home

BandObjectLib.dll

Intertech Ltd

The module BandObjectLib.dll by Intertech has been detected as adware by 5 anti-malware scanners. This file is typically installed with the program Webalta Toolbar by webalta which is a potentially unwanted software program.
Publisher:
Intertech Ltd  (signed and verified)

Version:
1.0.0.0

MD5:
3f5b006165f01c3429f57472b8ac19bb

SHA-1:
f26d9a5607dfc31b5b80b9355af480f5795886cc

SHA-256:
e8a761e301f6aa4c3cc8673d08fe62f81a1edb93c6763a73933eec8796256aab

Scanner detections:
5 / 68

Status:
Adware

Analysis date:
4/27/2024 2:20:01 AM UTC  (today)

Scan engine
Detection
Engine version

Baidu Antivirus
Adware.Win32.Toolbar.Webalta
4.0.3.14125

Dr.Web
Adware.Webalta.11
9.0.1.025

ESET NOD32
Win32/Adware.Toolbar.Webalta.BO
8.8832

IKARUS anti.virus
Win32.Rootkit
t3scan.2.0.127

Reason Heuristics
PUP.Intertech.N
14.3.29.10

File size:
29.6 KB (30,280 bytes)

Product version:
1.0.0.0

Original file name:
BandObjectLib.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\webalta toolbar\bandobjectlib.dll

Digital Signature
Signed by:
Intertech Ltd

Authority:
VeriSign, Inc.

Valid from:
4/21/2011 3:00:00 AM

Valid to:
4/21/2013 2:59:59 AM

Subject:
CN=Intertech Ltd, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Intertech Ltd, L=St. Petersburg, S=St. Petersburg, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
07B3DF414C48C14206EA24DD0AFFB11C

File PE Metadata
Compilation timestamp:
5/9/2011 11:21:03 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:iMm9Do1RpZmyFgO2u04AkjR0Xc5tSLkjuCtX+6YJLv+SeMk:iMmJGkKgO2utAIZELTjzLA

Entry address:
0x4E4E

Entry point:
FF, 25, 00, 20, 00, 11, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
12 KB (12,288 bytes)

The file BandObjectLib.dll has been discovered within the following program.

Webalta Toolbar  by webalta
Webalta Toolbar is a potentially unwanted web browser extension that is ad-supported and will display various popup and banner ads as well as modify the user's web browser search and home page settings.
toolbar.webalta.ru
68% remove it
 
Powered by Should I Remove It?

Remove BandObjectLib.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.