home

tbeaz0.dll

Conduit Toolbar

Conduit Ltd.

The file is part of the Conduit Toolbar platform, a web browser monetization engine that is typiclaly distributed with third party programs through a bundled installation, this particular version is part of the Conduit Toolbar bundle. The module tbeaz0.dll by Conduit has been detected as a potentially unwanted program by 3 anti-malware scanners. This file is typically installed with the program Vuze Remote Toolbar by Vuze Inc. which is a potentially unwanted software program. It is also typically executed from the user's temporary directory. The file has been seen being downloaded from ieupdate.conduit.com.
Publisher:
Conduit Ltd.  (signed and verified)

Product:
Conduit Toolbar

Version:
6.3.3.3

MD5:
1a8438854dd15e4389f5bdef502c369d

SHA-1:
57cd8deaf43df3a2f4703e5219a69935b119d0db

SHA-256:
d4edf7b785247ee56b730bc97dd417c8f16879312b368ac7eedf77423643e339

Scanner detections:
3 / 68

Status:
Potentially unwanted

Explanation:
This component is distributed and installed with the Conduit Toolbar platform.

Analysis date:
12/24/2024 12:41:08 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
Win32/Toolbar.Conduit (variant)
7.9114

Reason Heuristics
SearchPlugin.ConduitSearchBar.Toolbar.G
14.8.7.22

VIPRE Antivirus
Conduit
23854

File size:
4 MB (4,216,104 bytes)

Product version:
6.3.3.3

Copyright:
Copyright © Conduit Ltd. 2008.

Trademarks:
Copyright © Conduit Ltd. 2008.

Original file name:
Conduit Toolbar

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\tbeaz0.dll

Digital Signature
Signed by:
Conduit Ltd.

Authority:
VeriSign, Inc.

Valid from:
2/17/2010 1:00:00 AM

Valid to:
3/30/2013 12:59:59 AM

Subject:
CN=Conduit Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Conduit Ltd., S=Israel, C=IL

Issuer:
CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3736DA15AF647632CCE61CD41B6577DD

File PE Metadata
Compilation timestamp:
3/14/2011 5:16:56 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:xZCcSxUeUm6nWvZ5pVW20bpIzXJjFWyDVBKO0AV3zihRnxAyYNSpgzVQMrd/nmjx:xZCcSxUxWZOylVOY3ARnxdonu

Entry address:
0x259CE8

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 54, A0, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 53, 56, 8B, 75, 08, 57, 33, FF, 39, 7D, 14, 75, 10, 3B, F7, 75, 10, 39, 7D, 0C, 75, 12, 33, C0, 5F, 5E, 5B, 5D, C3, 3B, F7, 74, 07, 8B, 5D, 0C, 3B, DF, 77, 1B, E8, 8A, 4F, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, B3, E9, FF, FF, 83, C4, 14, 8B, C6, EB, D5, 39, 7D, 14, 75, 07, 33, C0, 66, 89, 06, EB, C7, 8B, 55, 10, 3B, D7, 75, 07, 33, C0...
 
[+]

Code size:
2.6 MB (2,762,752 bytes)

The file tbeaz0.dll has been discovered within the following programs.

DVDVideoSoftTB Toolbar  by DVDVideoSoft Ltd.
The DVDVideoSoftTB Toolbar for Intenet Explorer and Firefox is a Conduit OurToolbar Community smartbar.
DVDVideoSoftTB.OurToolbar.com
71% remove it
Expat_Shield Toolbar  by AnchorFree Inc
Expat Shield is a VPN program that allows users to access UK TV websites such as BBC iPlayer and ITV when outside of the UK. Expat Shield routes your IP address via a UK IP address as if you were still in the UK wherever you are in the world.
expatshield.ourtoolbar.com
72% remove it
FreeOnlineRadioPlayerRecorder Toolbar  by Conduit Ltd.
Installs a OurToolbar toolbar in your Web browser that collects and stores information about your web browsing and sends this information to OurToolbar so they can suggest services or provide ads via the toolbar.
FreeOnlineRadioPlayerRecorder.OurToolbar.com
67% remove it
MyAshampoo Toolbar  by Ashampoo GmbH & Co. KG
Installs a Conduit powered OurToolbar in Internet Explorer, Chrome and Firefox web browsers. The software collects and stores information about your web browsing and sends this information to OurToolbar so they can suggest services or provide ads via the toolbar.
MyAshampoo.OurToolbar.com
72% remove it
NCH Toolbar  by Conduit Ltd.
NCH Toolbar is a Community Toolbar by Conduit that runs in IE, Chrome and Firefox Web browsers. The toolbar collects and stores information about your web browsing and sends this information to OurToolbar so they can suggest services or provide ads via the toolbar.
NCH.OurToolbar.com
62% remove it
ooVoo Video Chat Toolbar  by Conduit Ltd.
ooVoo Video Chat Toolbar is a Community Toolbar by Conduit that runs in Internet Explorer, Chrome and Firefox Web browsers.
ooVooVideoChat.OurToolbar.com
70% remove it
Productivity 2 Toolbar  by Conduit Ltd.
Productivity 2 Toolbar is a Community Toolbar by Conduit that runs in IE, Chrome and Firefox Web browsers. The toolbar collects and stores information about your web browsing and sends this information to OurToolbar so they can suggest services or provide ads via the toolbar.
Productivity2.OurToolbar.com
67% remove it
Road Runner Toolbar  by Road Runner
Publisher's description - “In addition, Conduit, as a platform provider, provides the Publisher and other third parties with a large number of tools to enable them to create interesting and unique apps, buttons and gadgets using the Conduit platform.”
RoadRunner.OurToolbar.com
69% remove it
shARES Toolbar  by Conduit Ltd.
This toolbar is typiclaly bundled with the installation of the free shARES software and is a Community Toolbar by Conduit that runs in Internet Explorer, Chrome and Firefox Web browsers.
shARES.Media-Toolbar.com
72% remove it
TvOnline by WebDessign Toolbar  by Conduit Ltd.
Tv Online (WebDessign) Toolbar is a Community Toolbar by Conduit that runs in IE, Chrome and Firefox Web browsers.
TvOnlinebyWebDessign.OurToolbar.com
62% remove it
 
Latest 20 of 16 programs
Powered by Should I Remove It?

The file tbeaz0.dll has been seen being distributed by the following URL.

http://ieupdate.conduit.com/.../tbedrs.dll

Remove tbeaz0.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.