HotSpot Shield Elite Toolbar

HotSpot Shield Elite Toolbar

Known Toolbar

by AnchorFree Inc

What is HotSpot Shield Elite Toolbar?

HotSpot Shield Elite Toolbar is software application developed by AnchorFree Inc. It is most commonly found on computers running Windows 7 with nearly 70.33% of installations running this operating system. HotSpot Shield Elite Toolbar's installer is typically 4.00 MB in size and installs around 21 files. The most common release is 6.13.3.505 with 28.57% of all installations currently using this version.

HotSpot Shield Elite Toolbar is most popular in the United States with 45% of installations residing in this country.

HotSpot Shield Elite Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, HotSpot Shield Elite Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About HotSpot Shield Elite Toolbar?

Hotspot Shield Elite Toolbar is a browser extension developed by Conduit that is compatible with popular web browsers such as Google Chrome, Firefox, and Internet Explorer. The toolbar is supported by advertisements and is designed to modify the browser's homepage and search settings in order to display ads and capture web search traffic. It also collects and aggregates usage information and statistics. The toolbar is commonly bundled with third-party developer programs to generate revenue. During installation, users may be given the option to modify their home and search pages, but this is typically checked by default. If the software is uninstalled, users will need to manually revert their settings. According to the end-user license agreement (EULA), the company may automatically download and install remote updates, as well as collect and store details about the user's web browsing activities to provide targeted advertising. The EULA also states that by using Conduit software, users may enable the company to access, use, and collect various information about their internet browser, browsing habits, and computer.

Multiple virus scanners have detected malware in HotSpot Shield Elite Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 3 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
ESET-NOD32 a variant of Win32/Toolbar.Conduit.P
tbHot0.dll (MD5: 90a1b31ba3d3c1fd73b6021c1d8c1c8f) has been flagged by 4 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.r
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
prxtbHot0.dll (MD5: c89d9c80fd468c6b51c4aadcc8463c2d) has been flagged by 11 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
ESET-NOD32 Win32/Toolbar.Conduit.X
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
IKARUS anti.virus PUA.ClientConnect
Comodo Security Application.Win32.Conduit.r
ldrtbHot0.dll (MD5: ce49528c9b0b3b3018ee2f70e76b362a) has been flagged by 2 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.P
VIPRE Antivirus Conduit (fs)
HotSpot_Shield_EliteToolbarHelper.exe (MD5: a320df2b47cfcaf98d06eb59cd72084c) has been flagged by 8 scanners:
Scanner Software Result
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
Panda Antivirus PUP/Conduit.A
Comodo Security Application.Win32.Conduit.r
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
VIPRE Antivirus Conduit (fs)

Software Behaviors

Firewall:
  • HotSpot_Shield_EliteToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • HotSpot_Shield_EliteToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).

Software Details

URL:
https://hotspotshieldelite.ourtoolbar.com
Support:
https://hotspotshieldelite.ourtoolbar.com/help
Installation path:
C:\Program Files\hotspot_shield_elite
Uninstaller:
C:\Program Files\HotSpot_Shield_Elite\uninstall.exe toolbar
Size:
4.00 MB
Language:
English

HotSpot Shield Elite Toolbar Executable Details

Primary executable:
tbHots.dll
Name:
HotSpot Shield Elite Toolbar
Path:
C:\Program Files\hotspot_shield_elite\tbHots.dll
MD5:
8de9d8fda8df6dd2e1b99a1f297faa8a
SHA-1:
SHA-256:
Files installed by HotSpot Shield Elite Toolbar
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
EXE
5cf949316c40314d66b45f0bf00aa6f6
DLL
1f887e707459246c5b262bb14de0c0f2
DLL
tbHot0.dll
Malware
90a1b31ba3d3c1fd73b6021c1d8c1c8f
DLL
1529506f1c8207a1928a7c488b23e759
DLL
c89d9c80fd468c6b51c4aadcc8463c2d
DLL
37f24d1b9bc30b74fa415f13d9e98ebd
DLL
ce49528c9b0b3b3018ee2f70e76b362a
DLL
d7a725fb0d83534ea372605c91ddef4d
DLL
24dbde9faf0668a065f466e22b7bb31e