» tbpc-1.dll
Overview
Analysis
File Details
Programs (3)
Downloads (1)

tbpc-1.dll

Conduit Toolbar Automatic Update

Conduit Ltd.

The file is part of the Conduit Toolbar platform, a web browser monetization engine that is typiclaly distributed with third party programs through a bundled installation, this particular version is part of the Conduit Toolbar bundle. The module tbpc-1.dll by Conduit has been detected as a potentially unwanted program by 5 anti-malware scanners. Additionally, the file is typically installed by a number of programs including IObitCom Toolbar by IObit and Soft-Search Toolbar by Conduit Ltd., both potentially unwanted software.

File name:

tbpc-1.dll

Publisher:

Conduit Ltd. (signed and verified)

Product:

Conduit Toolbar Automatic Update

Description:

Conduit Toolbar

Version:

6.8.10.0

MD5:

e16a30095b742941c4a4868e3a0c8c87

SHA-1:

36ea175de26f76b59d1d457546ce1392ec524f89

SHA-256:

4ec4a423e1d49819d6a1ae5a74fbcc1e3bf2a475a2363d1c81f13515d3b39517

Scanner detections:

5 / 68

Status:

Potentially unwanted

Explanation:

This component is distributed and installed with the Conduit Toolbar platform.

Analysis date:

12/24/2024 12:05:44 PM UTC (today)

Scan engine

Detection

Engine version

ESET NOD32

Win32/Toolbar.Conduit (variant)

9.10446

NANO AntiVirus

Trojan.Win32.Toolbar.deinyv

0.28.2.62151

Panda Antivirus

PUP/Conduit.A

15.02.03.03

Reason Heuristics

SearchPlugin.ConduitSearchBar.ToolbarAutomaticUpdate

15.2.3.4

VIPRE Antivirus

Conduit

33318

File size:

1.9 MB (1,983,784 bytes)

Product version:

6.8.10.0

Trademarks:

Original file name:

Conduit Toolbar

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\pc-helpsoft\tbpc-1.dll

Digital Signature

Signed by:

Conduit Ltd.

Authority:

VeriSign, Inc.

Valid from:

2/17/2010 12:00:00 AM

Valid to:

3/29/2013 11:59:59 PM

Subject:

CN=Conduit Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Conduit Ltd., S=Israel, C=IL

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3736DA15AF647632CCE61CD41B6577DD

File PE Metadata

Compilation timestamp:

4/23/2012 10:15:26 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:2rbi7D4mk7UFsoWDl2zrrs5P8wEdd6gJbNyyZtrk4S01eogn2tz:2rbi7sKFsFDlIrA5P81dMqbNZ3lku

Entry address:

0x8ACF

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 39, 5F, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 5D, E9, DF, 06, 00, 00, 8B, C1, 83, 60, 04, 00, 83, 60, 08, 00, C7, 00, DC, B2, 01, 10, C3, 8B, FF, 55, 8B, EC, 53, 8B, 5D, 08, 56, 57, 8B, F9, C7, 07, DC, B2, 01, 10, 8B, 03, 85, C0, 74, 26, 50, E8, B3, 42, 00, 00, 8B, F0, 46, 56, E8, B1, 03, 00, 00, 59, 59, 89, 47, 04, 85, C0, 74, 12, FF, 33, 56, 50, E8, B5, 25, 00, 00, 83, C4, 0C, EB, 04, 83, 67... 
[+]

Entropy:

7.9443 (probably packed)

Code size:

104 KB (106,496 bytes)

The file tbpc-1.dll has been discovered within the following programs.

IObitCom Toolbar by IObit

IObitCom Toolbar is an ad-supported (users may see additional banner and in-text link advertisements) cross web browser plugin for Internet Explorer (BHO) and Firefox/Chrome (plugin) and distributed through various monetization platforms during installation.

66% remove it

MyPlayCity Toolbar by MyPlayCity, Inc.

MyPlayCity Toolbar is a generic web browser toolbar that installs a search feature and various buttons for social integration and links to web sites such as MyPlayCity.com and various search providers.

www.myplaycity.com

63% remove it

Soft-Search Toolbar by Conduit Ltd.

Installs a Conduit powered OurToolbar in Internet Explorer, Chrome and Firefox web browsers. The software collects and stores information about your web browsing and sends this information to OurToolbar so they can suggest services or provide ads via the toolbar.

softsearchtoolbar.ourtoolbar.com

65% remove it

The file tbpc-1.dll has been seen being distributed by the following URL.

http://ieupdate.conduit.com/.../tbedrs.dll

Remove tbpc-1.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.