» tbzyng.dll
Overview
Analysis
File Details
Programs (7)
Downloads (1)

tbzyng.dll

Conduit Toolbar

Conduit Ltd.

The file is part of the Conduit Toolbar platform, a web browser monetization engine that is typiclaly distributed with third party programs through a bundled installation, this particular version is part of the Conduit Toolbar bundle. The module tbzyng.dll by Conduit has been detected as a potentially unwanted program by 3 anti-malware scanners. Additionally, the file is typically installed by a number of programs including P2P_Torrent Toolbar by Conduit Ltd. and Zynga Toolbar by Zynga, both potentially unwanted software.

File name:

tbzyng.dll

Publisher:

Conduit Ltd. (signed and verified)

Product:

Conduit Toolbar

Version:

5, 7, 4, 0

MD5:

02de6b9ae1269af813fe8b629ee50093

SHA-1:

a3a19f143216420c723f2a37aa1c3460a3a4d37e

SHA-256:

3ca49f832f9a4e26d1771f35952de7c24aef415d4faa0715c7ddf30a2068fded

Scanner detections:

3 / 68

Status:

Potentially unwanted

Explanation:

This component is distributed and installed with the Conduit Toolbar platform.

Analysis date:

11/27/2024 12:19:20 AM UTC (today)

Scan engine

Detection

Engine version

ESET NOD32

Win32/Toolbar.Conduit (variant)

7.9065

Reason Heuristics

SearchPlugin.ConduitSearchBar.Toolbar.G

14.8.7.22

VIPRE Antivirus

Conduit

23512

File size:

2.6 MB (2,735,200 bytes)

Product version:

5, 7, 4, 0

Trademarks:

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\tbzyng.dll

Digital Signature

Signed by:

Conduit Ltd.

Authority:

VeriSign, Inc.

Valid from:

2/17/2010 1:00:00 AM

Valid to:

3/30/2013 12:59:59 AM

Subject:

CN=Conduit Ltd., OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Conduit Ltd., S=Israel, C=IL

Issuer:

CN=VeriSign Class 3 Code Signing 2009-2 CA, OU=Terms of use at https://www.verisign.com/rpa (c)09, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

3736DA15AF647632CCE61CD41B6577DD

Registration

CLSID:

{A52AE819-367B-4414-A364-88637D5D302A}

ProgID:

Toolbar.CT2396973

COM registered:

Yes

File PE Metadata

Compilation timestamp:

12/1/2010 10:27:40 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

49152:0Cy5O+DmtywsdJcHVahO1G3yQe6M8ynlB0hAgV7CyGQMQPnEvzVQ9ZnDLY:XiO+ADkksOkZe6JynlB0hTlCyGQM3

Entry address:

0x14F6F4

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 27, B5, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 51, 51, 8D, 45, F8, 50, FF, 15, AC, A1, 18, 10, 8B, 45, F8, 8B, 4D, FC, 6A, 00, 05, 00, 80, C1, 2A, 68, 80, 96, 98, 00, 81, D1, 21, 4E, 62, FE, 51, 50, E8, 69, F6, FF, FF, 83, FA, 07, 7C, 0E, 7F, 07, 3D, FF, 6F, 40, 93, 76, 05, 83, C8, FF, 8B, D0, 8B, 4D, 08, 85, C9, 74, 05, 89, 01, 89, 51, 04, C9, C3, 8B, FF, 55, 8B, EC, 8B, 45, 08, 66, 8B, 55, 0C... 
[+]

Code size:

1.5 MB (1,606,656 bytes)

The file tbzyng.dll has been discovered within the following programs.

DVDVideoSoftTB Toolbar by DVDVideoSoft Ltd.

The DVDVideoSoftTB Toolbar for Intenet Explorer and Firefox is a Conduit OurToolbar Community smartbar.

DVDVideoSoftTB.OurToolbar.com

71% remove it

Expat_Shield Toolbar by AnchorFree Inc

Expat Shield is a VPN program that allows users to access UK TV websites such as BBC iPlayer and ITV when outside of the UK. Expat Shield routes your IP address via a UK IP address as if you were still in the UK wherever you are in the world.

expatshield.ourtoolbar.com

72% remove it

Hot MP3 Toolbar by Conduit Ltd.

Hot MP3 Toolbar is a Conduit powered OurToolbar for Internet Explorer, Chrome and Firefox web browsers. The software collects and stores information about your web browsing and sends this information to OurToolbar so they can suggest services or provide ads via the toolbar.

HotMP3.OurToolbar.com

82% remove it

myBabylon_English Toolbar by Babylon Ltd

Installs a Conduit toolbar in your Web browser that collects and stores information about your web browsing and sends this information to Conduit so they can suggest services or provide ads via the toolbar.

71% remove it

NCH Toolbar by Conduit Ltd.

NCH Toolbar is a Community Toolbar by Conduit that runs in IE, Chrome and Firefox Web browsers. The toolbar collects and stores information about your web browsing and sends this information to OurToolbar so they can suggest services or provide ads via the toolbar.

NCH.OurToolbar.com

62% remove it

P2P_Torrent Toolbar by Conduit Ltd.

P2P Torrent Toolbar is a Community Toolbar by Conduit that runs in Internet Explorer, Chrome and Firefox Web browsers.

77% remove it

Zynga Toolbar by Zynga

Zynga Toolbar is a Conduit powered OurToolbar for Internet Explorer, Chrome or the Firefox Web browsers. The software collects and stores information about your web browsing and sends this information to OurToolbar so they can suggest services or provide ads via the toolbar.

Zynga.OurToolbar.com

73% remove it

The file tbzyng.dll has been seen being distributed by the following URL.

http://ieupdate.conduit.com/.../tbedrs.dll

Remove tbzyng.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.