NJax

By GoldSparrow in Adware

Threat Scorecard

Ranking: 14,517
Threat Level: 20 % (Normal)
Infected Computers: 2,317
First Seen: November 14, 2014
Last Seen: July 26, 2023
OS(es) Affected: Windows

The NJax software by NinjaSoft LLC. is promoted as a food supplement manager for users that exercise regularly. The NJax software is supported by marketers that aim to sell vitamins, proteins and fitness equipment. Unfortunately, the NJax application is classified as adware because it may use aggressive marketing strategies to generate revenue for its developers and earn a profit for advertisers. The NJax adware may be detected as PUA.Win32.Njax.81, Win32/Adware.BrAppWare.A and PUA.BrAppWare. Security analysts note that the NJax adware may travel in the company of badware like BR Media Player and run as a system service in the Windows Task Manager. The NJax adware may make modifications to the DNS settings of infected PC users and reroute their Web traffic to untrusted servers that are under the control of unlicensed marketers. Moreover, the NJax adware may load corrupted content in your browser that may include obsolete SSL certificate.

The ads by the NJax adware may be presented to you as pop-up windows and banners while you are surfing the Internet. You may see floating ad boxes, coupons, and discounts from less-reputable e-commerce portals when you visit established online stores like Amazon, Best Buy and eBay. The NJax adware may use files like ssleay32.dll, libeay32.dll, nfapi.dll and protocolfilters.dll to maintain its functionality, and show advertisements via iFrames on your screen. Additionally, the NJax adware may introduce a Web filter to your PC and install it in the System32 folder. The NJax adware may use a module called mosfilterdrv.sys to limit your Internet access, and you may not be able to load pages correctly. The NJax adware may connect to the 192.99.126.55 and 167.114.34.238 IP addresses to download marketing materials for offline display. However, those IP addresses are infection sources for the Sality and Wepiall malware, and you need to remove the NJax as soon as possible. You should consider using a renowned anti-malware instrument to delete the binary associated with the NJax adware safely.

SpyHunter Detects & Remove NJax

File System Details

NJax may create the following file(s):
# File Name MD5 Detections
1. 310714_nj[1] 3d50436018a35253d0ce788189f9ba45 12
2. NJax.exe 90855bc084c1caef4ba9799478ad7041 11
3. NJax.exe 6b433e7c7d1f14cb8444c581109bced1 3
4. NJax.exe f7821dfbc57ccb8115839e39f6149d2d 1
5. NJax.exe d3782373661c8a6571327e440ccbbd22 1

Registry Details

NJax may create the following registry entry or registry entries:
SOFTWARE\NJax
SYSTEM\ControlSet001\services\NJax
SYSTEM\ControlSet002\services\NJax
SYSTEM\CurrentControlSet\services\NJax

Directories

NJax may create the following directory or directories:

%PROGRAMFILES%\ActSys
%PROGRAMFILES%\NJax
%PROGRAMFILES(x86)%\ActSys
%PROGRAMFILES(x86)%\NJax
%WINDIR%\Temp\ActSys
%WINDIR%\Temp\NJax

Related Posts

Trending

Most Viewed

Loading...