» tbedrs.dll
Overview
Analysis
File Details
Programs (10)
Downloads (1)

tbedrs.dll

Conduit Toolbar Automatic Update

Conduit Ltd.

The file is part of the Conduit Toolbar platform, a web browser monetization engine that is typiclaly distributed with third party programs through a bundled installation, this particular version is part of the Conduit Toolbar bundle. The module tbedrs.dll by Conduit has been detected as a potentially unwanted program by 8 anti-malware scanners. Additionally, the file is typically installed by a number of programs including P2P_Torrent Toolbar by Conduit Ltd. and MyAshampoo Toolbar by Ashampoo GmbH & Co. KG, both potentially unwanted software.

File name:

tbedrs.dll

Publisher:

Conduit Ltd. (signed and verified)

Product:

Conduit Toolbar Automatic Update

Description:

Conduit Toolbar

Version:

6.8.2.0

MD5:

2d95ca7aa63648bb4db03cf90170e7e2

SHA-1:

4aaa508544a0dd22d846da1ef72b3982d91ec458

Scanner detections:

8 / 68

Status:

Potentially unwanted

Explanation:

This component is distributed and installed with the Conduit Toolbar platform.

Analysis date:

11/27/2024 1:02:23 AM UTC (today)

Scan engine

Detection

Engine version

Baidu Antivirus

Adware.Win32.Conduit

4.0.3.1514

Boost by Reason

Optional.Conduit.G

188838

ESET NOD32

Win32/Toolbar.Conduit (variant)

8.9516

McAfee

Artemis!02FA2D857DF3

5600.6895

Panda Antivirus

PUP/Conduit.A

14.04.29.01

Reason Heuristics

SearchPlugin.ConduitSearchBar.ToolbarAutomaticUpdate.G

14.8.7.22

Trend Micro House Call

Suspicious_GEN.F47V0629

7.2.4

VIPRE Antivirus

Conduit

27190

File size:

1.9 MB (1,980,712 bytes)

Product version:

6.8.2.0

Trademarks:

Original file name:

Conduit Toolbar

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Documents and Settings\{user}\Local settings\temporary internet files\content.ie5\{random}\tbedrs.dll

Digital Signature

Signed by:

Conduit Ltd.

Authority:

VeriSign, Inc.

Valid from:

2/17/2010 1:00:00 AM

Valid to:

3/30/2013 12:59:59 AM

Subject:

CN=Conduit Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Conduit Ltd., S=Israel, C=IL

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3736DA15AF647632CCE61CD41B6577DD

File PE Metadata

Compilation timestamp:

11/16/2011 8:54:59 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:m6Nu6dpKt9Qh1fzwUfrEoUwbnN6/yEjS7Q08GrMjXhC1eodAd:m6Nu6dpjfsmNR6an7/8x0E

Entry address:

0x88EF

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 3C, 5F, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 5D, E9, E0, 06, 00, 00, 8B, C1, 83, 60, 04, 00, 83, 60, 08, 00, C7, 00, DC, B2, 01, 10, C3, 8B, FF, 55, 8B, EC, 53, 8B, 5D, 08, 56, 57, 8B, F9, C7, 07, DC, B2, 01, 10, 8B, 03, 85, C0, 74, 26, 50, E8, B3, 42, 00, 00, 8B, F0, 46, 56, E8, B1, 03, 00, 00, 59, 59, 89, 47, 04, 85, C0, 74, 12, FF, 33, 56, 50, E8, B5, 25, 00, 00, 83, C4, 0C, EB, 04, 83, 67... 
[+]

Code size:

103.5 KB (105,984 bytes)

The file tbedrs.dll has been discovered within the following programs.

Avanquest App'-Anwendungsleiste Toolbar by Avanquest Software

Avanquest App Anwendungsleiste Toolbar is a Conduit toolbar for Intenet Explorer and Firefox. The toolbar collects and stores information about your web browsing habits and sends this information to Conduit so they can suggest services or provide advertising via the toolbar.

AvanquestAppAnwendungsleiste.OurToolbar.com

69% remove it

Freecorder Toolbar by Freecorder

Freecorder Toolbar installs various third part ad supported applications during installation including SweetPacks which changes the web browser's home page and search provider as well as the DealCabby Toolbar.

Freecorder.Media-Toolbar.com

69% remove it

MessengerPlusLive Brazil TB Toolbar by Conduit Ltd.

MessengerPlusLive Brazil TB Toolbar is a 'Community Toolbar' from Conduit, which integrates with major web browsers including Google Chrome, Firefox and Internet Explorer.

MessengerPlusLiveBrazilTB.OurToolbar.com

80% remove it

MyAshampoo Toolbar by Ashampoo GmbH & Co. KG

Installs a Conduit powered OurToolbar in Internet Explorer, Chrome and Firefox web browsers. The software collects and stores information about your web browsing and sends this information to OurToolbar so they can suggest services or provide ads via the toolbar.

MyAshampoo.OurToolbar.com

72% remove it

myBabylon_English Toolbar by Babylon Ltd

Installs a Conduit toolbar in your Web browser that collects and stores information about your web browsing and sends this information to Conduit so they can suggest services or provide ads via the toolbar.

71% remove it

NCH Toolbar by Conduit Ltd.

NCH Toolbar is a Community Toolbar by Conduit that runs in IE, Chrome and Firefox Web browsers. The toolbar collects and stores information about your web browsing and sends this information to OurToolbar so they can suggest services or provide ads via the toolbar.

NCH.OurToolbar.com

62% remove it

P2P_Torrent Toolbar by Conduit Ltd.

P2P Torrent Toolbar is a Community Toolbar by Conduit that runs in Internet Explorer, Chrome and Firefox Web browsers.

77% remove it

Radio 123 Toolbar by Conduit Ltd.

Radio 123 Toolbar is a 'Community Toolbar' from Conduit, that plugs into the various web browsers such as IE, Chrome and Firefox.

TheRadio123Toolbar.OurToolbar.com

81% remove it

Softonic-Eng7 Toolbar by Softonic International S.L.

Softonic Toolbar is a Conduit powered OurToolbar in within Internet Explorer, Chrome or the Firefox Web browsers.

SoftonicEng7.OurToolbar.com

67% remove it

Vuze Remote Toolbar by Vuze Inc.

Vuze Remote Toolbar is an ad-supported program installed into Internet Explorer, Firefox and Chrome.

VuzeRemote.OurToolbar.com

73% remove it

Latest 20 of 16 programs

The file tbedrs.dll has been seen being distributed by the following URL.

http://ieupdate.conduit.com/.../tbedrs.dll

Remove tbedrs.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.