» tbhelper.dll
Overview
Analysis
File Details

tbhelper.dll

IE Toolbar

Make The Web Better, LLC

The module tbhelper.dll, “IE Toolbar Helper Module” by Make The Web Better has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat.

File name:

tbhelper.dll

Publisher:

Make The Web Better, LLC (signed and verified)

Product:

IE Toolbar

Description:

IE Toolbar Helper Module

Version:

4, 1, 0, 41

MD5:

d954d069e14672c2b634bcd8473ed652

SHA-1:

6cf53ad806c0b87e95b2451fa157ab85d795fc98

SHA-256:

a2d9a0e90fba640d408b27624ff135d1d2e7a0fadc6b9518edfdb47761c7127e

Scanner detections:

1 / 68

Status:

Adware

Explanation:

Part of the Conduit (ClientConnect) Toolbar platform.

Analysis date:

4/23/2024 8:07:47 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Conduit.Toolbar (M)

16.11.12.9

File size:

357.8 KB (366,400 bytes)

Product version:

4, 1, 0, 41

Original file name:

tbhelper.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\web browser search\ie\tbhelper.dll

Digital Signature

Signed by:

Make The Web Better, LLC

Authority:

VeriSign, Inc.

Valid from:

1/26/2009 6:00:00 PM

Valid to:

2/13/2011 5:59:59 PM

Subject:

CN="Make The Web Better, LLC", OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Make The Web Better, LLC", L=Englewood Cliffs, S=NewJersey, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

4F800F353B7B159FC71A6428B9487DB8

File PE Metadata

Compilation timestamp:

9/26/2010 10:14:39 PM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

6144:BWsuhoeYnwkMURnn4ZbwIhL8SOcTrn+trnRM8QfSups:Yhjqtn4ZbwIhLpn3AtM8Q6

Entry address:

0x1EFDB

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, FB, 96, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, C3, B8, 9C, 92, 02, 10, A3, 40, 55, 05, 10, C7, 05, 44, 55, 05, 10, 26, 89, 02, 10, C7, 05, 48, 55, 05, 10, DA, 88, 02, 10, C7, 05, 4C, 55, 05, 10, 13, 89, 02, 10, C7, 05, 50, 55, 05, 10, 7C, 88, 02, 10, A3, 54, 55, 05, 10, C7, 05, 58, 55, 05, 10, 14, 92, 02, 10, C7, 05, 5C, 55, 05, 10, 98, 88, 02, 10, C7, 05, 60, 55, 05, 10, FA, 87, 02, 10, C7, 05, 64, 55, 05, 10, 87... 
[+]

Entropy:

6.6477

Code size:

264 KB (270,336 bytes)

Remove tbhelper.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.