Awesome Dealers

By GoldSparrow in Adware

Translate To:

Threat Scorecard

Ranking:	19,682
Threat Level:	10 % (Normal)
Infected Computers:	76,492

First Seen:	October 12, 2020
Last Seen:	March 8, 2024
OS(es) Affected:	Windows

The Awesome Dealers software may be promoted to users as a shopping enhancer. The Awesome Dealers software can be found in free software packages and on hxxp://awesomedealers.com/index.html. You should note that the developers of the Awesome Dealers do not take responsibility for any content provided through their software. Additionally, PC users are not given the opportunity to specify the way how they would like to receive updates and notifications from the Awesome Dealers program. We have received complaints regarding the Awesome Dealers app in the first weeks of November 2017.

It appears that the behavior of the Awesome Dealers became somewhat aggressive and PC users were subjected to waves of spam messages, notifications, browser redirects, and notifications with marketing materials. There are cybersecurity researchers who classify the Awesome Dealers program as adware and a Potentially Unwanted Program (PUP). Lab tests have shown that the Awesome Dealers adware communicates with the following IP addresses:

162.255.119.250
52.84.64.153
54.230.0.159
54.230.0.224
54.230.0.234
54.230.0.30
54.230.0.80

As mentioned above, the Awesome Dealers adware is designed to deliver content from third parties to your screen. We have detected that the Awesome Dealers adware loads images, video, and text from the following URLs:

hxxp://artafric[.]com/boxd/renew.php?rand=13InboxLightaspxn.1774256418
hxxp://awesomesoftstohavealways[.]website/
hxxp://freshupdatestoinstallsafely[.]online/
hxxp://getnewadsforawesomsoft[.]online/
hxxp://setupupgrade45678safesystems[.]download/
hxxp://updatestoget4freealwaystoday[.]website/
hxxp://workingupdate247safesystems4you[.]download/

The data downloaded by the Awesome Dealers adware includes tracking cookies and persistent Web beacons. The resources loaded by the Awesome Dealers adware may be insecure and lead users to download riskware. The Awesome Dealers adware is reported to display pages colored in black that feature a button colored in green and suggest the user proceed with the download of promotional content. The files and pages presented by the Awesome Dealers are likely to be tagged by AV scanners as:

HTML:Redirector-HQ [Trj]
JS.Z.Agent.13385.Q
JS/Techbrolo.A!Eldorado
JS:Trojan.Cryxos.D461
SupportScam:JS/TechBrolo.F
Suspicious_GEN.F47V1109
Trojan.HTML.FakeAlert

