How to remove “WebToolbar.Win32.Snobar.cdb”?

The WebToolbar.Win32.Snobar.cdb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What WebToolbar.Win32.Snobar.cdb virus can do?

Executable code extraction
Creates RWX memory
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine WebToolbar.Win32.Snobar.cdb?


File Info:
crc32: B78313EB
md5: a47557ff92e29a042afbeebf208d7e5a
name: A47557FF92E29A042AFBEEBF208D7E5A.mlw
sha1: 8e6ae75e39e6b70853e1c0c84ecd1e9cfddfb437
sha256: 02f12b75fbb726b02cb44eb69d0becdd2bcb75d3bcde5c5a4b1080835bc40440
sha512: afaea119f596fb812fe647273b06c7c8e48f0eb8b7d77e9171976c44a84abb9bc76593688fd6ea69a4252d704087b59d1a2d5330e318b0d6a089303b8217a4a5
ssdeep: 49152:WlwP1nqgNYhylhoKkgxsUkWSL0Hl/MqWjExgpmRRn27k0rjM7XCnvSUqbUSW7cn:zO5wgpZg0rj4SqDiJBlfsG
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
0: [No Data]

WebToolbar.Win32.Snobar.cdb also known as:

Bkav	W32.AIDetect.malware2
K7AntiVirus	Trojan ( 00527e161 )
Lionic	Trojan.Win32.Generic.4!c
CAT-QuickHeal	Trojan.Occamy.A1
ALYac	Gen:Heur.Mint.Zamg.1
K7GW	Trojan ( 00527e161 )
Cybereason	malicious.f92e29
Cyren	W32/Kryptik.LD.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Kryptik.HMPC
APEX	Malicious
Avast	Win32:Dropper-gen [Drp]
Cynet	Malicious (score: 100)
Kaspersky	not-a-virus:WebToolbar.Win32.Snobar.cdb
BitDefender	Gen:Heur.Mint.Zamg.1
NANO-Antivirus	Riskware.Win32.Snobar.eygknj
MicroWorld-eScan	Gen:Heur.Mint.Zamg.1
Ad-Aware	Gen:Heur.Mint.Zamg.1
Sophos	Generic PUA IO (PUA)
Comodo	ApplicUnwnt@#140pff05uobn6
BitDefenderTheta	Gen:NN.ZexaF.34266.ZxW@auusCgei
VIPRE	Trojan.Win32.Generic!BT
McAfee-GW-Edition	BehavesLike.Win32.Generic.wm
FireEye	Generic.mg.a47557ff92e29a04
Emsisoft	Gen:Heur.Mint.Zamg.1 (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	Adware.Adload.anm
Avira	TR/Crypt.XPACK.Gen2
eGambit	Unsafe.AI_Score_99%
Microsoft	Program:Win32/Wacapew.C!ml
GData	Gen:Heur.Mint.Zamg.1
Acronis	suspicious
McAfee	Artemis!A47557FF92E2
MAX	malware (ai score=89)
Panda	Trj/GdSda.A
Rising	Trojan.Generic@ML.96 (RDML:gG5LZCwJPIbHyHJislIKag)
Yandex	PUA.Toolbar.Snobar!1l8zlb0GN9M
Ikarus	PUA.Win32.Dlhelper
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Riskware/Kryptik.4ABE
AVG	Win32:Dropper-gen [Drp]
Paloalto	generic.ml

How to remove WebToolbar.Win32.Snobar.cdb?

WebToolbar.Win32.Snobar.cdb removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X