MD5:
40309f1bac019f26a358f8a661f6897d

SHA-1:
cc63142067a62c89e27ac76280b954db519cefb9

SHA-256:
ca760a09d8d57500d3e259d9856b1d5a8aff65cc57c67c087819f8ad121ab8e9

Scanner detections:
1 / 68

Status:
Adware

Explanation:
This is the installer/uninstaller for the Yontoo branded (adanak) adware program. The main protgram is desigend to deliver advertisements to the user's web browser through injection.

Analysis date:
11/23/2024 7:54:38 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Yontoo (M)
17.3.12.7

File size:
254.4 KB (260,496 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\adanak\adanakuninstall.exe

Digital Signature
Signed by:
Adanak

Authority:
VeriSign, Inc.

Valid from:
4/21/2014 8:00:00 PM

Valid to:
4/22/2015 7:59:59 PM

Subject:
CN=Adanak, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Adanak, L=Santa Monica, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
54EAA4FDDD0AEB1183ED278A995C36F7

File PE Metadata
Compilation timestamp:
12/5/2009 6:52:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 6F, 44, 00, E8, F1, 2B, 00, 00, A3, 84, 6E, 44, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, 9C, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 2E, 44, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, F0, 46, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Entropy:
7.8710

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file adanakuninstall.exe has been discovered within the following program.

Adanak  by Yontoo Technology, Inc.
Adanak is an advertising supported (adware) extension that runs in the context of the user's web browser as well as a process in the background.
adanak.net/support
83% remove it
 
Powered by Should I Remove It?

Remove adanakuninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.