» vmntoolbar.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

vmntoolbar.dll

VMN Toolbar

Visicom Media Inc.

This is part of the Visicom VMN web browser toolbar and extension that will modify the browser's default search provider, DNS, and home page functions. The module vmntoolbar.dll, “VMN Toolbar http://toolbar.vmn.net ” by Visicom Media has been detected as a potentially unwanted program by 12 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘VMN Toolbar’. This file is typically installed with the program VMN Toolbar by Visicom Media Inc. which is a potentially unwanted software program.

File name:

vmntoolbar.dll

Publisher:

Visicom Media Inc. (signed by Visicom Media Inc.)

Product:

VMN Toolbar

Description:

VMN Toolbar http://toolbar.vmn.net

Version:

5.0.1.226

MD5:

f105d46aae8233857704b71c49d1d605

SHA-1:

1ae9da8d5fe520bb3083ca702a89a12aff482534

SHA-256:

173c87b24aede347fadc051f4b9ec81aa31def8a1cfd8997cd4ffe43c359db67

Scanner detections:

12 / 68

Status:

Potentially unwanted

Analysis date:

4/25/2024 6:40:33 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Adware.MegaSearch

7.1.1

Avira AntiVirus

ADSPY/MegaSearch.N

7.11.45.194

Comodo Security

Win32.AdWare.MegaSearch.~BAAB

13829

Emsisoft Anti-Malware

Riskware.AdWare.Win32.MegaSearch!IK

8.13.12.24.07

IKARUS anti.virus

not-a-virus:AdWare.Win32.MegaSearch

t3scan.1.1.122.0

K7 AntiVirus

Adware

13.153.7724

McAfee

Generic PUP.x

5600.7272

MicroWorld eScan

ADSPY/MegaSearch.N

14.0.0.1074

Panda Antivirus

Adware/Naupoint

13.12.24.07

Quick Heal

AdWare.MegaSearch.n.n8 (Not a Virus)

12.13.12.00

Reason Heuristics

PUP.BHO.VisicomMedia.K

14.10.1.11

Vba32 AntiVirus

AdWare.Win32.MegaSearch.n

3.12.18.2

File size:

1.8 MB (1,895,896 bytes)

Product version:

1.0.0.0

Trademarks:

Dynamic Toolbar

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\vmntoolbar\vmntoolbar.dll

Digital Signature

Signed by:

Visicom Media Inc.

Authority:

Thawte Consulting (Pty) Ltd.

Valid from:

6/20/2007 12:00:00 AM

Valid to:

6/22/2008 11:59:59 PM

Subject:

CN=Visicom Media Inc., OU=SECURE APPLICATION DEVELOPMENT, O=Visicom Media Inc., L=Brossard, S=Quebec, C=CA

Issuer:

CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:

53647B50983ED1EB11C279CB398C2CA4

File PE Metadata

Compilation timestamp:

6/19/1992 10:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

24576:qNY1MSaN8nquUhxEYEDcH6iXopYnKGE+KkWkCl0VCBqt5/YUv83ajrmNBy5:qK3Xjl4Wj3+zD1t5/YUvwajrmNS

Entry address:

0x186098

Entry point:

55, 8B, EC, 83, C4, C4, B8, 48, 42, 58, 00, E8, B4, 17, E8, FF, 83, 3D, FC, D7, 58, 00, 00, 75, 14, B8, 58, 41, 58, 00, A3, FC, D7, 58, 00, B8, 01, 00, 00, 00, E8, 93, E0, FF, FF, E8, 9E, EF, E7, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

1.5 MB (1,591,808 bytes)

Internet Explorer BHO

CLSID:

{4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33}

CLSID name:

VMN Toolbar

The file vmntoolbar.dll has been discovered within the following program.

VMN Toolbar by Visicom Media Inc.

The VMN Toolbar is a Visicom toolbar installed in your Web browser that collects and stores information about your web browsing habits and sends this information to Visicom so they can suggest services or provide ads via the toolbar.

software.visicommedia.com

78% remove it

Remove vmntoolbar.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.