» InfoAtomsClientIE.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

InfoAtomsClientIE.dll

InfoAtoms

InfoAtoms Inc.

This is part of the InfoAtoms browser extension which will display variopus forms of advertising in the web browser by injecting new ads such as banner, text-links and search results. The module InfoAtomsClientIE.dll by InfoAtoms has been detected as adware by 16 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘InfoAtoms’. This file is typically installed with the program InfoAtoms by InfoAtoms, Inc. which is a potentially unwanted software program.

File name:

Publisher:

InfoAtoms Inc. (signed and verified)

Product:

InfoAtoms

Version:

1.6.0.1

MD5:

7761080e3b59800d59bf62d52af1bc4b

SHA-1:

e9e6188f8328ad0e5a6993845bf808e4cd482c6f

SHA-256:

191d8ea48c46673661c782bba312c521e1467b97a309f28459e0d25fec8d4c49

Scanner detections:

16 / 68

Status:

Adware

Analysis date:

4/26/2024 3:23:05 AM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

Adware/InfoAtoms.A.3

7.11.96.130

avast!

Win32:InfoAtoms-A [Adw]

2014.9-140314

Bitdefender

Adware.Generic.552468

1.0.20.365

Dr.Web

Adware.Plugin.70

9.0.1.073

Emsisoft Anti-Malware

Adware.Generic.552468

8.14.03.14.10

ESET NOD32

Win32/AdWare.Vitruvian (variant)

9.12067

F-Secure

Adware.Generic.552468

11.2014-14-03_6

G Data

Adware.Generic.552468

14.3.22

IKARUS anti.virus

AdWare.Win32.InfoAtoms

t3scan.2.0.127

Malwarebytes

PUP.Optional.InfoAtoms.A

v2015.08.22.12

Microsoft Security Essentials

Adware:Win32/InfoAtoms

1.163.1557.0

Quick Heal

Adware.InfoAtoms (Not a Virus)

3.14.12.00

Reason Heuristics

PUP.InfoAtoms.R

14.3.14.10

Sophos

Generic PUA EN (PUA)

4.98

Trend Micro House Call

TROJ_GEN.F47V0402

7.2.73

VIPRE Antivirus

InfoAtoms

20446

File size:

140.5 KB (143,856 bytes)

Product version:

1.6.0.1

Original file name:

InfoAtomsClientIE.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\infoatoms\ie32\infoatomsclientie.dll

Digital Signature

Signed by:

InfoAtoms Inc.

Authority:

GoDaddy.com, Inc.

Valid from:

3/25/2013 1:14:09 PM

Valid to:

4/3/2014 4:35:07 PM

Subject:

CN=InfoAtoms Inc., O=InfoAtoms Inc., L=La Jolla, S=CA, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

4B62AFD2CD47BB

Registration

CLSID:

{103089DA-0F31-4A8B-843F-7D24A7FE8345}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

3/25/2013 5:22:35 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

1536:TpQnYxQ8x9/Gc9NhLS+bKXfcCUC9G/hns8P+ucd8+6oc5nOzgLb38yNXcka63P99:TAGH9NUXEPhmv8+6jnAyNXcka63PPt00

Entry address:

0xC510

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, F9, 3D, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 08, C8, 01, 10, E8, 61, 03, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 80, FA, 01, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 90, 7E, 01, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4... 
[+]

Entropy:

6.2335

Developed / compiled with:

Microsoft Visual C++

Code size:

74.5 KB (76,288 bytes)

Internet Explorer BHO

Display name:

InfoAtoms

CLSID:

{103089DA-0F31-4A8B-843F-7D24A7FE8345}

The file InfoAtomsClientIE.dll has been discovered within the following program.

InfoAtoms by InfoAtoms, Inc.

InfoAtoms is and adware web browser plugin designed to provide users with information regarding specific words and expressions that they highlight with the mouse cursor. The interface of InfoAtoms consists of three tabs: Research, Translate, and Thesaurus.

www.infoatoms.com

88% remove it

Remove InfoAtomsClientIE.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.