Categories: Adware

Adware:Win32/Hotbar!pz (file analysis)

The Adware:Win32/Hotbar!pz is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Adware:Win32/Hotbar!pz virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Enumerates physical drives
Attempted to write directly to a physical drive
Yara detections observed in process dumps, payloads or dropped files

How to determine Adware:Win32/Hotbar!pz?


File Info:
name: DE3740D1044CC4A53E6D.mlwpath: /opt/CAPEv2/storage/binaries/f07c9c4c34b66fd1b84995b9e98b5a6150c0b9313f9ee7e11458820ba1c90cb7crc32: 77F16FFFmd5: de3740d1044cc4a53e6d8340760bdec0sha1: 89898d6c224022a7d1d87ae118b4e6dfb9c3460csha256: f07c9c4c34b66fd1b84995b9e98b5a6150c0b9313f9ee7e11458820ba1c90cb7sha512: 604828958813a94c9a22d6b3710af3b191c6edf6c7e619736118be9f41287ff8bd4fd2d80a1b336e9ac7fd85b3988a910e78c9821b6ae235b731e4f62f9aa92fssdeep: 6144:swX/UvkMVVQZ/7Aj+q0aEP/h5m2cfsjs3xn9BUr:sQY/Oc+qPmZCsjIxnotype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1BD341317CA2A5C66E4DBC4300D8FA975483EF986C53D734E1DC8880E6F39DE263B2466sha3_384: c9ef7fdeb4eab4d0f5d3d611843fbadec35b106edb8f497f4a059eba7de20e5fc63355cf57bad8027ac9b39667b37eb0ep_bytes: 60be00f044008dbe0020fbff57eb0b90timestamp: 2011-07-25 19:26:50
Version Info:
FileDescription: InstallerFileVersion: 2.0.364.0ProductVersion: 2.0.364.0Translation: 0x0409 0x30ed

Adware:Win32/Hotbar!pz also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (moderate confidence)
DrWeb	Adware.Hotbar.700
MicroWorld-eScan	Gen:Variant.Adware.Hotbar.1
ClamAV	Win.Trojan.Adinstall-2
CAT-QuickHeal	PUA.Pinballcor.Gen
Skyhigh	Adware-HotBar.f
McAfee	Adware-HotBar.f
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Adware.180SolutionsCRT.Win32.300
Sangfor	PUA.Win32.Sign.a
K7AntiVirus	Adware ( 00586a821 )
Alibaba	AdWare:Win32/ScreenSaver.788928c5
K7GW	Adware ( 00586a821 )
VirIT	Adware.Win32.Zango.NHG
Symantec	Adware.Clkpotato!gen3
ESET-NOD32	a variant of Win32/Adware.HotBar.K
APEX	Malicious
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:AdWare.Win32.ScreenSaver.i
BitDefender	Gen:Variant.Adware.Hotbar.1
NANO-Antivirus	Riskware.Win32.bqt.dvtokf
SUPERAntiSpyware	PUP.HotBar/Variant
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.10bd99a8
Emsisoft	Gen:Variant.Adware.Hotbar.1 (B)
F-Secure	Adware:W32/Hotbar.P
Baidu	Win32.Trojan.HotBar.a
VIPRE	Gen:Variant.Adware.Hotbar.1
TrendMicro	HeurSpy_Zango-3
FireEye	Gen:Variant.Adware.Hotbar.1
Sophos	Hotbar (PUA)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Adware.Hotbar.1
Jiangmin	Trojan/JboxGeneric.mu
Webroot	Adware.Hotbar
Google	Detected
Avira	ADSPY/AdSpy.Gen2
Antiy-AVL	GrayWare[AdWare]/Win32.ScreenSaver
Xcitium	ApplicUnwnt.Win32.AdWare.HotBar.DE@4kthx2
Arcabit	Trojan.Adware.Hotbar.1
ZoneAlarm	not-a-virus:AdWare.Win32.ScreenSaver.i
Microsoft	Adware:Win32/Hotbar!pz
Varist	W32/HotBar.L.gen!Eldorado
AhnLab-V3	Adware/Win32.Hotbar.R9208
VBA32	BScope.Adware.ScreenSaver
ALYac	Gen:Variant.Adware.Hotbar.1
Cylance	unsafe
TrendMicro-HouseCall	HeurSpy_Zango-3
Rising	Adware.HotBar!1.6AAD (CLOUD)
Yandex	Trojan.GenAsa!JjiYpx/LGuE
Ikarus	Trojan.SuspectCRC
MaxSecure	not-a-virus:.Adware.HotBar
Fortinet	Riskware/Zango
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/grayware_confidence_100% (D)