home

vgrabbertlbr.dll

vGRabber Toolbar

Montera Technologeis LTD

This is part of the Montera web browser toolbar and extension that will modify the browser's default search provider, DNS, and home page functions. The module vgrabbertlbr.dll by Montera Technologeis has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is installed as a toolbar in Internet Explore as ‘Bundlore LTD Toolbar’. This file is typically installed with the program Bundlore LTD toolbar on IE and Chrome by Bundlore LTD which is a potentially unwanted software program.
Publisher:
Bundlore LTD  (signed by Montera Technologeis LTD)

Product:
vGRabber Toolbar

Version:
1.6.3.0

MD5:
c18029831905680537887d2a4d1e6b2b

SHA-1:
8fd067a197235b695823f27859a4c4216524be46

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/25/2024 12:21:30 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Montiera.Montera.Toolbar (M)
16.2.15.14

File size:
287.1 KB (293,992 bytes)

Product version:
1.6.3.0

Copyright:
(c) Bundlore LTD All rights reserved.

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\bundlore ltd\vgrabber\1.6.4.4\vgrabbertlbr.dll

Digital Signature
Signed by:
Montera Technologeis LTD

Authority:
COMODO CA Limited

Valid from:
5/27/2012 8:00:00 PM

Valid to:
5/28/2013 7:59:59 PM

Subject:
CN=Montera Technologeis LTD, O=Montera Technologeis LTD, STREET="18, Amammi st", L=Even Yehuda, S=Hasharon, PostalCode=40500, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
361B49E5431DD304CA32589D28E4DD3C

Registration
CLSID:
{263C8DDB-AB71-4F00-8FA5-FFEB620F5840}

ProgID:
bundlore.vgrabberdskBnd.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
7/12/2012 5:32:08 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
3072:xb8KLTQDCGg9SXWJYkf7G6soOQIlA69pcjF2Ru3av84rxwt+vUViM0X:R8KLTc29SUf3/GpcjF2Ru3avpB15

Entry address:
0x1A2BB

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 24, 4F, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 10, 57, FF, 75, 10, 8D, 4D, F0, E8, 98, F6, FF, FF, 8B, 7D, 08, 85, FF, 75, 27, E8, 25, 23, 00, 00, C7, 00, 16, 00, 00, 00, E8, 50, 25, 00, 00, 80, 7D, FC, 00, 74, 07, 8B, 45, F8, 83, 60, 70, FD, B8, FF, FF, FF, 7F, E9, A5, 00, 00, 00, 56, 8B, 75, 0C, 85, F6, 75, 24, E8, F6, 22, 00, 00, C7, 00, 16, 00, 00, 00, E8, 21, 25, 00, 00, 80, 7D, FC...
 
[+]

Entropy:
6.3684

Code size:
170 KB (174,080 bytes)

Internet Explorer Toolbar
Display name:
Bundlore LTD Toolbar

CLSID:
{263C8DDB-AB71-4F00-8FA5-FFEB620F5840}


The file vgrabbertlbr.dll has been discovered within the following program.

Bundlore LTD toolbar on IE and Chrome  by Bundlore LTD
Bundlore LTD toolbar on IE and Chrome is a web browser toolbar and extension that modifies the browsers search and home pages as well as delivers.
www.bundlore.com
81% remove it
 
Powered by Should I Remove It?

Remove vgrabbertlbr.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.