Disoaq App: The Malicious Dropper Posing as a PUA

Disoaq App is a Potentially Unwanted Application (PUA) that acts as a dropper for Legion Loader malware. Identified during an investigation of a rogue installer, Disoaq App has proven to be more than a nuisance, leading to a cascade of infections, privacy issues, and financial losses.

---

Disoaq App Threat Summary

Attribute	Details
Name	Disoaq App
Threat Type	PUP (Potentially Unwanted Program), PUA (Potentially Unwanted Application), Dropper
Detection Names	NANO-Antivirus (Trojan.Win32.Injuke.kudqxk), VBA32 (TrojanPSW.Vidar), Zillya (Trojan.Agent.Win32.4093738), Full List of Detections on VirusTotal
Payload	Legion Loader
Symptoms	Unfamiliar programs installed, rogue pop-ups, intrusive ads, browser redirects, decreased internet speed
Damage	Stolen passwords, identity theft, financial loss, botnet activity, slow PC performance
Distribution Methods	Deceptive ads, bundled free software installers
Danger Level	High

---

What is Disoaq App and Why is it Dangerous?

Disoaq App is classified as a dropper, which means it introduces additional harmful software into an infected system. It often spreads Legion Loader, a versatile malware capable of:

• Introducing backdoor trojans, ransomware, and cryptocurrency miners.
• Stealing sensitive information such as cryptowallet credentials and browser data.
• Manipulating browser extensions to track user activity or convert the browser into an HTTP proxy.

This threat may infiltrate systems via deceptive ads or bundling with free software installers. The installer observed by researchers also promoted a fake "Save to Google Drive" extension.

The damage caused by Disoaq App can lead to stolen credentials, identity theft, financial loss, and compromised system performance. These symptoms and outcomes underline the critical need to remove Disoaq App immediately upon detection.

---

Removal Guide

Step 1: Download SpyHunter

1. Download the installer.
2. Run the installer and follow the on-screen instructions to complete the setup.

Step 2: Perform a Full System Scan

1. Open SpyHunter and initiate a full system scan.
2. The software will detect Disoaq App and any associated malware.

Step 3: Review and Remove Threats

1. Review the scan results to identify threats.
2. Select Disoaq App and any additional malware for removal.
3. Follow the prompts to quarantine or delete the identified threats.

Step 4: Restart Your Computer
After removal, restart your computer to finalize the process and ensure your system operates normally.

---

Preventive Measures to Avoid Future Infections

1. Avoid Untrusted Downloads:
   Only download software from official or reputable sources. Verify the legitimacy of websites before downloading any content.
2. Be Cautious with Ads:
   Do not click on suspicious or intrusive pop-up ads. Many of these ads are designed to lead users to rogue installers.
3. Install Antivirus Software:
   Use a reliable antivirus program to provide real-time protection against potential threats.
4. Update Software Regularly:
   Keep your operating system, browsers, and software updated to patch vulnerabilities that cybercriminals can exploit.
5. Enable Firewalls:
   Firewalls act as a barrier between your system and unauthorized access. Ensure your firewall settings are enabled.
6. Inspect Bundled Installers:
   Always choose the “Custom” or “Advanced” installation option when installing software. This lets you uncheck additional unwanted programs.