home

sruhs.dll

sruhs

PINWID LTD

The module sruhs.dll by PINWID has been detected as adware by 16 anti-malware scanners. This file is typically installed with the program Muvic Smartbar by Pinwid Ltd. which is a potentially unwanted software program.
Publisher:
PINWID LTD  (signed and verified)

Product:
sruhs

Version:
1.2.0.0

MD5:
35490888839ecd2a9eeeb3fd25a0b1da

SHA-1:
bddb55a6266a1b10e5ed210e7bab5997f0f485ef

SHA-256:
0aa3b4f6e93cc148cfd592d80374b5fb43154533a64e9fbf3b7789c0d4b388ce

Scanner detections:
16 / 68

Status:
Adware

Analysis date:
4/24/2024 8:15:35 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.Linkury.B
541

Avira AntiVirus
TR/Trash.Gen
7.11.30.172

AVG
Pindi
2016.0.3019

Bitdefender
Adware.Linkury.B
1.0.20.1120

Dr.Web
Trojan.Siggen5.10351
9.0.1.0224

Emsisoft Anti-Malware
Adware.Linkury
8.15.08.12.04

ESET NOD32
Win32/Toolbar.Linkury.G potentially unwanted application
9.7.0.302.0

G Data
Win32.Application.Linkury
15.8.24

McAfee
Artemis!98DA4B4A9BC0
5600.6675

MicroWorld eScan
Adware.Linkury.B
16.0.0.672

nProtect
Adware.Linkury.B
14.08.06.01

Panda Antivirus
PUP/LinkUry
15.08.12.04

Reason Heuristics
PUP.Smartbar.Resoft (M)
15.8.12.16

SUPERAntiSpyware
Trojan.Agent/Gen-Nullo[Short]
9696

Trend Micro House Call
Suspicious_GEN.F47V0912
7.2.224

VIPRE Antivirus
Adware.Linkury
33490

File size:
24.5 KB (25,120 bytes)

Product version:
1.2.0.0

Original file name:
sruhs.dll

File type:
Dynamic link library (Win32 DLL)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\smartbar\application\sruhs.dll

Digital Signature
Signed by:
PINWID LTD

Authority:
COMODO CA Limited

Valid from:
2/4/2014 4:00:00 PM

Valid to:
2/5/2015 3:59:59 PM

Subject:
CN=PINWID LTD, O=PINWID LTD, STREET=14 Shenkar Arie, L=HERZLIYA, S=NA, PostalCode=46733, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00D9AC9FC9A1B1E8FD63013E3CCE7B0578

File PE Metadata
Compilation timestamp:
2/12/2014 10:19:53 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:XIKTOqiY1NPh0rM5DE2S/hDd5JvN64g+fR08HlHtGI3CagnhCxYPLg8l42d:0YWySjvNE8FNGIJgMElT

Entry address:
0x5C7A

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.3988

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
15.5 KB (15,872 bytes)

The file sruhs.dll has been discovered within the following program.

Muvic Smartbar  by Pinwid Ltd.
This adware injects advertising in the user's Internet browser by running as an extension and/or add-on. Ads are delivered in the form of banners and text-links (roll-overs) as well as some popup ads.
www.browse-search.com/?
80% remove it
 
Powered by Should I Remove It?

Remove sruhs.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.