Home Malware Programs Adware Remarkit

Remarkit

Posted: December 11, 2013

Threat Metric

Ranking: 1,001
Threat Level: 2/10
Infected PCs: 278,267
First Seen: December 11, 2013
Last Seen: March 10, 2025
OS(es) Affected: Windows

Remarkit is an adware program that modifies the Web pages in your browser to display additional advertisements from its network. Although Remarkit doesn't try to harm your PC and isn't a threat, Remarkit's advertisements still aren't beneficial for your Web-browsing experience, and deleting Remarkit should be considered the best thing for you to do. With Remarkit often installed in formats that appear to be resistant to casual removal methods, malware researchers advise that you use anti-malware applications to verify that any attempts at removing Remarkit actually go through as planned.

The Unremarkable State of Remarkit Advertising

Remarkit doesn't have any mentionable features to your benefit, but, instead, uses advertisement-based browser modifications as the foundation of its functional usage. The Remarkit hardware company has released an official statement denying any association with the Remarkit adware program, and also joined malware experts in noting that the Remarkit adware appears to have been developed recently (early November of 2013). The suspected distribution methods for Remarkit adware appear to be based on free software bundles, with Remarkit adware being installed in combination with another, more desirable product than itself.

Since Remarkit advertisements can be identified through an included 'Ads by Remarkit' tag line, you shouldn't experience many issues in identifying a Remarkit, separate from other adware issues. Remarkit advertisements have been known to promote the aforementioned Remarkit.com company, but malware experts also see them in conjunction with advertisements for other services.

Remarkit's advertisements are loaded directly into unrelated Web pages within your browser, as opposed to being delivered via separate pop-up windows. These advertisements may increase loading times, cause browser instability or interfere with any navigation through a site. Malware experts are particularly concerned with Remarkit's recent history also including an association with risky pop-up attacks involving scamware, although these attacks appear to have been caused by a secondary PC threat installed with Remarkit, rather than from Remarkit.

Some Reasonable Remarks on Remarkit's Removal

Protecting your PC from incidental exposure to threats from the Remarkit advertisements should take a multiple-step approach. Anti-malware security products can block unsafe Web content, but you also should disable scripts that aren't required for trusted sites, update your software regularly, treat any unusual system alerts from your browser with the utmost suspicion, and avoid installing products directly through advertising networks. Normal Remarkit installations, while parasitic, shouldn't be immediate dangers to your computer, as long as you follow the above safety guidelines.

Unfortunately, it's more difficult to remove Remarkit adware from your browser than it is to spot its advertisements. Because of its history and general obstinacy to being uninstalled through the proper channels, deleting Remarkit usually should use the system-scanning functions of reliable anti-malware programs for your ease of use. Any scans used should be allowed to be completed, rather than aborted after Remarkit's removal – since malware experts have connected various PC threats, including malware, to Remarkit adware.

Aliases

AddLyrics [Sophos]not-a-virus:HEUR:AdWare.Win32.Agent.heur [Kaspersky]Win32:Adware-BLE [PUP] [Avast]Agent.Z [AVG]Adware/Agent [Fortinet]GrayWare[AdWare:not-a-virus]/Win32.Agent [Antiy-AVL]BehavesLike.Win32.Downloader.ch [McAfee-GW-Edition]Trojan.Click3.8219 [DrWeb]UnclassifiedMalware [Comodo]Generic PUA BK [Sophos]not-a-virus:AdWare.Win32.Agent.akib [Kaspersky]Win32:Dropper-gen [Drp] [Avast]Trojan.Gen [Symantec]Adware ( 004a07b21 ) [K7AntiVirus]RDN/Generic PUP.x!chg [McAfee]
More aliases (63)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



D:\Pc Copia Antiguo\Archivos de programa\Re-markit-soft\Re-markit155.exe.vir File name: Re-markit155.exe.vir
Size: 194.56 KB (194560 bytes)
MD5: 2a863fe1a82cccf68c7bb23c3af1eedc
Detection count: 3,368
Mime Type: unknown/vir
Path: D:\Pc Copia Antiguo\Archivos de programa\Re-markit-soft\Re-markit155.exe.vir
Group: Malware file
Last Updated: June 25, 2021
%PROGRAMFILES(x86)%\Re-markit-soft\Re-markit155.exe File name: Re-markit155.exe
Size: 193.02 KB (193024 bytes)
MD5: 0aa7a25a345fb50f76a279936ae07c76
Detection count: 2,267
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Re-markit-soft
Group: Malware file
Last Updated: May 13, 2014
%PROGRAMFILES(x86)%\Re-markit-soft\ReMa.exe File name: ReMa.exe
Size: 334.33 KB (334336 bytes)
MD5: 6bed8e17b1f7c39f2050de358f07d4d4
Detection count: 1,454
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Re-markit-soft
Group: Malware file
Last Updated: May 13, 2014
%PROGRAMFILES(x86)%\Re-markit-soft\Re-markit_wd.exe File name: Re-markit_wd.exe
Size: 93.69 KB (93696 bytes)
MD5: 01dbb3ed4e3be9fdc3ca3b9444adc9d9
Detection count: 1,344
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Re-markit-soft
Group: Malware file
Last Updated: January 20, 2020
%PROGRAMFILES(x86)%\Re-markit-soft\ReMar.exe File name: ReMar.exe
Size: 321.02 KB (321024 bytes)
MD5: 771af7911b45330959e46c61e05e4cc0
Detection count: 1,262
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\Re-markit-soft
Group: Malware file
Last Updated: January 20, 2020

