» tbhelper.dll
Overview
Analysis
File Details

tbhelper.dll

IE Toolbar

Make The Web Better, LLC

The module tbhelper.dll, “IE Toolbar Helper Module” by Make The Web Better has been detected as adware by 2 anti-malware scanners.

File name:

tbhelper.dll

Publisher:

Make The Web Better, LLC (signed and verified)

Product:

IE Toolbar

Description:

IE Toolbar Helper Module

Version:

4, 1, 0, 41

MD5:

98f35ab31d74f736211fca1d6364c64e

SHA-1:

57a7e4c4c70c2e036b8f352eedcfd0509e3a6bcc

SHA-256:

e42d845bf2ef0b51b0a8a879957ccdb0097f86753a19610b53a8b465e5166cac

Scanner detections:

2 / 68

Status:

Adware

Explanation:

Part of the Conduit (ClientConnect) Toolbar platform.

Analysis date:

4/24/2024 10:22:03 AM UTC (today)

Scan engine

Detection

Engine version

F-Prot

W32/MTWB.A.gen

v6.4.5.1.85

Reason Heuristics

PUP.Conduit.Toolbar.Toolbar (M)

16.2.6.10

File size:

358.8 KB (367,424 bytes)

Product version:

4, 1, 0, 41

Original file name:

tbhelper.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\fast browser search\ie\tbhelper.dll

Digital Signature

Signed by:

Make The Web Better, LLC

Authority:

VeriSign, Inc.

Valid from:

1/27/2009 1:00:00 AM

Valid to:

2/14/2011 12:59:59 AM

Subject:

CN="Make The Web Better, LLC", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Make The Web Better, LLC", L=Englewood Cliffs, S=NewJersey, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4F800F353B7B159FC71A6428B9487DB8

File PE Metadata

Compilation timestamp:

12/21/2009 9:33:16 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:3MFSO1zkkPX1j1CbfLYLcDD07yUVvksRMUQf7ICv:gSCZZ1CbfLYLo1eTMUQx

Entry address:

0x1F03B

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, FB, 96, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, C3, B8, FC, 92, 02, 10, A3, 40, 55, 05, 10, C7, 05, 44, 55, 05, 10, 86, 89, 02, 10, C7, 05, 48, 55, 05, 10, 3A, 89, 02, 10, C7, 05, 4C, 55, 05, 10, 73, 89, 02, 10, C7, 05, 50, 55, 05, 10, DC, 88, 02, 10, A3, 54, 55, 05, 10, C7, 05, 58, 55, 05, 10, 74, 92, 02, 10, C7, 05, 5C, 55, 05, 10, F8, 88, 02, 10, C7, 05, 60, 55, 05, 10, 5A, 88, 02, 10, C7, 05, 64, 55, 05, 10, E7... 
[+]

Code size:

264 KB (270,336 bytes)

Remove tbhelper.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.