| Name | DriverAssist |
| Type | PUP |
| Short Description | The program displays inaccurate information about the PC’s drivers. |
| Symptoms | Multiple .dll and .exe files installed. |
| Distribution Method | Bundling, freeware pages, its official website. |
| Detection tool | Download Malware Removal Tool, to See If Your System Has Been Affected By DriverAssist |
DriverAssist is a software product developed by SafeBytes Software Inc. Several professional anti-malware solutions have detected DriverAssist as s potentially unwanted application. Symantec has detected the suspicious product as PUA.DriverAssist. AV researchers have determined the application as potentially unwanted and one that displays inaccurate information about missing our outdated drivers on the system. The program requires manual installation.
It is currently affecting users running:
- Windows 7
- Windows 8
- Windows Vista
- Windows XP
PUA.DriverAssist Technical Details
According to the technical details provided by Symantec, the PUA drops multiple .exe and .dll files while it is being installed. Here are some of the files it creates on the system:
→%ProgramFiles%\DriverAssist\configen.xml
→%ProgramFiles%\DriverAssist\difxapi.dll
→%ProgramFiles%\DriverAssist\DriverAssist.exe
→%ProgramFiles%\DriverAssist\DriverAssist.exe.config
→%ProgramFiles%\DriverAssist\DriverAssist.URL
→%ProgramFiles%\DriverAssist\Extra\Inf2Cat.exe
→%ProgramFiles%\DriverAssist\Extra\Microsoft.Whos.Shared.IO.Cabinets.dll
→%ProgramFiles%\DriverAssist\Extra\Microsoft.Whos.Shared.IO.Catalogs.dll
Beside the executable and dynamic link library files, numerous keys are added to the Windows Registry, such as:
- HKEY_LOCAL_MACHINE\SOFTWARE\DriverAssist\InstallID = {23E36190-3305-44BD-AD36-1E0EE7C6B554}
- HKEY_LOCAL_MACHINE\SOFTWARE\DriverAssist\LN = 31003000330033000000
- HKEY_LOCAL_MACHINE\SOFTWARE\DriverAssist\INSTFL = installCore
What Does DriverAssist Do?
Once the installation process has finished, the application may start scanning the system for driver updates. Then, it may display bogus information about supposedly missing or outdated drivers. The user should not trust anything that the program claims.
According to researchers at ShouldIRemoveIt, during the setup process, DriverAssist will register itself so that it launches when the system is rebooted via Windows Schedule Task. Thus, a scheduled task is added to the Windows Task Scheduler so that the program is launched at predefined times. The timing will depend on the product’s version.
The main executable file is DriverAssist.exe. The program is currently popular in the United States, the United Kingdom, and Australia.
How Is DriverAssist Distributed?
The application is available for download on its official website:
However, it is also promoted on various freeware and shares pages:
As visible on the image above, the program may have something to do with iLivid.
iLivid is another infamous potentially unwanted application. The two products are likely distributed together thanks to software bundlers. Bundling is another method often applied to spread suspicious software across the Web.
In terms of bundling, the user can remain unaware about any additional installations. By skipping the custom or advanced setup option, users deprive themselves of the opportunity to choose what they download. That is why it is always crucial to get to know the product’s EULA, Terms of Use, Privacy Policy, and Download Agreement.
Hot security tips
Since malware can take over multiple .exe and .dll files, it is highly recommended to sustain AV software on your computer. PUPs tend to affect the system’s performance and make it vulnerable to other online threats. Thus, it is entirely possible that malware is hiding in the memory of your PC. It can also prevent you from downloading malware scanner.
Here are several useful security tips:
Back up your files. Since malicious programs are getting more sophisticated with every day, backing up your data is more crucial than ever. Refer to external devices and cloud services.
When dealing with malware, use an alternative browser to download AV software. Then use a USB device or other removable media to install on the affected PC.
When dealing with spyware and browser hijackers, start Windows in Safe Mode. You may need to reboot your PC in Safe Mode.
1. Remove/Uninstall DriverAssist in Windows
Here is a method in few easy steps to remove that program. No matter if you are using Windows 8, 7, Vista or XP, those steps will get the job done. Dragging the program or its folder to the recycle bin can be a very bad decision. If you do that, bits and pieces of the program get left behind, and that can lead to unstable work of your PC, mistakes with the file type associations and other unpleasant activities. The proper way to get a program off your computer is to Uninstall it. To do that:
Select the program that you want to remove, and press “Uninstall” (fig.3).
Follow the instructions above and you will successfully uninstall DriverAssist.
2. Remove DriverAssist from your browser
Remove a toolbar from Mozilla Firefox
Remove a toolbar from Google Chrome
Remove a toolbar from Internet Explorer
Remove a toolbar from Safari
Select the “Add-ons” icon from the menu
Select DriverAssist and click “Remove”
After DriverAssist is removed, restart Mozilla Firefox by closing it from the red “X” in the top right corner and start it again.
Select DriverAssist to remove, and then click ‘Disable’. A pop-up window will appear to inform you that you are about to disable the selected toolbar, and some additional toolbars might be disabled as well. Leave all the boxes checked, and click ‘Disable’.
After DriverAssist has been removed, restart Internet Explorer by closing it from the red ‘X’ in the top right corner and start it again.
Open the drop menu by clicking on the sprocket icon in the top right corner.
From the drop menu select ‘Preferences’
In the new window select ‘Extensions’
Click once on DriverAssist
Click ‘Uninstall’
A pop-up window will appear asking for confirmation to uninstall DriverAssist. Select ‘Uninstall’ again, and the DriverAssist will be removed.
3. Use an advanced anti-malware program to scan your computer for any left-over objects such as registry entries and other files after uninstall.
To clean your computer you should download an updated anti-malware program on a safe PC and then install it on the affected computer in offline mode. After that you should boot into safe mode and scan your computer to remove all DriverAssist associated objects
Absolutely Correct. Don’t use this software and remove it if you have it installed. Hosed my machine on multiple occasions and didn’t have other drivers they claimed they had before purchase.