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{12E09D7C-C3A5-E9D0-04FB-D6B4A0637D4A}{4232F406-A0E7-9E2B-E39F-3E6DED20182B}{58dace68-7dab-411d-b62d-bbb581638d9b}{9F5E124F-A26B-1086-5205-8AE4538CB6D5}{E6A04ACD-F014-BD3F-C732-4F53E561C9B4}{FDD02060-7FE6-3513-4840-93767FEEEA81}File name without pathhttp_static.re-markable00.re-markable.net_0.localstoragehttp_static.re-markable00.re-markable.net_0.localstorage-journalhttp_static.re-markit00.re-markit.co_0.localstoragehttp_static.re-markit00.re-markit.co_0.localstorage-journalHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\Re-MarkitSoftware\AppDataLow\Software\Re_markitSoftware\Microsoft\Internet Explorer\Approved Extensions\{11111111-1111-1111-1111-110411351140}Software\Microsoft\Internet Explorer\DOMStorage\re-markit.coSoftware\Microsoft\Internet Explorer\DOMStorage\static.re-markit00.re-markit.coSoftware\Microsoft\Internet Explorer\LowRegistry\DOMStorage\re-markit.coSoftware\Microsoft\Internet Explorer\LowRegistry\DOMStorage\static.re-markit00.re-markit.coSOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Re-Markit-bg.exeSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Re-markit Update.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Re-markit Update.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Re-markit_wd.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\Re-markit_wd.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Re-markit UpdateSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Re-markit_wdSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{4232F406-A0E7-9E2B-E39F-3E6DED20182B}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{4232F406-A0E7-9E2B-E39F-3E6DED20182B}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{4232F406-A0E7-9E2B-E39F-3E6DED20182B}Software\Mozilla\Firefox\Extensions\{1b8613ff-4044-4d9a-8282-fb3ff6c349e3}Software\Mozilla\Firefox\Extensions\{372479DD-B552-F0A8-F0E5-EEEEA6602285}Software\Mozilla\Firefox\Extensions\{44716f15-6b17-4a1d-9871-07664e7aa179}Software\Mozilla\Firefox\Extensions\{58167137-F08E-F867-44D8-3189AA654B6F}Software\Mozilla\Firefox\Extensions\{6df319e1-31f2-4ed6-acbc-5823e62f993f}Software\Mozilla\Firefox\Extensions\{796e0eeb-92a1-46db-884d-91abc57eb7af}Software\Mozilla\Firefox\Extensions\{9de4648a-524c-4370-be43-9826d3f44208}Software\Mozilla\Firefox\Extensions\{c7a62e80-00f9-475e-9b89-e4d33ed41dcf}Software\Mozilla\Firefox\Extensions\{D2195854-4C0F-B8C6-0B1B-3AFE55BC1594}Software\Mozilla\Firefox\Extensions\{E5D8AC02-473C-FCEB-63FD-A4FF9CD0AE61}SOFTWARE\Re-MarkitSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Re-Markit-bg.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{4232F406-A0E7-9E2B-E39F-3E6DED20182B}SYSTEM\ControlSet001\services\Re-markitSYSTEM\ControlSet002\Services\Re-markitSYSTEM\CurrentControlSet\services\Re-markitHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}38E80F06-76BE-F085-3B14-DED994ABC34E54151819-959C-CF37-56D1-E5FCB816F2FC76299AFE-7A34-5625-60C5-04F0D2CD07C9C41FBC48-71F7-7251-7D3C-727F8A92664BRe-Markit

Additional Information

The following directories were created:
%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\jdbbenbokodfnimpcglkdjfcokkdkkjg%LOCALAPPDATA%\Google\Chrome\User Data\Default\databases\chrome-extension_jdbbenbokodfnimpcglkdjfcokkdkkjg_0%PROGRAMFILES%\-Re-markit-soft%PROGRAMFILES%\Re-Markit%PROGRAMFILES%\Re-markit Corp%PROGRAMFILES%\Re-markit-soft%PROGRAMFILES%\Re_markit%PROGRAMFILES(x86)%\-Re-markit-soft%PROGRAMFILES(x86)%\Re-Markit%PROGRAMFILES(x86)%\Re-markit Corp%PROGRAMFILES(x86)%\Re-markit-soft%PROGRAMFILES(x86)%\Re_markit
Loading...