SpyHunter Detects & Remove Awesome Dealers

File System Details

Awesome Dealers may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	rlls64.dl_	cc0d25ff5c41f46a59b592867765c62c	13,392
Name: rlls64.dl_ MD5: cc0d25ff5c41f46a59b592867765c62c Size: 1.09 MB (1098096 bytes) Detections: 13,392 Path: \??\C:\Windows\system32\rlls64.dl_ Group: Malware file Last Updated: April 30, 2024
2.	rlls.dl_	f949546ac2c4c8b6da746f5ac00a9d01	6,342
Name: rlls.dl_ MD5: f949546ac2c4c8b6da746f5ac00a9d01 Size: 740.72 KB (740720 bytes) Detections: 6,342 Path: \??\C:\Windows\SYSWOW64\rlls.dl_ Group: Malware file Last Updated: April 30, 2024
3.	rlservice.exe	40bc7aaacab71f603662590a0028e827	4,571
Name: rlservice.exe MD5: 40bc7aaacab71f603662590a0028e827 Size: 170.35 KB (170352 bytes) Detections: 4,571 Type: Executable File Path: C:\Program Files (x86)\RelevantKnowledge\rlservice.exe Group: Malware file Last Updated: January 29, 2024
4.	rlservice.exe	38b3c82edfc1839ff79a8832b56bcf2a	4,052
Name: rlservice.exe MD5: 38b3c82edfc1839ff79a8832b56bcf2a Size: 170.35 KB (170352 bytes) Detections: 4,052 Type: Executable File Path: C:\Program Files (x86)\RelevantKnowledge\rlservice.exe Group: Malware file Last Updated: January 28, 2024
5.	rlvknlg.exe	4895963f5a029d03e1d81cb71ad4168b	2,912
Name: rlvknlg.exe MD5: 4895963f5a029d03e1d81cb71ad4168b Size: 6.1 MB (6107504 bytes) Detections: 2,912 Type: Executable File Path: C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe Group: Malware file Last Updated: January 25, 2024
6.	rlvknlg32.exe	629d3c19cd65593f518986d240aac735	2,848
Name: rlvknlg32.exe MD5: 629d3c19cd65593f518986d240aac735 Size: 161.13 KB (161136 bytes) Detections: 2,848 Type: Executable File Path: C:\PROGRA~2\RELEVA~1\rlvknlg32.exe Group: Malware file Last Updated: April 3, 2024
7.	rlvknlg64.exe	d758f0f48ade788cf3ea60c6293c498a	2,608
Name: rlvknlg64.exe MD5: d758f0f48ade788cf3ea60c6293c498a Size: 190.32 KB (190320 bytes) Detections: 2,608 Type: Executable File Path: C:\PROGRA~2\RELEVA~1\rlvknlg64.exe Group: Malware file Last Updated: April 3, 2024
8.	rlvknlg.exe	550737266503571619bc6ca939e4af6b	2,563
Name: rlvknlg.exe MD5: 550737266503571619bc6ca939e4af6b Size: 6.1 MB (6107504 bytes) Detections: 2,563 Type: Executable File Path: C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe Group: Malware file Last Updated: February 19, 2024
9.	rlvknlg32.exe	f00d2b52edb5070c0ea683de04a0a954	2,421
Name: rlvknlg32.exe MD5: f00d2b52edb5070c0ea683de04a0a954 Size: 161.13 KB (161136 bytes) Detections: 2,421 Type: Executable File Path: C:\PROGRA~2\RELEVA~1\rlvknlg32.exe Group: Malware file Last Updated: April 30, 2024
10.	rlvknlg64.ex_	68d7324ba0773b18853916efcffce529	2,209
Name: rlvknlg64.ex_ MD5: 68d7324ba0773b18853916efcffce529 Size: 190.32 KB (190320 bytes) Detections: 2,209 Path: \??\C:\Program Files (x86)\RelevantKnowledge\rlvknlg64.ex_ Group: Malware file Last Updated: April 30, 2024
11.	rkinstaller.exe	cf8361bd4360c31db7ed331a3e855576	1,405
Name: rkinstaller.exe MD5: cf8361bd4360c31db7ed331a3e855576 Size: 3.11 MB (3119472 bytes) Detections: 1,405 Type: Executable File Path: %SYSTEMDRIVE%\Users\<username>\AppData\Local\Temp\is-CDB4A.tmp\rkinstaller.exe Group: Malware file Last Updated: November 15, 2023
12.	rkverify.exe	60db193bce83f05363c874fec9b310c5	669
Name: rkverify.exe MD5: 60db193bce83f05363c874fec9b310c5 Size: 609.64 KB (609648 bytes) Detections: 669 Type: Executable File Path: %SYSTEMDRIVE%\Users\<username>\AppData\Local\Temp\is-GNQCI.tmp\rkverify.exe Group: Malware file Last Updated: March 12, 2024
13.	rkinstaller.exe	53e0b8a1e570bae84ce2f72a1d889b81	522
Name: rkinstaller.exe MD5: 53e0b8a1e570bae84ce2f72a1d889b81 Size: 3.11 MB (3110768 bytes) Detections: 522 Type: Executable File Path: %SYSTEMDRIVE%\Users\<username>\AppData\Local\Temp\is-D3EEE.tmp\rkinstaller.exe Group: Malware file Last Updated: April 1, 2024
14.	spt_setup.exe	89c8796cd6169d14531791b7388bc0e9	291
Name: spt_setup.exe MD5: 89c8796cd6169d14531791b7388bc0e9 Size: 2.73 MB (2737600 bytes) Detections: 291 Type: Executable File Path: C:\Users\<username>\AppData\Local\Temp\is-GVU10.tmp\spt_setup.exe Group: Malware file Last Updated: March 4, 2024
