» Smartbar.Personalization.Common.dll
Overview
Analysis
File Details
Programs (1)

Smartbar.Personalization.Common.dll

Smartbar.Personalization.Common

Veristaff. Com Ltd

This is part of the Linkury/SnapDo monetization software, a web browser toolbar used to hijack a user's search in order to collect revenues. The SmartBar is a a potentially unwanted toolbar and Windows Gadget that is advertising supported (adware). The module Smartbar.Personalization.Common.dll by Veristaff. Com has been detected as adware by 16 anti-malware scanners. This file is typically installed with the program Yahoo Community Smartbar by Linkury Inc. which is a potentially unwanted software program.

File name:

Publisher:

Veristaff. Com Ltd (signed and verified)

Product:

Smartbar.Personalization.Common

Version:

1.2.0.0

MD5:

e77ba73c82196d0ff7f15c516a1c604b

SHA-1:

9a05c7dfeac5653e0981294136c49ba3f57879fe

SHA-256:

03258345e3545c3da2405adc0668fe73330a6710abd8a7a389782c590125b821

Scanner detections:

16 / 68

Status:

Adware

Analysis date:

4/26/2024 10:26:48 PM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Adware.Linkury.B

860

Avira AntiVirus

APPL/Linkury.Gen2

7.11.169.156

AVG

Generic

2015.0.3365

Bitdefender

Adware.Linkury.B

1.0.20.1355

Dr.Web

Trojan.Damaged.1

9.0.1.0271

Emsisoft Anti-Malware

Adware.Linkury

8.14.09.28.12

ESET NOD32

Win32/Toolbar.Linkury.G potentially unwanted application

8.7.0.302.0

G Data

Adware.Linkury

14.9.24

IKARUS anti.virus

AdWare.Linkury

t3scan.1.7.5.0

MicroWorld eScan

Adware.Linkury.B

15.0.0.813

nProtect

Adware.Linkury.B

14.08.06.01

Panda Antivirus

PUP/LinkUry

14.09.28.12

Reason Heuristics

PUP.VeristaffCom.DD

14.9.1.2

SUPERAntiSpyware

Trojan.Agent/Gen-Nullo[Short]

10333

Trend Micro House Call

Suspicious_GEN.F47V0618

7.2.271

VIPRE Antivirus

Adware.Linkury

30636

File size:

26.6 KB (27,256 bytes)

Product version:

1.2.0.0

Original file name:

Smartbar.Personalization.Common.dll

File type:

Dynamic link library (Win32 DLL)

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\lpt\smartbar.personalization.common.dll

Digital Signature

Signed by:

Veristaff. Com Ltd

Authority:

GlobalSign nv-sa

Valid from:

7/14/2014 2:37:25 PM

Valid to:

7/15/2015 2:37:25 PM

Subject:

CN=Veristaff. Com Ltd, O=Veristaff. Com Ltd, L=Herzliya, S=Herzliya, C=IL

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121327C47596D5E76D675A39A539249C1B5

File PE Metadata

Compilation timestamp:

8/17/2014 2:07:12 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

6.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

384:JfyDuTw5mrhDTdejja6VCHZRMJJkoIrqVhZ2ppqy/aMne4B0DEpQ5St5Iw/n5HMf:pPw58yfv32p4Q5Iw/n5HMjS/Id

Entry address:

0x6B22

Entry point:

FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Entropy:

6.2984

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

19 KB (19,456 bytes)

The file Smartbar.Personalization.Common.dll has been discovered within the following program.

Yahoo Community Smartbar by Linkury Inc.

Yahoo Community Smartbar is a web browser toolbar and extension that modifies the browsers search and home pages as well as delivers contextual based advertising. This toolbar currently supports Internet Explorer, Firefox and Chrome.

www.linkury.com/index-8_faq.html

83% remove it

Remove Smartbar.Personalization.Common.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.