Malware

Application.WebToolbar.1 (file analysis)

Malware Removal

The Application.WebToolbar.1 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Application.WebToolbar.1 virus can do?

  • The binary likely contains encrypted or compressed data.
  • Network activity detected but not expressed in API logs
  • Anomalous binary characteristics

How to determine Application.WebToolbar.1?


File Info:

crc32: D08DC045
md5: d70098b430c6441aa64a3241af289026
name: D70098B430C6441AA64A3241AF289026.mlw
sha1: c8399ddf4ca95e438cacb47ed398b32112a384f2
sha256: 2485029e06d90b2cce1d90217940f9107e07c38cd65b72dcf336d56ec905be02
sha512: d3a8248d7a35a27a7a5857feebfab24898552ec9be67543cd42a1baa27622b9dc1107c6f9a3aee38895daa375076dbf00d3bf78fb8fc0f9db45104cc02b109cd
ssdeep: 24576:ydnoB9og1Pv3TDNtKo2B8Yv4YJhkT3c47GmcuEnOuPDU2F5:QM9og1Pv3TDNtKrVv4YJCIMiVOuPDxP
type: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive

Version Info:

LegalCopyright: (c) 2018 Polarity Technologies Ltd
FileVersion: 2.30.0.1
CompanyName: Polarity Technologies Ltd
ProductName: Desktop Search Bar
ProductVersion: 2.30.0.1
FileDescription: Desktop web search
OriginalFilename: SBInstaller
Translation: 0x0409 0x0000

Application.WebToolbar.1 also known as:

BkavW32.AIDetect.malware2
K7AntiVirusRiskware ( 00584baa1 )
LionicAdware.Win32.InstaFast.2!c
Elasticmalicious (high confidence)
DrWebAdware.Spigot.149
CynetMalicious (score: 100)
ALYacGen:Variant.Application.WebToolbar.1
CylanceUnsafe
ZillyaTool.WebToolbar.Win32.36
CrowdStrikewin/malicious_confidence_100% (D)
AlibabaAdWare:Win32/InstaFast.8adac61e
K7GWRiskware ( 00584baa1 )
Cybereasonmalicious.430c64
CyrenW32/S-25902253!Eldorado
SymantecML.Attribute.HighConfidence
APEXMalicious
AvastWin32:AdwareSig [Adw]
ClamAVWin.Trojan.Generic-6931301-0
Kasperskynot-a-virus:HEUR:AdWare.Win32.InstaFast.gen
BitDefenderGen:Variant.Application.WebToolbar.1
MicroWorld-eScanGen:Variant.Application.WebToolbar.1
TencentWin32.Adware.Instafast.Woyy
Ad-AwareGen:Variant.Application.WebToolbar.1
SophosBrowserIO (PUA)
ComodoApplication.Win32.BrowserIO.C@7v8oon
VIPRETrojan.Win32.Generic!BT
McAfee-GW-EditionBehavesLike.Win32.Browser.tc
FireEyeGeneric.mg.d70098b430c6441a
EmsisoftGen:Variant.Application.WebToolbar.1 (B)
SentinelOneStatic AI – Malicious PE
AviraADWARE/SearchSetter.vzbiu
Antiy-AVLTrojan/Generic.ASMalwS.34C4FE3
MicrosoftTrojanSpy:Win32/Occamy.C
ArcabitTrojan.Application.WebToolbar.1
SUPERAntiSpywarePUP.BrowserIO/Variant
GDataGen:Variant.Application.WebToolbar.1
AhnLab-V3PUP/Win32.WebToolbar.R241845
Acronissuspicious
McAfeeArtemis!D70098B430C6
MAXmalware (ai score=73)
VBA32Adware.InstaFast
MalwarebytesAdware.BrowserIO
PandaTrj/CI.A
RisingAdware.BrowserIO!1.B395 (CLASSIC)
YandexPUA.InstaFast!sLwCbtAjYxo
FortinetRiskware/BrowserIO
AVGWin32:AdwareSig [Adw]

How to remove Application.WebToolbar.1?

Application.WebToolbar.1 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment