home

SmartbarVersionsHelper.exe

SmartbarVersionsHelper

PINWID LTD

The application SmartbarVersionsHelper.exe by PINWID has been detected as adware by 10 anti-malware scanners. This file is typically installed with the program ShowPass Smartbar by ReSoft Ltd. which is a potentially unwanted software program.
Publisher:
PINWID LTD  (signed and verified)

Product:
SmartbarVersionsHelper

Version:
1.0.0.0

MD5:
f850013cf95768096f1406d081f81d68

SHA-1:
d97ee221d23305dd5d8273725acf66889d724fe4

SHA-256:
9b2a4e14dff8c107840b2ade6fab647f241fb4eccfb6342864977539a3a20c8d

Scanner detections:
10 / 68

Status:
Adware

Analysis date:
4/25/2024 2:18:01 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Dropper.MSIL.Gen
7.11.157.220

AVG
Pindi
2015.0.3362

Comodo Security
ApplicUnwnt
18725

ESET NOD32
MSIL/Toolbar.Linkury.E potentially unwanted application
8.7.0.302.0

IKARUS anti.virus
AdWare.Linkury
t3scan.1.6.1.0

Malwarebytes
PUP.Optional.SmartBar.A
v2014.09.03.09

McAfee
Artemis!1F60364F7AB8
5600.7018

Reason Heuristics
PUP.PINWID.W
14.9.3.21

VIPRE Antivirus
Adware.Linkury
30836

File size:
23.5 KB (24,088 bytes)

Product version:
1.0.0.0

Original file name:
SmartbarVersionsHelper.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\smartbar\application\smartbarversionshelper.exe

Digital Signature
Signed by:
PINWID LTD

Authority:
COMODO CA Limited

Valid from:
8/12/2014 9:00:00 PM

Valid to:
8/13/2015 8:59:59 PM

Subject:
CN=PINWID LTD, OU=514841295, O=PINWID LTD, STREET=14 Shenkar Arie, L=HERZLIYA, S=TLV, PostalCode=4672514, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
009956EF23AED48987569DC3E7434BBB19

File PE Metadata
Compilation timestamp:
9/1/2014 5:18:42 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:nFOEoJa5EzwSiuooKIo8zFtXhWFonhCxYPLg8fn0Xa:nkEoJ4PorxIoMEfka

Entry address:
0x59BA

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 50, 00, 00, 0C, 00, 00, 00, BC, 39, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
14.5 KB (14,848 bytes)

The file SmartbarVersionsHelper.exe has been discovered within the following program.

ShowPass Smartbar  by ReSoft Ltd.
ShowPass Smartbar is an adware program (supported by various types of advertising) that is usually bundled by third party installers and download managers.
snap.do
63% remove it
 
Powered by Should I Remove It?

Remove SmartbarVersionsHelper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.