home

tidy2ie.dll

Tidy Network

This is part of the InfoAtoms browser extension which will display variopus forms of advertising in the web browser by injecting new ads such as banner, text-links and search results. The module tidy2ie.dll by Tidy Network has been detected as adware by 4 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘TidyNetwork.com’. This file is typically installed with the program TidyNetwork.com which is a potentially unwanted software program.
Publisher:
Tidy Network  (signed and verified)

MD5:
56929bfc6ecb9e4e48862930312f2a44

SHA-1:
279cc432f71bf960987d9c5dedb2389f711647c2

SHA-256:
a63099e27e3682fb2a901aa5232fe2e56f53be17f9b28566b4fb0c6865e95d78

Scanner detections:
4 / 68

Status:
Adware

Analysis date:
4/26/2024 2:03:24 AM UTC  (today)

Scan engine
Detection
Engine version

Boost by Reason
Optional.BHO.TidyNetwork.H
188838

Reason Heuristics
PUP.BHO.TidyNetwork.H
14.8.8.2

Sophos
Tidy Network
4.93

VIPRE Antivirus
Tidy2Network
22592

File size:
102.3 KB (104,744 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\tidynetwork.com\tidy2ie.dll

Digital Signature
Signed by:
Tidy Network

Authority:
VeriSign, Inc.

Valid from:
3/20/2013 1:00:00 AM

Valid to:
3/20/2016 12:59:59 AM

Subject:
CN=Tidy Network, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Tidy Network, L=SAN FRANCISCO, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5B80FB156CAB4137B00AFF13BA26609D

File PE Metadata
Compilation timestamp:
6/3/2013 8:45:40 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:qnLaCv3WrtWKZi1DrLFGNZHfkA5GJUwDpgLfp7Q0fo+69:CmCv3Wrtj8joZHxEvpWp7Q0fo+69

Entry address:
0x84FF

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, FA, 47, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, C7, 01, BC, 1D, 01, 10, E9, 7E, 3A, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, F1, C7, 06, BC, 1D, 01, 10, E8, 6B, 3A, 00, 00, F6, 45, 08, 01, 74, 07, 56, E8, A8, EA, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 56, 57, 8B, 7D, 08, 8B, 47, 04, 85, C0, 74, 47, 8D, 50, 08, 80, 3A, 00, 74, 3F, 8B, 75, 0C, 8B, 4E, 04, 3B, C1, 74, 14, 83, C1, 08, 51, 52, E8, CF, 13...
 
[+]

Code size:
61 KB (62,464 bytes)

Internet Explorer BHO
CLSID:
{7736C7FA-512D-11E2-B871-DEC36088709B}

CLSID name:
TidyNetwork.com


The file tidy2ie.dll has been discovered within the following program.

TidyNetwork.com  by TidyNetwork.com
From the Terms of Service - "By accessing the Sites and downloading the Software, you hereby grant the Company permission to display promotional information, advertisements, and offers for third-party products, offers or services (collectively “Advertisements”) from Company’s advertising partners (collectively “Partners”).
www.tidynetwork.com
83% remove it
 
Powered by Should I Remove It?

Remove tidy2ie.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.