home

scantack.ieupdate.dll

Scan Tack

This is the Internet Explorer add-on for the Yontoo Scan Tack branded web browser plugin (injects banner, text-link and popup ads). The component is responisble for registering the Browser Helper Object into IE and keeping it registered. The module scantack.ieupdate.dll by Scan Tack has been detected as adware by 20 anti-malware scanners. It will plug into the web browser and display context-based advertisements by overwriting existing ads or by inserting new ones on various web pages.
Publisher:
Scan Tack  (signed and verified)

Version:
1.0.5474.36973

MD5:
0faae4027b599efd4280d5180b70b0c0

SHA-1:
6b83cd319f626238d6519d1f245c5a2327d9990b

SHA-256:
cd7188d9326c86f75dafd58d124540cd7ccb1132d14b5ed353233dbb8904636b

Scanner detections:
20 / 68

Status:
Adware

Explanation:
Part of the Yontoo distributed ad-supported web browser add-on for Internet Explorer.

Analysis date:
4/23/2024 10:43:21 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.SwiftBrowse.Y
6315774

Avira AntiVirus
Adware/BrowseFox.apb
7.11.198.178

avast!
Win32:BrowseFox-J [PUP]
141214-1

AVG
Generic
2015.0.3245

Baidu Antivirus
Adware.Win32.BrowseFox
4.0.3.141229

Bitdefender
Adware.SwiftBrowse.Y
1.0.20.1815

Emsisoft Anti-Malware
Adware.SwiftBrowse.Y
9.0.0.4668

ESET NOD32
MSIL/BrowseFox.L potentially unwanted application
7.0.302.0

F-Prot
W32/S-cfdb2970
v6.4.7.1.166

F-Secure
Adware.SwiftBrowse.Y
5.13.68

G Data
Adware.SwiftBrowse
14.12.24

IKARUS anti.virus
PUA.MSIL.BrowseFox
t3scan.1.8.5.0

K7 AntiVirus
Unwanted-Program
13.188.14484

McAfee
Artemis!0FAAE4027B59
5600.6901

MicroWorld eScan
Adware.SwiftBrowse.Y
15.0.0.1089

Norman
Adware.SwiftBrowse.Y
29.12.2014 07:19:03

nProtect
Adware.SwiftBrowse.Y
14.12.29.01

Qihoo 360 Security
Win32/Virus.Adware.06a
1.0.0.1015

Reason Heuristics
Adware.Yontoo.ScanTack.Q
14.12.29.19

VIPRE Antivirus
Threat.4741131
35418

File size:
658.3 KB (674,080 bytes)

Product version:
1.0.5474.36973

Original file name:
ScanTack.IEUpdate2014122804.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\scantack\bin\plugins\scantack.ieupdate.dll

Digital Signature
Signed by:
Scan Tack

Authority:
VeriSign, Inc.

Valid from:
1/22/2014 12:00:00 AM

Valid to:
1/22/2015 11:59:59 PM

Subject:
CN=Scan Tack, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Scan Tack, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
44D91A3142283CE62B23F23C84838B0D

File PE Metadata
Compilation timestamp:
12/28/2014 4:32:31 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:tDZxnfwdZnkq78O+8l6VEdPpxO9oHmCUNIj5iZf9Gkfq:VZa048O5l6YPu9oHmCUNIj5iho

Entry address:
0xA477A

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
650 KB (665,600 bytes)

Remove scantack.ieupdate.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.