home

vmntoolbar.dll

VMN Toolbar

Visicom Media Inc.

This is part of the Visicom VMN web browser toolbar and extension that will modify the browser's default search provider, DNS, and home page functions. The module vmntoolbar.dll by Visicom Media has been detected as a potentially unwanted program by 5 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘VMN Toolbar’. This file is typically installed with the program VMN Toolbar by Visicom Media Inc. which is a potentially unwanted software program.
Publisher:
Visicom Media Inc.  (signed and verified)

Product:
VMN Toolbar

Version:
4.0.4.363

MD5:
641569d4a77626e165fb56c9c4f4660b

SHA-1:
3606b59cb3314f0abd804d244213964f4d3a7b0f

SHA-256:
8b7f9c637d9d0ae08c44dca6cdce92945c3cc7ef5f1466c6eee18995bbadff53

Scanner detections:
5 / 68

Status:
Potentially unwanted

Analysis date:
4/19/2024 12:31:47 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Generic2
2016.0.3035

Comodo Security
UnclassifiedMalware
22164

Panda Antivirus
Adware/WebSearch
15.07.27.06

Reason Heuristics
PUP.Visicom.VisicomMedia.Toolbar (M)
15.7.27.18

VIPRE Antivirus
AdWare.Win32.BHO.w
40340

File size:
1.7 MB (1,801,408 bytes)

Product version:
4.0

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\vmntoolbar\vmntoolbar.dll

Digital Signature
Signed by:
Visicom Media Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
5/30/2006 8:00:00 PM

Valid to:
6/21/2007 7:59:59 PM

Subject:
CN=Visicom Media Inc., OU=SECURE APPLICATION DEVELOPMENT, O=Visicom Media Inc., L=Brossard, S=Quebec, C=CA

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
46009F112341EB9E47AD9A71D868DC95

File PE Metadata
Compilation timestamp:
6/19/1992 6:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:PbJrd/RdQYMLQRnJAbKdXWgJBlEXzSZoQKPSS7FkaLa53j/Ds6IZwBSsJZrYRHyP:PbjP+2SpkX3j/g6IZwsm0HQrmNer

Entry address:
0x170FC0

Entry point:
55, 8B, EC, 83, C4, C4, B8, 30, F2, 56, 00, E8, 24, 68, E9, FF, 83, 3D, FC, 67, 57, 00, 00, 75, 14, B8, 40, F1, 56, 00, A3, FC, 67, 57, 00, B8, 01, 00, 00, 00, E8, 53, E1, FF, FF, E8, 46, 40, E9, FF, 8B, C0, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 02, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 32, 13, 8B, C0, 00, 8D, 40, 00, 00, 8D, 40, 00, 00, 8D, 40, 00, 01, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.4431

Developed / compiled with:
Microsoft Visual C++

Code size:
1.4 MB (1,505,280 bytes)

Internet Explorer BHO
CLSID:
{4E7BD74F-2B8D-469E-8DA9-FD60BB9AAE33}

CLSID name:
VMN Toolbar


The file vmntoolbar.dll has been discovered within the following program.

VMN Toolbar  by Visicom Media Inc.
The VMN Toolbar is a Visicom toolbar installed in your Web browser that collects and stores information about your web browsing habits and sends this information to Visicom so they can suggest services or provide ads via the toolbar.
software.visicommedia.com
78% remove it
 
Powered by Should I Remove It?

Remove vmntoolbar.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.