Home Malware Programs Adware ReferenceBoss

ReferenceBoss

Posted: December 1, 2014

Threat Metric

Ranking: 10,983
Threat Level: 1/10
Infected PCs: 8,244
First Seen: November 20, 2014
Last Seen: October 8, 2023
OS(es) Affected: Windows

ReferenceBoss is an adware-supported software that installs itself as a browser toolbar created and developed by Mindspark Interactive Network. Typically, ReferenceBoss may be found bundled with third-party software. For this reason, it is quite common that users are not aware that it has been installed until they notice certain changes to the system. Users may notice ReferenceBoss changed the homepage and the default search engine of their browsers, as well as plenty of advertisements displayed during web-browsing activities. Ads by ReferenceBoss are based on users' browsing habits so that ads are being clicked on. It is also possible that users notice their browser and system running significantly slower which is due to a higher utilization of computer resources.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



c:\program files (x86)\referenceboss_1p\bar\1.bin\1pbarsvc.exe File name: 1pbarsvc.exe
Size: 28.76 KB (28766 bytes)
MD5: 4dc03ad56abc52f85d962cea33a8292b
Detection count: 1,970
File type: Executable File
Mime Type: unknown/exe
Path: c:\program files (x86)\referenceboss_1p\bar\1.bin\1pbarsvc.exe
Group: Malware file
Last Updated: July 27, 2022
%PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin\1pSrcAs.dll File name: 1pSrcAs.dll
Size: 53.24 KB (53248 bytes)
MD5: 212231961dfea68e3253956b2b77eba7
Detection count: 892
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin
Group: Malware file
Last Updated: December 16, 2014
%PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin\1pbar.dll File name: 1pbar.dll
Size: 675.84 KB (675840 bytes)
MD5: 4828acaae10f1f6f8f61e171a058facd
Detection count: 888
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin
Group: Malware file
Last Updated: December 16, 2014
%PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin\1pSrcAs.dll File name: 1pSrcAs.dll
Size: 53.24 KB (53248 bytes)
MD5: 9f3740b4179f374adb7194a6272ae1ef
Detection count: 89
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin
Group: Malware file
Last Updated: December 16, 2014
%PROGRAMFILES(x86)%\1pUninstall ReferenceBoss.dll File name: 1pUninstall ReferenceBoss.dll
Size: 707.72 KB (707728 bytes)
MD5: 15549573fd4fe3cf611ab3254397cb23
Detection count: 89
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES(x86)%
Group: Malware file
Last Updated: December 16, 2014
%PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin\1pbar.dll File name: 1pbar.dll
Size: 655.36 KB (655360 bytes)
MD5: 0ec1b5ece66eff3392a56010ccf8cda0
Detection count: 87
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin
Group: Malware file
Last Updated: December 16, 2014
%PROGRAMFILES(x86)%\ReferenceBoss_1p\bar\1.bin\1pmedint.exe File name: 1pmedint.exe
Size: 20.59 KB (20598 bytes)
MD5: 54d6900d9b61616ea2f4d3d4f37b58b8
Detection count: 70
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\ReferenceBoss_1p\bar\1.bin
Group: Malware file
Last Updated: December 16, 2014
%PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin\1pbar.dll File name: 1pbar.dll
Size: 655.36 KB (655360 bytes)
MD5: 1034dbbdacff45559447066cb63f111f
Detection count: 65
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin
Group: Malware file
Last Updated: December 16, 2014
%PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin\1PBAR.DLL File name: 1PBAR.DLL
Size: 20B (20 bytes)
MD5: 537d993520f76dc2148a1f0d210c26d0
Detection count: 63
File type: Dynamic link library
Mime Type: unknown/DLL
Path: %PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin
Group: Malware file
Last Updated: December 16, 2014
%PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin\1pSrchMn.exe File name: 1pSrchMn.exe
Size: 122.6 KB (122608 bytes)
MD5: a14b2e013f85dd951eb462f327f31969
Detection count: 36
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin
Group: Malware file
Last Updated: December 16, 2014
%USERPROFILE%\Local Settings\Application Data\ReferenceBoss Installer(0481cebb).exe File name: ReferenceBoss Installer(0481cebb).exe
Size: 82.05 KB (82057 bytes)
MD5: 8c709be9ab827c6b897fc486a39d5bec
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Local Settings\Application Data
Group: Malware file
Last Updated: December 16, 2014
%PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin\1pSrcAs.dll File name: 1pSrcAs.dll
Size: 144.96 KB (144968 bytes)
MD5: c34e8924553bb58f725322e912a97ac7
Detection count: 9
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin
Group: Malware file
Last Updated: October 4, 2018
%PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin\1pSrchMn.exe File name: 1pSrchMn.exe
Size: 116.26 KB (116264 bytes)
MD5: ef0499890f54386011579284ddb2095f
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\ReferenceBoss_1p\bar\1.bin
Group: Malware file
Last Updated: December 16, 2014

Registry Modifications

The following newly produced Registry Values are:

