home

alnaddytoolbartlbr.dll

Alnaddy Toolbar

Montera Technologeis LTD

This is part of the Montera web browser toolbar and extension that will modify the browser's default search provider, DNS, and home page functions. The module alnaddytoolbartlbr.dll by Montera Technologeis has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program Alnaddy.com toolbar on IE and Chrome by Conduit Ltd. which is a potentially unwanted software program.
Publisher:
Alnaddy.com  (signed by Montera Technologeis LTD)

Product:
Alnaddy Toolbar

Version:
1.6.9.0

MD5:
708d2cf4528f0f34157929efef3c24ce

SHA-1:
2571b5c9d521eeb86992fecb03bc6109c59e8f2e

SHA-256:
d705bd8d491c3dcddc080c2163f9ac61192692d1bd542444220775f67bf6a87a

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/19/2024 11:25:55 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Montiera.Montera.Toolbar (M)
16.2.11.0

File size:
287.1 KB (293,992 bytes)

Product version:
1.6.9.0

Copyright:
(c) Alnaddy.com All rights reserved.

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\alnaddy.com\alnaddytoolbar\1.6.9.5\alnaddytoolbartlbr.dll

Digital Signature
Signed by:
Montera Technologeis LTD

Authority:
COMODO CA Limited

Valid from:
5/28/2012 4:00:00 AM

Valid to:
5/29/2013 3:59:59 AM

Subject:
CN=Montera Technologeis LTD, O=Montera Technologeis LTD, STREET="18, Amammi st", L=Even Yehuda, S=Hasharon, PostalCode=40500, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
361B49E5431DD304CA32589D28E4DD3C

File PE Metadata
Compilation timestamp:
8/21/2012 4:30:30 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:6/aVlbZUKeEQRpEApojwD53uEYv1Q8R7F:6/UHhSPpojwD53pi7F

Entry address:
0x1A2CB

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, F4, 4E, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 10, 57, FF, 75, 10, 8D, 4D, F0, E8, 98, F6, FF, FF, 8B, 7D, 08, 85, FF, 75, 27, E8, 25, 23, 00, 00, C7, 00, 16, 00, 00, 00, E8, 50, 25, 00, 00, 80, 7D, FC, 00, 74, 07, 8B, 45, F8, 83, 60, 70, FD, B8, FF, FF, FF, 7F, E9, A5, 00, 00, 00, 56, 8B, 75, 0C, 85, F6, 75, 24, E8, F6, 22, 00, 00, C7, 00, 16, 00, 00, 00, E8, 21, 25, 00, 00, 80, 7D, FC...
 
[+]

Entropy:
6.3582

Code size:
170.5 KB (174,592 bytes)

The file alnaddytoolbartlbr.dll has been discovered within the following program.

Alnaddy.com toolbar on IE and Chrome  by Conduit Ltd.
This is a Conduit toolbar installed in the user's Web browsers (IE, Chrome and Firefox) that collects and stores information about your web browsing habits and sends this information to Conduit so they can suggest services or provide ads via the toolbar.
www.ourtoolbar.com
61% remove it
 
Powered by Should I Remove It?

Remove alnaddytoolbartlbr.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.