askslib.dll

AskIC Dynamic Link Library

Ask.com

This installer is part of the Ask.com (APN) network which will install the Ask.com branded toolbar or browser extension which will take control of the web browser's search functions. The module askslib.dll by Ask.com has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the APN Stub installer. Additionally, the file is typically installed by a number of programs including Quick Media Converter by Cocoon Software and Anti-reCAPTCHA v2.07 JD by SONY-TEAM. This version of the installer will bundle the Ask.com Toolbar, a potentially unwanted web browser extension.
Publisher:
Ask.com  (signed and verified)

Product:
AskIC Dynamic Link Library

Version:
3.0.0.0

MD5:
016b4cb0f363e8563ae9d4c97189ae5d

SHA-1:
1eff205d7d0d82baf841a98c176d700114e13fe6

SHA-256:
c07ad5ccb030fc1d4c950c63fa6d01976222e437b356f0e0ccbf625a3414735a

Scanner detections:
2 / 68

Status:
Potentially unwanted

Explanation:
Bundles that Ask.com toolbar as a third-party offer, a web browser extension that may modify a user's search and home pages.

Analysis date:
4/24/2024 8:36:47 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Bundled.Toolbar.Ask (variant)
7.9310

Reason Heuristics
PUP.Ask.Installer
15.4.24.16

File size:
174.4 KB (178,568 bytes)

Product version:
3.0.0.0

Copyright:
Copyright (C) Ask 2010

Original file name:
AskIC.dll

File type:
Dynamic link library (Win32 DLL)

Installer:
APN Stub

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\askslib.dll

Digital Signature
Signed by:

Authority:
VeriSign, Inc.

Valid from:
6/17/2008 2:00:00 AM

Valid to:
6/18/2011 1:59:59 AM

Subject:
CN=Ask.com, OU=Distribution, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Ask.com, L=Oakland, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
286F8A30E2EAC6965B936F826A05305D

File PE Metadata
Compilation timestamp:
3/15/2011 9:32:15 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
3072:JYlCPp/oNWXAUovx4gxr/joJK21uraIL6cmnw+nR6ibbv:JYluqNWXAUov7xreKrrfSF

Entry address:
0x106AA

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, E6, 70, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, CC, CC, 8B, FF, 55, 8B, EC, 83, EC, 18, 53, 8B, 5D, 0C, 56, 8B, 73, 08, 33, 35, 50, 72, 02, 10, 57, 8B, 06, C6, 45, FF, 00, C7, 45, F4, 01, 00, 00, 00, 8D, 7B, 10, 83, F8, FE, 74, 0D, 8B, 4E, 04, 03, CF, 33, 0C, 38, E8, 84, D8, FF, FF, 8B, 4E, 0C, 8B, 46, 08, 03, CF, 33, 0C, 38, E8, 74, D8, FF, FF, 8B, 45, 08, F6, 40, 04, 66, 0F, 85, 16, 01, 00, 00, 8B, 4D, 10, 8D...
 
[+]

Code size:
119.5 KB (122,368 bytes)

The file askslib.dll has been discovered within the following programs.

Anti-reCAPTCHA v2.07 JD  by SONY-TEAM
Publisher's description - “Anti-recaptcha is a plugin for JDownloader software which bypasses security. ”
www.antirecaptcha.com
About 6% of users remove it
Quick Media Converter  by Cocoon Software
Quick Media Converter includes a branded version of the Ask.com Toolbar, a web browser extenstion that provides search advertising and results. Upon installation the user is presented with the option to install the Ask toolbar.
www.cocoonsoftware.com
About 9% of users remove it
 
Powered by Should I Remove It?

Remove askslib.dll - Powered by Reason Core Security