CLSID{04E3D515-6263-4E10-8710-C29D8EF8A88A}{090e3203-df81-4ff6-bba7-a178bbc3a774}{0F3A2463-0654-405A-A8A4-447811FE1A30}{10583AE2-8137-488A-A391-F97497E68E94}{10715B5F-0D42-4FA3-A050-4D0B4381A81A}{107C8631-2356-46B6-8B64-E1BC25CC3A29}{111C7BDF-1923-4C0E-AC0F-E91C09C4C80C}{11B078D0-731D-49D4-8A7E-308B4E45D726}{1218976B-384E-4E2F-B1FB-1311709424AA}{157f44e5-ea08-4758-893e-8db3c9a826a3}{15da6705-4bfa-47c3-95fa-955b71d8f9e1}{16EE4431-AF78-48AA-840E-92F54BBDF3BF}{1B21E7CA-E7C6-418D-84ED-908794C909E3}{1D64BBC1-A93D-433A-AE04-8015F5A2C36D}{25ab8c4c-372a-49b8-892e-4721821fcb10}{272731CC-543F-4731-8464-DC1A7BC38F75}{280244B0-58D7-4284-BE71-6207EA705973}{2F9AA30E-EE15-4711-BDCA-524EE7EAEC7D}{33067BB3-D1BA-41D2-AEAF-DF0A3EE8A1ED}{3a7f3254-eafa-4dbc-b4f3-0d40916f3352}{43237BC7-B248-44B9-ABC9-F4DA389788E5}{4E7051E1-F74A-4B45-9BB3-9F4D9E21FDF7}{55FA0349-3CDD-4FA4-9D86-C8E63FFD7AD1}{572F1E8D-82F8-408E-A8A8-916E3561D53E}{5bd302cd-e0c9-4cc7-b9b3-1ebfb69785fe}{5D0F02C0-4730-4AFB-BE56-3CA5F4AC10F0}{5E3C4A64-7494-49F0-8E7D-2B49EE976F0B}{699C9405-3E6E-4D5C-8ADB-E7BB0FE29967}{6c286c17-f3d4-4a31-9230-b9b4ef239db1}{783FAC69-B5ED-46AC-8C73-E7848350541F}{7ef2345a-da3e-4cdc-be56-74989b12ab55}{80033F50-9662-401B-BEA2-E87BB655819E}{843C5C0E-7C68-4BBD-BE08-A34342DE3D70}{874b8bef-065e-4aeb-b546-4f813de3b70e}{88548EC2-EF29-47AE-8709-E02E70614FE7}{9403effd-c9dc-4d62-b927-192a1fa33297}{94F71036-6A18-484F-B9AD-C6E320250797}{AADB9904-FBEF-461D-BCB1-613A9DC144A3}{afc9879d-7fb1-410c-bec4-2e9020dce0a3}{B18CBCEF-BC1A-43F7-9414-68694BAFF3B0}{b3b5363e-467c-4e01-a0a3-c32036341352}{C1880BC1-12B2-476E-90E3-797318C31098}{C2CB627F-2198-4F78-A4D2-F3F3BAD4A88F}{c4676d53-fce5-4a19-be4d-97e6eaf7e19a}{C4B334F0-F91A-4872-B26E-B8F0AFF7F01A}{D0FCAAA2-7201-4FBB-8929-8B2BBD878F5D}{D29BED30-E4C3-44F8-94D7-09BF21B19B8A}{D5F84D81-610D-463D-83C3-9280EFEDD8A0}{de68ba14-f034-479a-a9bf-c0f74d795178}{e2edb070-63dd-4485-b4d9-476146fdf6d8}{E5B1F9C0-6C91-44B5-81C8-D73EC37057FA}{e79f1e34-a255-458a-9a9a-4a0d0b1f974d}{F278D467-C145-4896-958E-FDCF4C5DE2D2}{F3EAF494-D80A-4A2E-ACCF-3A0265600A45}{f6b4e2b1-696f-4e85-aa72-90a69da28fb3}{FAB78435-26BB-4B16-A096-B928FAAA4CE7}File name without pathhttp_ReferenceBoss.dl.tb.ask.com_0.localstoragehttp_ReferenceBoss.dl.tb.ask.com_0.localstorage-journalHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\ReferenceBoss_1pSOFTWARE\Microsoft\Internet Explorer\Toolbar\{c4676d53-fce5-4a19-be4d-97e6eaf7e19a}SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ReferenceBoss AppIntegrator 32-bitSOFTWARE\Microsoft\Windows\CurrentVersion\Run\ReferenceBoss AppIntegrator 64-bitSOFTWARE\Microsoft\Windows\CurrentVersion\Run\ReferenceBoss EPM SupportSOFTWARE\Microsoft\Windows\CurrentVersion\Run\ReferenceBoss Search Scope MonitorSoftware\ReferenceBoss_1pSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{c4676d53-fce5-4a19-be4d-97e6eaf7e19a}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\ReferenceBoss AppIntegrator 32-bitSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\ReferenceBoss AppIntegrator 64-bitSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\ReferenceBoss EPM SupportSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\ReferenceBoss Search Scope MonitorSYSTEM\ControlSet001\services\ReferenceBoss_1pServiceSYSTEM\ControlSet002\services\ReferenceBoss_1pServiceSYSTEM\CurrentControlSet\services\ReferenceBoss_1pService

Additional Information

The following directories were created:
%PROGRAMFILES%\ReferenceBoss_1pEI%PROGRAMFILES(x86)%\ReferenceBoss_1pEI%USERPROFILE%\AppData\LocalLow\ReferenceBoss_1p%USERPROFILE%\Application Data\ReferenceBoss_1p
Loading...