Categories: PUA

What is “PUA:Win32/IminentToolbar”?

The PUA:Win32/IminentToolbar is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUA:Win32/IminentToolbar virus can do?

A file was accessed within the Public folder.
Sample contains Overlay data
Reads data out of its own binary image
Authenticode signature is invalid
Touches a file containing cookies, possibly for information gathering

How to determine PUA:Win32/IminentToolbar?


File Info:
name: 5336794EFF0601B26B06.mlwpath: /opt/CAPEv2/storage/binaries/21f00c7a85963b8c068349ba5e75869336769cec5b86339cff59406723c5f183crc32: 19A32532md5: 5336794eff0601b26b06a386481357absha1: f9a6e23c5b0d1d091ecafcaae58b28684d59036bsha256: 21f00c7a85963b8c068349ba5e75869336769cec5b86339cff59406723c5f183sha512: 3d7d6907233ac37446bf69e0ef4d064ed60437d7215e94249858eb81517a64f305e65ea5a590a0d49ff000dbca7c5dd9c3d81f06c4c4dee41daac96aff087a04ssdeep: 24576:TRutr7f/q0N+kBw9qmoljoXYFDrric/dwVqBthRF32Uo5TeyxP+NMGR:FI7KhueP0o0DrO2d7Z32Z5TtEMGRtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17A75AF2276838076E17312B08A69B35595FEFE704F3742DB67D82A0D1E708D2AB39753sha3_384: 82f900123c5cd091e388b7bafddd2992c47163728caa2bfec6857ff8af77c82419bd133c95affd2b35ed8be716ff4d28ep_bytes: e89dea0000e97ffeffff3b0dc0f35200timestamp: 2014-02-07 14:03:56
Version Info:
CompanyName: LiveSoftActionFileDescription: Download ManagerFileVersion: 1.0.11.0InternalName: Setup.exeLegalCopyright: (c) LiveSoftAction.  All rights reserved.OriginalFilename: Setup.exeProductName: Download ManagerProductVersion: 1.0.11.0Translation: 0x0409 0x04e4

PUA:Win32/IminentToolbar also known as:

Bkav	W32.AIDetectMalware
Lionic	Riskware.Win32.GetNow.1!c
AVG	Win32:Adware-gen [Adw]
MicroWorld-eScan	Gen:Variant.Application.Babar.36161
FireEye	Generic.mg.5336794eff0601b2
CAT-QuickHeal	Downloader.GetNow.CL5
Skyhigh	BehavesLike.Win32.Infected.th
McAfee	LiveSoftAction
Cylance	unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Adware ( 004bc3741 )
K7GW	Adware ( 004bc3741 )
CrowdStrike	win/grayware_confidence_100% (W)
VirIT	Adware.Win32.Downware.DEM
Symantec	SMG.Heur!gen
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/GetNow.B potentially unwanted
Cynet	Malicious (score: 100)
APEX	Malicious
Kaspersky	not-a-virus:Downloader.Win32.GetNow.cl
BitDefender	Gen:Variant.Application.Babar.36161
NANO-Antivirus	Riskware.Win32.Adw.cwalwi
SUPERAntiSpyware	PUP.LiveSoftAction/Variant
Avast	Win32:Adware-gen [Adw]
Tencent	Malware.Win32.Gencirc.10b62413
Emsisoft	Application.AdBundle (A)
F-Secure	PotentialRisk.PUA/GetNow.Gen
DrWeb	Adware.Downware.2144
VIPRE	Gen:Variant.Application.Babar.36161
TrendMicro	TROJ_GEN.R002C0OBT24
Trapmine	malicious.moderate.ml.score
Sophos	Generic Reputation PUA (PUA)
SentinelOne	Static AI – Malicious PE
Jiangmin	Downloader.GetNow.a
Webroot	Pua.Livesoftaction
Varist	W32/A-a4017d21!Eldorado
Avira	PUA/GetNow.Gen
Kingsoft	malware.kb.a.935
Microsoft	PUA:Win32/IminentToolbar
Arcabit	Trojan.Application.Babar.D8D41
ViRobot	Adware.Getnow.1555040.A
ZoneAlarm	not-a-virus:Downloader.Win32.GetNow.cl
GData	Win32.Adware.LiveSoft.A
Google	Detected
AhnLab-V3	PUP/Win32.Downware.R181898
BitDefenderTheta	Gen:NN.ZexaF.36802.Ev1@amxem4ni
ALYac	Gen:Variant.Application.Babar.36161
MAX	malware (ai score=79)
VBA32	Downloader.AdLoad
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/GdSda.A
TrendMicro-HouseCall	TROJ_GEN.R002C0OBT24
Rising	PUF.GetNow!8.149 (TFE:5:FCumzr1ml4V)
Ikarus	AdWare.Win32.GetNow
Fortinet	Riskware/GetNow
Cybereason	malicious.eff060
DeepInstinct	MALICIOUS
alibabacloud	Adware.Win.Generic.674173f3