iRobinHood

By GoldSparrow in Potentially Unwanted Programs

Threat Scorecard

Ranking: 8,262
Threat Level: 20 % (Normal)
Infected Computers: 3,435
First Seen: April 15, 2014
Last Seen: February 9, 2024
OS(es) Affected: Windows

IrobinHood is an adware program classified by PC security researchers as a Potentially Unwanted Program. However, there is a twist regarding IrobinHood. The creators of IrobinHood claim that all of the advertisement revenue that IrobinHood generates is used to support charitable causes. In essence, IrobinHood is distributed as a Web browser add-on that allows computer users to contribute to charity by viewing advertisements and making online purchases. However, despite the fact that the goals of IrobinHood are entirely laudable, IrobinHood still uses many of the mechanisms and strategies of adware and known PUPs. In essence, the only difference between IrobinHood and the majority of other adware components is that the revenue IrobinHood generates is donated to charity instead of being used to further unsafe activities or for the personal profit of its creators.

IrobinHood – The Adware that Allows You to do Good But Has Negative Effects on Your PC

Viewing the IrobinHood website, malware analysts have noted that the creators of IrobinHood are forthright about what their Web browser add-on does. However, they do not disclose that IrobinHood may cause problems on affected Web browsers. Even though the advertising and marketing revenue is donated to charity, it is important to remember that in generating this revenue the computer users' privacy may still be placed at risk and the affected Web browser's performance may also be affected negatively. This happens because, like other adware, IrobinHood inserts advertisements into the affected Web browser, tracks the computer users' online activities for marketing purposes and interrupts online transactions with irritating messages and pop-ups.

Deciding Whether or not You Want to Keep IrobinHood on Your PC

IrobinHood is a different case than many other adware threats or PUPs. This occurs because its revenue is used for legitimate causes. However, computer users should retain the right to decide for themselves if they wish their own activities to generate advertising revenue for a third party. If IrobinHood was installed on your computer without your knowledge, you might take the necessary steps to remove IrobinHood. Computer users need to understand exactly how IrobinHood works and how IrobinHood generates the revenue that IrobinHood then donates to charity.

SpyHunter Detects & Remove iRobinHood

File System Details

iRobinHood may create the following file(s):
# File Name MD5 Detections
1. iRobinHood.dll 15fa087cc2245175cc7ec526e276955b 94
2. iRobinHood.dll 7bb1a6ba54b23719352e846481789b65 21
3. iRobinHood.dll 3ec1701471d8826956bd545001e9d852 18
4. iRobinHood.dll f68e1992f2f873515a37875dad3f1959 14
5. iRobinHood.dll 1a2033db116eb9d4ef14451e3e4979ee 14
6. iRobinHood.dll 59beb9b82184a996c4b95f7fcc5dbdbf 6
7. iRobinHood.dll ab0482ec1ef425b8f49c5bd100b675d3 4
8. C:\Program Files\iRobinHood\iRobinHood Addon\iRobinHood.dll 9169e823eb04e6967648ce8c7413ef08
9. C:\Program Files\iRobinHood\iRobinHood Addon\iRobinHood.dll
10. C:\Program Files\iRobinHood\iRobinHood Addon\uninstall.exe

Registry Details

iRobinHood may create the following registry entry or registry entries:
CLSID
{54E67346-EE5A-45B6-82AA-4F0BB28C79C2}
{C8E891B7-5E49-4EF1-9F77-6B96CF79FFED}
{CD378667-9A52-445B-AE72-DFCF59AE18FB}
SOFTWARE\Classes\AppID\iRobinHood.DLL
SOFTWARE\Classes\AppID\{CB683DF4-EA2D-4C77-89C8-8B6BB37ACCF5}
SOFTWARE\Classes\iRobinHood.IEiRobinHoodAddon
SOFTWARE\Classes\iRobinHood.IEiRobinHoodAddon.1
SOFTWARE\Classes\Wow6432Node\AppID\iRobinHood.DLL
SOFTWARE\Classes\Wow6432Node\AppID\{CB683DF4-EA2D-4C77-89C8-8B6BB37ACCF5}
SOFTWARE\iRobinHood
SOFTWARE\iRobinHoodInstall
Software\Microsoft\Internet Explorer\Approved Extensions\{54E67346-EE5A-45B6-82AA-4F0BB28C79C2}
SOFTWARE\Microsoft\Internet Explorer\Extensions\{54E67346-EE5A-45B6-82AA-4F0BB28C79C2}
Software\Microsoft\Internet Explorer\LowRegistry\Extensions\CmdMapping\{54E67346-EE5A-45B6-82AA-4F0BB28C79C2}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{54E67346-EE5A-45B6-82AA-4F0BB28C79C2}
SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{54E67346-EE5A-45B6-82AA-4F0BB28C79C2}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54E67346-EE5A-45B6-82AA-4F0BB28C79C2}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{54E67346-EE5A-45B6-82AA-4F0BB28C79C2}
SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{54E67346-EE5A-45B6-82AA-4F0BB28C79C2}
SOFTWARE\Mozilla\Firefox\Extensions\irobinhood@irobinhood.org
SOFTWARE\Wow6432Node\Classes\AppID\iRobinHood.DLL
SOFTWARE\Wow6432Node\Classes\AppID\{CB683DF4-EA2D-4C77-89C8-8B6BB37ACCF5}
SOFTWARE\Wow6432Node\iRobinHood
SOFTWARE\Wow6432Node\iRobinHoodInstall
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Extensions\{54E67346-EE5A-45B6-82AA-4F0BB28C79C2}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{54E67346-EE5A-45B6-82AA-4F0BB28C79C2}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{54E67346-EE5A-45B6-82AA-4F0BB28C79C2}
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\irobinhood@irobinhood.org

Directories

iRobinHood may create the following directory or directories:

%PROGRAMFILES%\iRobinHood
%PROGRAMFILES(x86)%\iRobinHood
%USERPROFILE%\AppData\LocalLow\iRobinHood

Trending

Most Viewed

Loading...