home

the_blinkx_toolbar.dll

Blinkx

The module the_blinkx_toolbar.dll by Blinkx has been detected as adware by 4 anti-malware scanners. It is installed as a toolbar in Internet Explore as ‘BBar’.
Publisher:
Blinkx  (signed and verified)

Version:
1, 0, 0, 1

MD5:
39b6fb6c606ccb69ff6afc1271f1aaff

SHA-1:
b7cf6f8e4dcd110fa8ff8d94fe4d2a56b1c3c5c5

SHA-256:
887bd76e322a267f9b5eff9afe77bba366aae89d13816aa91bd33175a626b085

Scanner detections:
4 / 68

Status:
Adware

Analysis date:
1/13/2025 8:22:19 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
TrojanSpy.Agent
7.1.1

AhnLab V3 Security
Win-AppCare/Xema.264448
2014.02.20

Bkav FE
W32.TXemaF.Trojan
1.3.0.4924

Reason Heuristics
PUP.Toolbar.Blinkx.S
14.12.11.23

File size:
258.3 KB (264,448 bytes)

Product version:
1, 0, 0, 1

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\blinkx remote toolbar\the_blinkx_toolbar.dll

Digital Signature
Signed by:
Blinkx

Authority:
VeriSign, Inc.

Valid from:
5/13/2008 7:30:00 PM

Valid to:
5/14/2011 7:29:59 PM

Subject:
CN=Blinkx, OU=Blinkx, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Blinkx, L=San Francisco, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5A782BE720091AA3168A3D042724408F

Registration
CLSID:
{E5A1ECE5-3E3D-4FE7-8447-78CB1FD377C6}

ProgID:
BBar.BBarBand.1

COM registered:
Yes

File PE Metadata
Compilation timestamp:
7/30/2009 5:50:54 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:pER4jR50vp/19XJVyaq+RQsz7TTe1LVYsQO+:yWoJVXq+Tz7Ta1LVYsU

Entry address:
0x1A420

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 83, 6A, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 33, C0, 39, 45, 0C, 76, 11, 8B, 4D, 08, 66, 83, 39, 00, 74, 08, 40, 41, 41, 3B, 45, 0C, 72, F2, 5D, C3, 8B, FF, 55, 8B, EC, 8D, 45, 14, 50, 6A, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 1A, CD, FF, FF, 83, C4, 14, 5D, C3, 8B, FF, 55, 8B, EC, 8D, 45, 18, 50, 6A, 00, FF, 75, 14, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, A1, CD, FF, FF, 83, C4, 18, 5D...
 
[+]

Code size:
160.5 KB (164,352 bytes)

Internet Explorer Toolbar
Display name:
BBar

CLSID:
{E5A1ECE5-3E3D-4FE7-8447-78CB1FD377C6}

CLSID name:
The blinkx Toolbar


Remove the_blinkx_toolbar.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.