What is “Win32/Toolbar.Visicom.C potentially unwanted”?

The Win32/Toolbar.Visicom.C potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Toolbar.Visicom.C potentially unwanted virus can do?

• A file was accessed within the Public folder.
• Sample contains Overlay data
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• Drops a binary and executes it
• Authenticode signature is invalid
• Attempts to modify proxy settings
• Creates a copy of itself
• Deletes executed files from disk

How to determine Win32/Toolbar.Visicom.C potentially unwanted?

File Info:
name: 3A3CCC65DBAD9C50D242.mlw
path: /opt/CAPEv2/storage/binaries/fdbb071672fd87a33399fcff12cbfff0eceb575f2bff5a9d37eb4f3274e7f44e
crc32: 3ED827CB
md5: 3a3ccc65dbad9c50d2422cdbf1938463
sha1: 284b9aca1cfbfe997168bd771540b8dd8a4cd3ae
sha256: fdbb071672fd87a33399fcff12cbfff0eceb575f2bff5a9d37eb4f3274e7f44e
sha512: c037baa1d6b298755222754e063c270a004f516b3c2026d5ad7f60e68a85f685ad71d48e71643d9b210f6dab318eba014835cc3594371da6b8ed4cee2e215f0e
ssdeep: 6144:ys3DjdO7UYmZZ2TOzWAZ7Ey/x8Rmbhe/Q+fFF+:pDj8hoQOzWAZQaDoQ+G
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1B3340123A9D0DC97D06256FD2135E2B1C3B6BF44A6229506EBF63F5BBD3C6475C0A202
sha3_384: dace46eb0b01243761e79f6644c929681437efb02409e0a17690d92e807a03a0541eff3e353b705bf59ff1c81efe7072
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:46

Version Info:
Comments: blekko search bar
CompanyName: Visicom Media Inc.
FileDescription: blekko search bar Installer
FileVersion: 1.6.29.12
LegalCopyright: © Visicom Media Inc. (License)
LegalTrademarks: Visicom Media Inc., All Rights Reserved
ProductName: blekko search bar
ProductVersion: 1.6.29.12
Translation: 0x0000 0x04e4

Win32/Toolbar.Visicom.C potentially unwanted also known as:

How to remove Win32/Toolbar.Visicom.C potentially unwanted?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.