» common.dll
Overview
Analysis
File Details
Programs (1)

common.dll

Websteroids

Creative Island Media, LLC

This is part of an adware program designed to inject advertising in the web browser (banners, text-links) as well as modify the normal behavior of the browser as well as modify the computer’s system settings that control applications to run on startup. Part of the Injekt brand of unwanted programs. The module common.dll by Creative Island Media has been detected as adware by 13 anti-malware scanners. This file is typically installed with the program Websteroids by Creative Island Media, LLC which is a potentially unwanted software program.

File name:

common.dll

Publisher:

Creative Island Media, LLC (signed and verified)

Product:

Websteroids

Version:

2.6.48

MD5:

3e523ea904e4444e17d81e0224d16645

SHA-1:

c13d99b985a2e50a5942d3c6fa1078e7b6958789

SHA-256:

90b10c855b62a53526eb6e0ff8f2063b0b5b3c091e25cb44dfd9a74cfd4c0f51

Scanner detections:

13 / 68

Status:

Adware

Explanation:

Injects display ads (banner ads), in-text ads, interstitial ads, or other types of ads in the web browser as well as alters the browsers settings (home page, search, DNS, and security protocols).

Analysis date:

4/19/2024 11:56:21 PM UTC (a few moments ago)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Adware.Agent.NVF

922

avast!

Win32:BHO-AMO [PUP]

2014.9-140727

Bitdefender

Adware.Agent.NVF

1.0.20.1040

Dr.Web

Adware.Plugin.128

9.0.1.0208

Emsisoft Anti-Malware

Adware.Agent.NVF

8.14.07.27.02

ESET NOD32

Win32/ExFriendAlert (variant)

8.9381

F-Secure

Adware.Agent.NVF

11.2014-27-07_1

G Data

Adware.Agent.NVF

14.7.24

IKARUS anti.virus

AdWare.Agent

t3scan.2.2.29

MicroWorld eScan

Adware.Agent.NVF

15.0.0.624

nProtect

Adware.Agent.NVF

14.02.04.02

Reason Heuristics

PUP.CreativeIslandMedia.G

14.8.7.20

VIPRE Antivirus

SearchDonkey

26138

File size:

399.9 KB (409,464 bytes)

Product version:

2.6.48

Original file name:

common.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\ProgramData\websteroids\ie\common.dll

Digital Signature

Signed by:

Creative Island Media, LLC

Authority:

VeriSign, Inc.

Valid from:

5/21/2013 2:00:00 AM

Valid to:

5/22/2014 1:59:59 AM

Subject:

CN="Creative Island Media, LLC", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Creative Island Media, LLC", L=San Diego, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

68F23F4D2767F6491DEA9186F2E5CB89

File PE Metadata

Compilation timestamp:

10/22/2013 5:52:24 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

6144:nv0n4PCCWLGrloWs1qSnes/xkmNQcSPXH5Js0SdqBUWVoM3Kitd3:sUrXs1nn//9NyPXZJV6itd3

Entry address:

0x15A0C

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 14, 5D, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, 8B, FF, 55, 8B, EC, 83, EC, 18, 53, 8B, 5D, 0C, 56, 8B, 73, 08, 33, 35, A0, 9C, 04, 10, 57, 8B, 06, C6, 45, FF, 00, C7, 45, F4, 01, 00, 00, 00, 8D, 7B, 10, 83, F8, FE, 74, 0D, 8B, 4E, 04, 03, CF, 33, 0C, 38, E8, EE, C1, FF, FF, 8B, 4E, 0C, 8B, 46, 08, 03, CF, 33, 0C, 38, E8, DE, C1, FF, FF, 8B, 45, 08, F6, 40, 04, 66, 0F, 85, 19, 01, 00, 00, 8B, 4D, 10, 8D, 55, E8... 
[+]

Code size:

232.5 KB (238,080 bytes)

The file common.dll has been discovered within the following program.

Websteroids by Creative Island Media, LLC

This is ad-supported (adware) software, part of Injekt, that is very difficult to remove as the publisher will ignore the Windows Add/Remove feature and re-install it after the user reboot their PC.

www.websteroidsapp.com

83% remove it

Remove common.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.