15.	rlvknlg.exe	dedb374c58801ff2b6bb515c87720a93	38
Name: rlvknlg.exe MD5: dedb374c58801ff2b6bb515c87720a93 Size: 7.02 MB (7024448 bytes) Detections: 38 Type: Executable File Path: C:\Program Files (x86)\RelevantKnowledge\rlvknlg.exe Group: Malware file Last Updated: April 24, 2024
16.	rlls64.dll	5417f1ec92429ef41ed17eb5bbb4f249	38
Name: rlls64.dll MD5: 5417f1ec92429ef41ed17eb5bbb4f249 Size: 1.12 MB (1129280 bytes) Detections: 38 Type: Dynamic link library Path: C:\WINDOWS\system32\rlls64.dll Group: Malware file Last Updated: April 24, 2024
17.	rlls.dll	b4a262f7a440a830de2fabc16327b5c4	37
Name: rlls.dll MD5: b4a262f7a440a830de2fabc16327b5c4 Size: 907.58 KB (907584 bytes) Detections: 37 Type: Dynamic link library Path: C:\WINDOWS\SysWOW64\rlls.dll Group: Malware file Last Updated: April 24, 2024
18.	3e632d7f0392251dd0b3049734163f5c_RKInstall_050620.exe	3e632d7f0392251dd0b3049734163f5c	35
Name: 3e632d7f0392251dd0b3049734163f5c_RKInstall_050620.exe MD5: 3e632d7f0392251dd0b3049734163f5c Size: 3.11 MB (3110768 bytes) Detections: 35 Type: Executable File Path: C:\Users\<username>\Desktop\Samples\Deceptor\3e632d7f0392251dd0b3049734163f5c_RKInstall_050620.exe Group: Malware file Last Updated: September 14, 2023
19.	rlservice.exe	34aff57d6f2f1c074573b7aaa573092a	34
Name: rlservice.exe MD5: 34aff57d6f2f1c074573b7aaa573092a Size: 4.35 MB (4358976 bytes) Detections: 34 Type: Executable File Path: C:\Program Files (x86)\RelevantKnowledge\rlservice.exe Group: Malware file Last Updated: April 18, 2024
20.	rlvknlg32.exe	3f128ed69207decf2fc07526f8dc656c	31
Name: rlvknlg32.exe MD5: 3f128ed69207decf2fc07526f8dc656c Size: 252.22 KB (252224 bytes) Detections: 31 Type: Executable File Path: C:\PROGRA~2\RELEVA~1\rlvknlg32.exe Group: Malware file Last Updated: April 24, 2024
21.	rlvknlg64.exe	fc1b0b7cd09b3f88a759f3b9a9ac3023	31
Name: rlvknlg64.exe MD5: fc1b0b7cd09b3f88a759f3b9a9ac3023 Size: 312.12 KB (312128 bytes) Detections: 31 Type: Executable File Path: C:\PROGRA~2\RELEVA~1\rlvknlg64.exe Group: Malware file Last Updated: April 24, 2024
22.	PowerSoundEditorFree.exe	eed30fdf147ff30a24f2279d13e3bbe5	25
Name: PowerSoundEditorFree.exe MD5: eed30fdf147ff30a24f2279d13e3bbe5 Size: 11.92 MB (11921528 bytes) Detections: 25 Type: Executable File Group: Malware file Last Updated: May 25, 2023
23.	FreeOCRtoWord.exe	57595cf8580c67962475d19518572d49	24
Name: FreeOCRtoWord.exe MD5: 57595cf8580c67962475d19518572d49 Size: 11.15 MB (11156552 bytes) Detections: 24 Type: Executable File Group: Malware file Last Updated: May 25, 2023
24.	RKInstall_052919.exe	76d1bc443d9a01e017783b9a96b6079b	23
Name: RKInstall_052919.exe MD5: 76d1bc443d9a01e017783b9a96b6079b Size: 3.11 MB (3111280 bytes) Detections: 23 Type: Executable File Group: Malware file Last Updated: May 25, 2023
25.	rk_setup_EN.exe	5f253092541445f2c54db1387cf2fa85	8
Name: rk_setup_EN.exe MD5: 5f253092541445f2c54db1387cf2fa85 Size: 2.73 MB (2737600 bytes) Detections: 8 Type: Executable File Path: C:\Users\<username>\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\NYD7KN1P\rk_setup_EN.exe Group: Malware file Last Updated: May 25, 2023
26.	uprkset.exe	6a38c053466eab3656074f81ddc00d77	4
Name: uprkset.exe MD5: 6a38c053466eab3656074f81ddc00d77 Size: 3 MB (3008128 bytes) Detections: 4 Type: Executable File Path: C:\Users\<username>\AppData\Local\Temp\is-JCDTK.tmp\uprkset.exe Group: Malware file Last Updated: April 6, 2024
27.	rlph.dll	dab262f4d7d17676f9f80a28116f89e5	2
Name: rlph.dll MD5: dab262f4d7d17676f9f80a28116f89e5 Size: 827.2 KB (827200 bytes) Detections: 2 Type: Dynamic link library Path: . Group: Malware file Last Updated: April 24, 2024
28.	rk_setup_EN.exe	fba926d9646ef2981f75d25ae3fe5d1a	0
Name: rk_setup_EN.exe MD5: fba926d9646ef2981f75d25ae3fe5d1a Size: 3 MB (3008168 bytes) Detections: 0 Type: Executable File Path: . Group: Malware file

More files

Promote SpyHunter via ShareASale & Get a 55% Payout

Search

Change Region

Awesome Dealers

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove Awesome Dealers

File System Details

Submit Comment

Related Posts

PUP.Awesome Dealers

Trending

1xlite-230379.top

Embro.info

Fuxnet ICS Malware

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?