» prxtbbrow.dll
Overview
Analysis
File Details
Behaviors (18)
Programs (9)

prxtbbrow.dll

Conduit Toolbar

Conduit Ltd.

The file is part of the Conduit Toolbar platform, a web browser monetization engine that is typiclaly distributed with third party programs through a bundled installation, this particular version is part of the Conduit Toolbar bundle. The module prxtbbrow.dll by Conduit has been detected as a potentially unwanted program by 7 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘BrowserPlus2’. Additionally, the file is typically installed by a number of programs including BrowserPlus1 Toolbar by Conduit Ltd. and BrotherSoft Extreme2 B1 Toolbar by BrotherSoft, both potentially unwanted software.

File name:

prxtbbrow.dll

Publisher:

Conduit Ltd. (signed and verified)

Product:

Conduit Toolbar

Version:

6.14.0.28

MD5:

a795d945351033d699dada999de1bdb1

SHA-1:

c51d61a1083c6a927be3aa91bfc7aa63ba68daa0

SHA-256:

f2e0266e84674cff91c79e0ee04db4d59f98e962cff5f3f4777993d51c5084d1

Scanner detections:

7 / 68

Status:

Potentially unwanted

Explanation:

This component is distributed and installed with the Conduit Toolbar platform.

Analysis date:

4/25/2024 9:24:40 AM UTC (today)

Scan engine

Detection

Engine version

Boost by Reason

PUP.BHO.Conduit.J

2013.11.17.13

Dr.Web

Adware.Conduit.16

9.0.1.0337

ESET NOD32

Win32/Toolbar.Conduit.W potentially unwanted

9.11542

Kaspersky

not-a-virus:WebToolbar.Win32.Agent

14.0.0.1864

Panda Antivirus

Adware/Conduit

14.02.11.10

Reason Heuristics

SearchPlugin.ConduitSearchBar.BHO.J

14.8.7.22

VIPRE Antivirus

Conduit

25382

File size:

221.3 KB (226,592 bytes)

Product version:

6.14.0.28

Original file name:

Conduit Toolbar

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\browserplus2\prxtbbrow.dll

Digital Signature

Signed by:

Conduit Ltd.

Authority:

VeriSign, Inc.

Valid from:

1/2/2013 4:00:00 PM

Valid to:

4/3/2016 4:59:59 PM

Subject:

CN=Conduit Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Conduit Ltd., L=Ness Ziona, S=Israel, C=IL

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3A82654719D8F75B59134F7B66465210

File PE Metadata

Compilation timestamp:

7/9/2013 12:22:03 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

3072:fJ178buohLA4MIYdd+fR0Yk7+Zh6+T04rGUWhDclDLRl8Lf8IosWI:fJ1TohLkIo+f3ANT4iUWYzkf8Iosb

Entry address:

0xD9F0

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 46, 75, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 90, AE, 02, 10, E8, B1, 6A, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 58, F9, 02, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, F0, 30, 02, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4... 
[+]

Entropy:

6.0355

Code size:

128.5 KB (131,584 bytes)

7 Internet Explorer BHOs

Display name:

BrowserPlus2

CLSID:

{650598e1-b35a-45d3-b607-896d7acb64c3}

CLSID name:

BrowserPlus2 Toolbar

Display name:

MixiDJ V30

CLSID:

{1122b43d-30ee-403f-9bfa-3cc99b0caddd}

CLSID name:

MixiDJ V30 Toolbar

Display name:

MixiDJ V8

CLSID:

{e4c3a8b6-7724-45d1-a629-17b69118ebcd}

CLSID name:

MixiDJ V8 Toolbar

Display name:

BitTorrentControl_v12

CLSID:

{b6ac5e3c-5ceb-4e72-b451-f0e1ba983c14}

CLSID name:

BitTorrentControl_v12 Toolbar

Display name:

Hotspot Shield

CLSID:

{c95a4e8e-816d-4655-8c79-d736da1adb6d}

CLSID name:

Hotspot Shield Toolbar

Display name:

HotSpot Shield Elite

CLSID:

{f16708b8-d2df-482d-9dfa-aa8d8894f0f4}

CLSID name:

HotSpot Shield Elite Toolbar

4 Internet Explorer Toolbars

Display name:

