» TbCommonUtils.dll
Overview
Analysis
File Details
Programs (1)

TbCommonUtils.dll

Internet Explorer Toolbar

IDEAS SAAS SOLUTIONS LLC

The module TbCommonUtils.dll, “Internet Explorer Toolbar Common Utils” by IDEAS SAAS SOLUTIONS has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This file is typically installed with the program France Toolbar by Conduit Ltd. which is a potentially unwanted software program.

File name:

TbCommonUtils.dll

Publisher:

IDEAS SAAS SOLUTIONS LLC (signed and verified)

Product:

Internet Explorer Toolbar

Description:

Internet Explorer Toolbar Common Utils

Version:

4.3.0.17

MD5:

2cf98c0fd0be59e20e405dab4e186ba4

SHA-1:

792060b9b237d8b83471369c09d610752daa5440

SHA-256:

7280f3389f0a68d7ffbc8e50e2e9fd528d55fc5c3fa953d02fa65dedb954328f

Scanner detections:

1 / 68

Status:

Adware

Explanation:

Part of the Conduit Toolbar platform.

Analysis date:

4/26/2024 7:46:52 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

Plugin.ConduitToolbar.Toolbar.N

14.7.17.10

File size:

117.2 KB (119,968 bytes)

Product version:

4.3.0.17

Original file name:

TbCommonUtils.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\france toolbar\tbcommonutils.dll

Digital Signature

Signed by:

IDEAS SAAS SOLUTIONS LLC

Authority:

Thawte, Inc.

Valid from:

12/17/2012 1:00:00 AM

Valid to:

12/18/2013 12:59:59 AM

Subject:

CN=IDEAS SAAS SOLUTIONS LLC, O=IDEAS SAAS SOLUTIONS LLC, L=WILMINGTON, S=DELAWARE, C=US

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

0CA4874D28263695E883DBFEC171D375

File PE Metadata

Compilation timestamp:

4/2/2012 10:14:38 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

3072:H3/AgZ7G1BWZeYqSG6WDcmhETxPP+bNRnkWeW+:X/S1BWCSqc3RMq2+

Entry address:

0xA62D

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, B9, 55, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 68, 50, 93, 00, 10, 64, FF, 35, 00, 00, 00, 00, 8B, 44, 24, 10, 89, 6C, 24, 10, 8D, 6C, 24, 10, 2B, E0, 53, 56, 57, A1, A4, 84, 01, 10, 31, 45, FC, 33, C5, 50, 89, 65, E8, FF, 75, F8, 8B, 45, FC, C7, 45, FC, FE, FF, FF, FF, 89, 45, F8, 8D, 45, F0, 64, A3, 00, 00, 00, 00, C3, 8B, 4D, F0, 64, 89, 0D, 00, 00, 00, 00, 59, 5F, 5F, 5E, 5B, 8B, E5, 5D, 51, C3, CC, CC, CC, CC... 
[+]

Code size:

72 KB (73,728 bytes)

The file TbCommonUtils.dll has been discovered within the following program.

France Toolbar by Conduit Ltd.

France Toolbar is a 'Community Toolbar' from Conduit, that plugs into the various web browsers such as IE, Chrome and Firefox.

www.ourtoolbar.com

65% remove it

Remove TbCommonUtils.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.