home

CkString.DLL

CkString Module

Chilkat Software, Inc.

Publisher:
Chilkat Software, Inc.

Product:
CkString Module

Description:
Chilkat String ActiveX

Version:
1, 3, 2, 1

MD5:
5d2f184f7bffbb458f8a08d3a8b0f357

SHA-1:
813b3606dca4a28b3fc4838b7e371672c74e6c0d

SHA-256:
5e9946300eba0665ec9b182af544b271da21ff7207f0deaa94eb25f0d27e2205

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 12:09:46 PM UTC  (today)

File size:
580 KB (593,920 bytes)

Product version:
1, 3, 2, 1

Copyright:
Copyright 2003 Chilkat Software, Inc.

Original file name:
CkString.DLL

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\cloob messenger\ckstring.dll

File PE Metadata
Compilation timestamp:
11/25/2010 12:34:28 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
12288:92qUbFBPIKprXsl7T/gjgSJWxv0MyrgG2Wuskp:92qUxhsR/PV2L2WU

Entry address:
0x3024D

Entry point:
55, 8B, EC, 53, 8B, 5D, 08, 56, 8B, 75, 0C, 57, 8B, 7D, 10, 85, F6, 75, 09, 83, 3D, CC, 62, 08, 10, 00, EB, 26, 83, FE, 01, 74, 05, 83, FE, 02, 75, 22, A1, 44, 7E, 08, 10, 85, C0, 74, 09, 57, 56, 53, FF, D0, 85, C0, 74, 0C, 57, 56, 53, E8, E7, FE, FF, FF, 85, C0, 75, 04, 33, C0, EB, 4E, 57, 56, 53, E8, 8D, 0D, FD, FF, 83, FE, 01, 89, 45, 0C, 75, 0C, 85, C0, 75, 37, 57, 50, 53, E8, C3, FE, FF, FF, 85, F6, 74, 05, 83, FE, 03, 75, 26, 57, 56, 53, E8, B2, FE, FF, FF, 85, C0, 75, 03, 21, 45, 0C, 83, 7D, 0C, 00...
 
[+]

Entropy:
6.4853

Developed / compiled with:
Microsoft Visual C++

Code size:
236 KB (241,664 bytes)

The file CkString.DLL has been discovered within the following programs.

Cloob Messenger  by cloob.com
Cloob Messenger bundles a branded version of the Conduit Toolbar, which delivers search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar. Once accepted, the packaged executable, ConduitInstaller.
www.cloob.com/etc/messenger
About 10% of users remove it
COWON Media Center - jetAudio Plus VX  by COWON
Some versions of COWON Media Center bundles a branded version of the Conduit Toolbar, which delivers search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar.
www.cowonamerica.com
30% remove it
Java(TM) 6 Update 37  by Oracle Corporation
Java SE 6 update realease contains security fixes.
java.com
13% remove it
 
Powered by Should I Remove It?

The file CkString.DLL has been seen being distributed by the following URL.

http://chat.cloob.com/.../CkString___1321___.dll

Scan CkString.DLL - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.