home

smartbarinternetexplorerbho2.dll

QuickShare Widget

Linkury

This is part of the Linkury monetization software, a web browser toolbar used to 'hijack' a user's search in order to collect revenues. The Linkury SmartBar is a a potentially unwanted toolbar and Windows Gadget that is advertising supported. The module smartbarinternetexplorerbho2.dll by Linkury has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program QuickShare by Linkury Inc. which is a potentially unwanted software program.
Publisher:
Linkury  (signed and verified)

Product:
QuickShare Widget

Version:
1.0.0.0

MD5:
98d8f3bdf2542245a25f6f259690e030

SHA-1:
7f27169f8c36cd8679d7507a7d422b0e3678cb8d

SHA-256:
bfa68d82046d120773fccdd6389f27526bf9e77f4556a680a45c92d4225931e0

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/24/2024 11:21:19 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Linkury.CC
14.8.7.19

File size:
133.3 KB (136,472 bytes)

Product version:
1.0.0.0

Original file name:
SmartbarInternetExplorerBHO.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\smartbar\application\smartbarinternetexplorerbho2.dll

Digital Signature
Signed by:
Linkury

Authority:
VeriSign, Inc.

Valid from:
4/11/2012 8:00:00 PM

Valid to:
5/11/2015 7:59:59 PM

Subject:
CN=Linkury, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Linkury, L=Ramat Gan, S=Israel, C=IL

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
77A9B89A06B99100955A838E8BB46FF8

File PE Metadata
Compilation timestamp:
10/29/2013 2:08:06 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:DzhpzEekpTX4TuQZNYRKUfAjtledhTmtaFyQHGvCXsedOGRc9izzr4yff8teLvHo:DNpzc9Ub6GvCi09s2o2skAieKXNSsFY

Entry address:
0x2126E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.8593

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
125 KB (128,000 bytes)

The file smartbarinternetexplorerbho2.dll has been discovered within the following program.

QuickShare  by Linkury Inc.
QuickShare, also know as Smartbar, is an auto-starting program that is typically bundled with various shareware software. It displays advertising and is designed to run when Windows boots up.
www.linkury.com/faq/NS/faq.aspx?c=QuickShare
79% remove it
 
Powered by Should I Remove It?

Remove smartbarinternetexplorerbho2.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.