home

Smartbar.GUI.MainClient.dll

Smartbar

Yuna Software Limited

This is part of the Linkury/SnapDo monetization software, a web browser toolbar used to hijack a user's search in order to collect revenues. The SmartBar is a a potentially unwanted toolbar and Windows Gadget that is advertising supported (adware). The module Smartbar.GUI.MainClient.dll by Yuna Software Limited has been detected as adware by 5 anti-malware scanners.
Publisher:
Yuna Software Limited  (signed and verified)

Product:
Smartbar

Version:
1.2.0.0

MD5:
f0088fa54825057982803ce866e0e5b0

SHA-1:
b10233dac47606f2de1d810c81f1b310db77ff00

SHA-256:
62335bf8dcae072e1e343127ce575e0bd00441b9b791d1defc6312c0ad307817

Scanner detections:
5 / 68

Status:
Adware

Analysis date:
4/26/2024 11:14:23 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Resoft
2017.0.2836

ESET NOD32
Win32/Toolbar.Linkury.F potentially unwanted application
10.7.0.302.0

G Data
Win32.Application.Linkury
16.2.24

Reason Heuristics
PUP.Smartbar.YunaSoftware (M)
16.2.11.12

File size:
1.2 MB (1,305,456 bytes)

Product version:
1.2.0.0

Original file name:
Smartbar.GUI.MainClient.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\smartbar\application\smartbar.gui.mainclient.dll

Digital Signature
Signed by:
Yuna Software Limited

Authority:
VeriSign, Inc.

Valid from:
10/20/2009 2:00:00 AM

Valid to:
10/20/2012 1:59:59 AM

Subject:
CN=Yuna Software Limited, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Yuna Software Limited, L=St. Helier, S=Jersey, C=GB

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6DF4318F9EA4EEB8E01F4B0B02CDF983

File PE Metadata
Compilation timestamp:
10/11/2012 12:17:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:6p2ajI85Cm8izU53NS/4cWVUlh63wNS6C/NNWee/Rnb449zuL6luueRF:g02U53NYRW4c3Y2yRnb449vuuSF

Entry address:
0x13EC3E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
1.2 MB (1,297,920 bytes)

Remove Smartbar.GUI.MainClient.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.