» smartbarfirefoxremoteplugin_22.dll
Overview
Analysis
File Details
Programs (1)

smartbarfirefoxremoteplugin_22.dll

PINWID LTD

The module smartbarfirefoxremoteplugin_22.dll by PINWID has been detected as adware by 7 anti-malware scanners. It is installed within the Mozilla Firefox web browser as part of an addin/plugin. This file is typically installed with the program Muvic Smartbar by Pinwid Ltd. which is a potentially unwanted software program.

File name:

Publisher:

PINWID LTD (signed and verified)

MD5:

9954ff1c5f6df61e1be7a65c991406e1

SHA-1:

8a7f5b1ece79e3dbdb7346f4c5841e61c2a62a86

SHA-256:

f79482671247c3cb15c69235955bbef6766fa469d91ac44fc6369e6ccbc81a68

Scanner detections:

7 / 68

Status:

Adware

Analysis date:

4/25/2024 7:21:33 AM UTC (today)

Scan engine

Detection

Engine version

AVG

Pindi

2015.0.3323

ESET NOD32

Win32/Toolbar.Linkury (variant)

8.10476

K7 AntiVirus

Unwanted-Program

13.183.13504

Reason Heuristics

PUP.PINWID.EE

14.10.13.4

Rising Antivirus

PE:Trojan.Win32.Generic.1751E2D2!391242450

23.00.65.141011

Trend Micro House Call

Suspicious_GEN.F47V0912

7.2.286

VIPRE Antivirus

Adware.Linkury

33490

File size:

97.5 KB (99,872 bytes)

File type:

Dynamic link library (Win32 DLL)

Common path:

C:\users\{user}\appdata\roaming\mozilla\firefox\profiles\{user}.default\extensions\{7389907f-35b4-b750-e908-b9e327cbc1b2}\components\smartbarfirefoxremoteplugin_22.dll

Digital Signature

Signed by:

PINWID LTD

Authority:

COMODO CA Limited

Valid from:

2/4/2014 4:00:00 PM

Valid to:

2/5/2015 3:59:59 PM

Subject:

CN=PINWID LTD, O=PINWID LTD, STREET=14 Shenkar Arie, L=HERZLIYA, S=NA, PostalCode=46733, C=IL

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

00D9AC9FC9A1B1E8FD63013E3CCE7B0578

File PE Metadata

Compilation timestamp:

5/16/2013 2:01:25 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

1536:7XKCwt/2YaEj5nhm0+r86a5BAnyNak6A6RU1dvntlR:7XqRX5h7aa5BTkA6RU1dvn

Entry address:

0x4E73

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 97, 3E, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 74, 2D, FF, 75, 08, 6A, 00, FF, 35, 60, 67, 01, 10, FF, 15, 88, 10, 01, 10, 85, C0, 75, 18, 56, E8, E7, 19, 00, 00, 8B, F0, FF, 15, 08, 10, 01, 10, 50, E8, 97, 19, 00, 00, 59, 89, 06, 5E, 5D, C3, B8, 80, 51, 01, 10, C3, A1, C0, 80, 01, 10, 56, 6A, 14, 5E, 85, C0, 75, 07, B8, 00, 02, 00, 00, EB, 06, 3B, C6, 7D, 07, 8B, C6, A3, C0, 80... 
[+]

Entropy:

6.4928

Code size:

62 KB (63,488 bytes)

The file smartbarfirefoxremoteplugin_22.dll has been discovered within the following program.

Muvic Smartbar by Pinwid Ltd.

This adware injects advertising in the user's Internet browser by running as an extension and/or add-on. Ads are delivered in the form of banners and text-links (roll-overs) as well as some popup ads.

www.browse-search.com/?

80% remove it

Remove smartbarfirefoxremoteplugin_22.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.