home

tidy2ie.dll

Tidy Network

This is part of the InfoAtoms browser extension which will display variopus forms of advertising in the web browser by injecting new ads such as banner, text-links and search results. The module tidy2ie.dll by Tidy Network has been detected as adware by 3 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘TidyNetwork.com’. This file is typically installed with the program TidyNetwork.com which is a potentially unwanted software program.
Publisher:
Tidy Network  (signed and verified)

MD5:
b3e9bbc6a93a964aeee689275b2368c7

SHA-1:
557d56bdaa9e0abfb1588f018a2c86221c4b1cb4

SHA-256:
152abd7542e5449132221615515b8569b4c0ca4daa5a54c0b61c541b73106cd1

Scanner detections:
3 / 68

Status:
Adware

Analysis date:
11/23/2024 2:33:25 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.BHO.TidyNetwork.H
14.11.4.14

Sophos
Tidy Network
4.98

VIPRE Antivirus
Threat.4785685
34232

File size:
102.3 KB (104,744 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\local\tidynetwork.com\tidy2ie.dll

Digital Signature
Signed by:
Tidy Network

Authority:
VeriSign, Inc.

Valid from:
3/19/2013 5:00:00 PM

Valid to:
3/19/2016 4:59:59 PM

Subject:
CN=Tidy Network, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Tidy Network, L=SAN FRANCISCO, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5B80FB156CAB4137B00AFF13BA26609D

File PE Metadata
Compilation timestamp:
3/28/2013 11:29:44 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:ynLaCv3WrtWKJSjTrLFGNZH/kw5G5U21NWhpfQ0fo+TV:amCv3WrtjGToZHhEP1CpfQ0fo+TV

Entry address:
0x84FF

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, FA, 47, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, C7, 01, BC, 1D, 01, 10, E9, 7E, 3A, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, F1, C7, 06, BC, 1D, 01, 10, E8, 6B, 3A, 00, 00, F6, 45, 08, 01, 74, 07, 56, E8, A8, EA, FF, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 56, 57, 8B, 7D, 08, 8B, 47, 04, 85, C0, 74, 47, 8D, 50, 08, 80, 3A, 00, 74, 3F, 8B, 75, 0C, 8B, 4E, 04, 3B, C1, 74, 14, 83, C1, 08, 51, 52, E8, CF, 13...
 
[+]

Entropy:
6.3491

Code size:
61 KB (62,464 bytes)

Internet Explorer BHO
CLSID:
{7736C7FA-512D-11E2-B871-DEC36088709B}

CLSID name:
TidyNetwork.com


The file tidy2ie.dll has been discovered within the following program.

TidyNetwork.com  by TidyNetwork.com
From the Terms of Service - "By accessing the Sites and downloading the Software, you hereby grant the Company permission to display promotional information, advertisements, and offers for third-party products, offers or services (collectively “Advertisements”) from Company’s advertising partners (collectively “Partners”).
www.tidynetwork.com
83% remove it
 
Powered by Should I Remove It?

Remove tidy2ie.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.