Categories: Adware

What is “Adware.Hotbar.19”?

The Adware.Hotbar.19 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware.Hotbar.19 virus can do?

Sample contains Overlay data
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
Enumerates physical drives
Attempted to write directly to a physical drive
Anomalous binary characteristics
Yara detections observed in process dumps, payloads or dropped files

How to determine Adware.Hotbar.19?


File Info:
name: AB3731730F422B988AE4.mlwpath: /opt/CAPEv2/storage/binaries/6e62a8dfb45579fa00007a6772a62530af9927072eaf58f84ac80913c49d4919crc32: 222BF2FBmd5: ab3731730f422b988ae488bd49edd1a1sha1: db1770f3300eb3df7a8cf75a95f19ccfc9a01560sha256: 6e62a8dfb45579fa00007a6772a62530af9927072eaf58f84ac80913c49d4919sha512: 371cc7296192501014fdcdb12b6410a80efa1033400604f24f5692c022d574b3507b4b6ccec57420d2f34dd8b170010ee0527560fba7cea9bb8e178c315ff772ssdeep: 6144:R4WeeQvDnetn3mGBIgdwCLZMY/s0+vudEjvqDsnArH8QTHp9WeOuzhp2Rzsel:89Detn3xddV+vudEjvqKArH84f0wTostype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T197C44C2237E5E032E26257306F5BC6B556A5BC719831890FF3D43B3D2E706829636F1Asha3_384: b49ead4ed1af0c8b7794dda31247036aded2e67e033bfbce7d24630db996e7a016bc26a061267c000e59f140a5faab34ep_bytes: e8ab870000e989feffff8bff558bec51timestamp: 2011-09-15 16:07:33
Version Info:
FileDescription: SetupFileVersion: 3.0.4.0ProductVersion: 3.0.4.0Translation: 0x0409 0x04b0

Adware.Hotbar.19 also known as:

Bkav	W32.AIDetectMalware
Lionic	Adware.Win32.ScreenSaver.lxjZ
AVG	Win32:HotBar-BK [PUP]
tehtris	Generic.Malware
MicroWorld-eScan	Gen:Variant.Adware.Hotbar.19
FireEye	Generic.mg.ab3731730f422b98
CAT-QuickHeal	PUA.Appbundler.Gen
Skyhigh	BehavesLike.Win32.AdwareHotBar.hm
McAfee	PUP-XFM-OY
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Adware.ScreenSaver.Win32.690
Sangfor	Virus.Win32.Save.a
CrowdStrike	win/grayware_confidence_100% (W)
Alibaba	AdWare:Win32/ScreenSaver.8d39214d
K7GW	Trojan ( 004bcce41 )
K7AntiVirus	Trojan ( 004bcce41 )
Symantec	Adware.Clkpotato!gen3
Elastic	malicious (moderate confidence)
ESET-NOD32	Win32/Adware.HotBar
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Adware.Screensaver-1
Kaspersky	not-a-virus:AdWare.Win32.ScreenSaver.e
BitDefender	Gen:Variant.Adware.Hotbar.19
NANO-Antivirus	Riskware.Win32.ScreenSaver.cstwid
SUPERAntiSpyware	Adware.HotBar/Variant
Avast	Win32:HotBar-BK [PUP]
Rising	Adware.Hotbar!1.6AAD (CLASSIC)
Emsisoft	Gen:Variant.Adware.Hotbar.19 (B)
F-Secure	Trojan.TR/Banach.A
DrWeb	Adware.Hotbar.749
VIPRE	Gen:Variant.Adware.Hotbar.19
Trapmine	malicious.high.ml.score
Sophos	Generic Reputation PUA (PUA)
SentinelOne	Static AI – Malicious PE
Jiangmin	Adware/HotBar.du
Webroot	W32.Trojan.Gen
Varist	W32/HotBar.O.gen!Eldorado
Avira	TR/Banach.A
MAX	malware (ai score=100)
Antiy-AVL	GrayWare[AdWare]/Win32.HotBar
Kingsoft	malware.kb.a.1000
Microsoft	Adware:Win32/Hotbar
Xcitium	Packed.Win32.MUPX.Gen@24tbus
Arcabit	Trojan.Adware.Hotbar.19
ViRobot	Adware.HotBar.580784.A
ZoneAlarm	not-a-virus:AdWare.Win32.ScreenSaver.e
GData	Gen:Variant.Adware.Hotbar.19
Google	Detected
AhnLab-V3	Adware/Win32.ScreenSaver.R56892
VBA32	Adware.Rugo.010
ALYac	Gen:Variant.Adware.Hotbar.19
Cylance	unsafe
Tencent	Malware.Win32.Gencirc.1197565d
Yandex	Trojan.GenAsa!u1T3RYQ6pjg
Ikarus	Trojan.SuspectCRC
MaxSecure	Poly.Adware.ScreenSaver
Fortinet	Adware/Hotbar
Cybereason	malicious.30f422
DeepInstinct	MALICIOUS
alibabacloud	AdWare:Win/ScreenSaver.e