WebToolbar.Win32.Asparnet.ca malicious file

The WebToolbar.Win32.Asparnet.ca is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What WebToolbar.Win32.Asparnet.ca virus can do?

• Behavioural detection: Executable code extraction – unpacking
• Sample contains Overlay data
• Presents an Authenticode digital signature
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• Authenticode signature is invalid
• Attempts to modify proxy settings

How to determine WebToolbar.Win32.Asparnet.ca?

File Info:
name: B1E468FAB560A9053891.mlw
path: /opt/CAPEv2/storage/binaries/4bdecc792daa5075e836f103f6378bd2ed1c3c9444a1e5cb4742efaf30434490
crc32: 4269E717
md5: b1e468fab560a905389162f794f6fc55
sha1: 3af73fd2ca060baf18b183c1f54979a8a29ef493
sha256: 4bdecc792daa5075e836f103f6378bd2ed1c3c9444a1e5cb4742efaf30434490
sha512: 8660a06ec7479983725f7e54b01124b7493a1e749d04de1b5d3f05bfda3ed3ab8dc669bbed1762f87897d8ec39cde263b4adfe0ca7d0da16ca4769926ad0585f
ssdeep: 196608:s5SekFexhU4WSk6/1SH6YwyrayNwoVIPwztkqLHCxR8:M0QhN1Sa3yWcwc2ikqbCxu
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T17A7633A7E3DE207DD5514A741998E2F64B40FD12260613173372CA8BCBB32A5C99CB7B
sha3_384: 052aef30dbb7deb7a001bd2a8cae0295844ce3fe4cdd44df709fae2dedeac570d4f6c15c1cbfcba314fa9f7dc1ee15e6
ep_bytes: 558bec83c4c453565733c08945f08945
timestamp: 1992-06-19 22:22:17

Version Info:
Comments: This installation was built with Inno Setup.
CompanyName: MyiPodPlanet.com                                            
FileDescription: MyiPodPlanet iPodCopier Setup                               
FileVersion: 1.0.0.19            
LegalCopyright: Copyright ©2011 MyiPodPlanet.com                                                                    
ProductName: MyiPodPlanet iPodCopier                                     
ProductVersion: 1.0.0.19            
Translation: 0x0000 0x04b0

WebToolbar.Win32.Asparnet.ca also known as:

How to remove WebToolbar.Win32.Asparnet.ca?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.