» Smartbar.Personalization.Common.dll
Overview
Analysis
File Details
Programs (2)

Smartbar.Personalization.Common.dll

Smartbar.Personalization.Common

ReSoft LTD.

This is part of the Linkury/SnapDo monetization software, a web browser toolbar used to hijack a user's search in order to collect revenues. The SmartBar is a a potentially unwanted toolbar and Windows Gadget that is advertising supported (adware). The module Smartbar.Personalization.Common.dll by ReSoft has been detected as adware by 17 anti-malware scanners. Additionally, the file is typically installed by a number of programs including Shopping Helper Smartbar by ReSoft Ltd. and Shopping Helper Smartbar Engine by ReSoft Ltd., both potentially unwanted software.

File name:

Publisher:

ReSoft LTD. (signed and verified)

Product:

Smartbar.Personalization.Common

Version:

1.2.0.0

MD5:

30515504431dc93c410f1d568b5ca57a

SHA-1:

5abd959563c03f472ee15b4acdc2ddefbde70154

SHA-256:

96360e7b18c3484607a7577af1e4a3d7c4959b8186bc6c956ff4f63efd83d4df

Scanner detections:

17 / 68

Status:

Adware

Analysis date:

4/23/2024 6:24:12 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Adware.Heur.bm9@gLTgAAh

800

Avira AntiVirus

APPL/Linkury.Gen2

7.11.188.174

AVG

AdInject.Resoft

2015.0.3278

Bitdefender

Gen:Adware.Heur.bm9@gLTgAAh

1.0.20.1650

Dr.Web

Trojan.Damaged.1

9.0.1.0330

Emsisoft Anti-Malware

Gen:Adware.Heur.bm9@gLTgAAh

8.14.11.26.01

ESET NOD32

Win32/Toolbar.Linkury.G potentially unwanted application

8.7.0.302.0

F-Secure

Gen:Adware.Heur.bm9@gLTgAAh

11.2014-26-11_4

G Data

Gen:Adware.Heur.bm9@gLTgAAh

14.11.24

IKARUS anti.virus

PUA.Linkury

t3scan.1.6.1.0

MicroWorld eScan

Gen:Adware.Heur.bm9@gLTgAAh

15.0.0.990

nProtect

Adware.Linkury.B

14.08.06.01

Panda Antivirus

PUP/LinkUry

14.11.26.01

Reason Heuristics

PUP.ReSoft.DD

14.11.26.13

SUPERAntiSpyware

Trojan.Agent/Gen-Nullo[Short]

10214

Trend Micro House Call

Suspicious_GEN.F47V0618

7.2.330

VIPRE Antivirus

Adware.Linkury

23598

File size:

26.5 KB (27,168 bytes)

Product version:

1.2.0.0

Original file name:

Smartbar.Personalization.Common.dll

File type:

Dynamic link library (Win32 DLL)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\lpt\smartbar.personalization.common.dll

Digital Signature

Signed by:

ReSoft LTD.

Authority:

COMODO CA Limited

Valid from:

8/1/2013 2:00:00 AM

Valid to:

8/2/2015 1:59:59 AM

Subject:

CN=ReSoft LTD., O=ReSoft LTD., STREET=4th Hanevi'im, L=Tel Aviv, S=Israel, PostalCode=64356, C=IL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

51FA31336CEC649121E9A908289950D2

File PE Metadata

Compilation timestamp:

11/19/2014 2:06:02 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

6.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

384:u0Dl+ixDzr0yevMPQoy/aMDe+nB0DEpQ5St1IEX25HMjdnhCxYPLg8Js:us99O0id1IEX25HMjdME+

Entry address:

0x64E6

Entry point:

FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

17.5 KB (17,920 bytes)

The file Smartbar.Personalization.Common.dll has been discovered within the following programs.

Shopping Helper Smartbar by ReSoft Ltd.

This toolbar/web browser extension is typically installed as an optional offer, users generally have this bundled with 3rd party software.

snap.do

65% remove it

Shopping Helper Smartbar Engine by ReSoft Ltd.

Shopping Helper Smartbar is a potentially unwanted web browser extension that is ad-supported and will display various popup and banner ads as well as modify the user's web browser search and home page settings.

69% remove it

Remove Smartbar.Personalization.Common.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.