MixiDJ V30 Toolbar

CLSID:

{1122b43d-30ee-403f-9bfa-3cc99b0caddd}

Display name:

MixiDJ V8 Toolbar

CLSID:

{e4c3a8b6-7724-45d1-a629-17b69118ebcd}

Display name:

Hotspot Shield Toolbar

CLSID:

{c95a4e8e-816d-4655-8c79-d736da1adb6d}

Display name:

HotSpot Shield Elite Toolbar

CLSID:

{f16708b8-d2df-482d-9dfa-aa8d8894f0f4}

4 Internet Explorer URL Search Hooks

CLSID:

{1122b43d-30ee-403f-9bfa-3cc99b0caddd}

CLSID name:

MixiDJ V30 Toolbar

CLSID:

{e4c3a8b6-7724-45d1-a629-17b69118ebcd}

CLSID name:

MixiDJ V8 Toolbar

CLSID:

{c95a4e8e-816d-4655-8c79-d736da1adb6d}

CLSID name:

Hotspot Shield Toolbar

CLSID:

{f16708b8-d2df-482d-9dfa-aa8d8894f0f4}

CLSID name:

HotSpot Shield Elite Toolbar

4 Internet Explorer Web Browsers

Name:

{1122B43D-30EE-403F-9BFA-3CC99B0CADDD}

Name:

{E4C3A8B6-7724-45D1-A629-17B69118EBCD}

Name:

{C95A4E8E-816D-4655-8C79-D736DA1ADB6D}

Name:

{F16708B8-D2DF-482D-9DFA-AA8D8894F0F4}

The file prxtbbrow.dll has been discovered within the following programs.

BrotherSoft Extreme2 B1 Toolbar by BrotherSoft

BrotherSoft Extreme2 B1 Toolbar is a Conduit toolbar (Community OurToolbar) for Intenet Explorer and Firefox.

BrotherSoftExtreme2B1.OurToolbar.com

61% remove it

BrowserPlus1 Toolbar by Conduit Ltd.

BrowserPlus1 Toolbar is a Conduit web browser plugin (Community OurToolbar) for Intenet Explorer, Chrome and Firefox.

BrowserPlus1.OurToolbar.com

79% remove it

entrusted Toolbar by Conduit Ltd.

entrusted Toolbar is a Conduit toolbar (Community OurToolbar) for Intenet Explorer and Firefox. The toolbar collects and stores information about your web browsing habits and sends this information to Conduit so they can suggest services or provide advertising via the toolbar.

entrusted.OurToolbar.com

69% remove it

HotMP3 Toolbar by Conduit Ltd.

HotMP3 Toolbar is a 'Community Toolbar' from Conduit, that plugs into the various web browsers such as IE, Chrome and Firefox.

HotMP3Toolbar.OurToolbar.com

79% remove it

IMVU Inc Toolbar by Conduit Ltd.

IMVU Inc Toolbar is a Conduit Community toolbar for various web browsers. The toolbar collects information about a user's web browsing habits and sends this information to Conduit so they can suggest services or provide advertising.

IMVUInc.OurToolbar.com

81% remove it

KeyBar 1.14 Toolbar by Conduit Ltd.

This is a Conduit toolbar installed in the user's Web browsers (IE, Chrome and Firefox) that collects and stores information about your web browsing habits and sends this information to Conduit so they can suggest services or provide ads via the toolbar.

KeyBar114.OurToolbar.com

83% remove it

Search Spin Toolbar by Conduit Ltd.

Search Spin Toolbar is a 'Community Toolbar' from Conduit, which integrates with major web browsers including Google Chrome, Firefox and Internet Explorer.

SearchSpin.OurToolbar.com

82% remove it

Somoto V.1 Toolbar by Conduit Ltd.

Somoto V.1 Toolbar is an ad-supported (users may see additional banner and in-text link advertisements) web browser plugin distributed through various monetization platforms during installation.

SomotoV1.OurToolbar.com

85% remove it

Vuze Remote Toolbar by Vuze Inc.

Vuze Remote Toolbar is an ad-supported program installed into Internet Explorer, Firefox and Chrome.

VuzeRemote.OurToolbar.com

73% remove it

Remove prxtbbrow.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.