home

vntsrv.dll

Virtual New Tab

APN LLC.

This is a component of the Ask.com toolbar, a browser extension that will modify the default web browser's search provider, home page and various other settings. The module vntsrv.dll, “Virtual New Tab Server” has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. Additionally, the file is typically installed by a number of programs including Ask Toolbar by APN LLC and MP3Rocket Toolbar by APN, LLC, both potentially unwanted software.
Publisher:
APN LLC.

Product:
Virtual New Tab

Description:
Virtual New Tab Server

Version:
1.4.0.4927

MD5:
12f2ad02e1cbd479e8249e697abfb1ed

SHA-1:
fb990ccf2116ec881707e877db1320541c1a91f7

SHA-256:
737279ddacc1bed90c7035b0677e53bad7a6ae2040731f9142c0c208e0df79d6

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/26/2024 11:37:15 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.APN.G
14.4.19.14

File size:
91 KB (93,184 bytes)

Product version:
1.4.0.4927

Copyright:
(c) APN LLC. All rights reserved.

Original file name:
vntsrv.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\vnt\vntsrv.dll

File PE Metadata
Compilation timestamp:
4/16/2014 2:27:38 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:AgMeLv9ds2qEjBucIbqofhfldRpEMCkS1h6nwA7cEtNfxNeH:zzDsWBmHf7pZg8nxcEtNfxNeH

Entry address:
0x6E78

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, AD, 4C, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, CC, CC, CC, CC, 8B, 54, 24, 0C, 8B, 4C, 24, 04, 85, D2, 74, 69, 33, C0, 8A, 44, 24, 08, 84, C0, 75, 16, 81, FA, 80, 00, 00, 00, 72, 0E, 83, 3D, 88, 8C, 01, 10, 00, 74, 05, E9, 04, 4D, 00, 00, 57, 8B, F9, 83, FA, 04, 72, 31, F7, D9, 83, E1, 03, 74, 0C, 2B, D1, 88, 07, 83, C7, 01, 83, E9, 01, 75, F6, 8B, C8, C1, E0, 08, 03, C1, 8B, C8, C1, E0, 10, 03, C1, 8B, CA, 83...
 
[+]

Entropy:
6.2426

Code size:
61.5 KB (62,976 bytes)

The file vntsrv.dll has been discovered within the following programs.

Ask Toolbar  by APN LLC
The Ask Toolbar is a web browser extension and toolbar that delivers contextual based advertising as well as modify the user's web browser home and search pages to provide advertising and search.
apn.ask.com
74% remove it
MP3Rocket Toolbar  by APN, LLC
MP3Rocket Toolbar is an Ask.com (Ask Partner Network) Toolbar that will provide limited web browser functionality but will modify the user's home and search pages and providers to an Ask.com managed partner search engine.
75% remove it
Shopping App by Ask  by APN, LLC
Publisher's description - “The Shopping Toolbar by Ask has the single purpose of enhancing a user’s online shopping experience by offering an enhanced shopping search experience, links to popular shopping sites and/or additional content such as coupons, special offers and the latest deals from many merchants.”
help.ask.com/link/portal/30015/30018/Article/227/What-features-does-the-Shopping-Toolbar-by-Ask-offer
79% remove it
 
Powered by Should I Remove It?

Remove vntsrv.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.