Ashampoo ES Toolbar

Ashampoo ES Toolbar

Known Toolbar

by Ashampoo GmbH & Co. KG

What is Ashampoo ES Toolbar?

Ashampoo ES Toolbar is software application developed by Ashampoo GmbH & Co. KG. It is most commonly found on computers running Windows 7 with nearly 68.75% of installations running this operating system. Ashampoo ES Toolbar's installer is typically 4.00 MB in size and installs around 15 files. The most common release is 6.9.0.16 with 50.00% of all installations currently using this version.

Ashampoo ES Toolbar is most popular in Spain with 45.71% of installations residing in this country.

Ashampoo ES Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Ashampoo ES Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About Ashampoo ES Toolbar?

The Ashampoo ES Toolbar is a browser extension powered by Conduit for Internet Explorer, Chrome, and Firefox. This toolbar is designed to enhance the user's browsing experience by providing a search box and additional features. However, it also collects and stores information about the user's web browsing activities in order to suggest services and provide targeted ads. It is important to note that the toolbar may attempt to change the user's home page and search provider during installation, and it may be bundled with a free or trial Ashampoo program. Furthermore, even if the Ashampoo software is uninstalled, the toolbar may not be automatically removed and must be manually uninstalled by the user. If the home page and search settings were modified by the toolbar, the user will need to manually revert them back. This may require additional steps to ensure the complete removal of the toolbar from the browser.

Multiple virus scanners have detected malware in Ashampoo ES Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 3 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
ESET-NOD32 a variant of Win32/Toolbar.Conduit.P
tbAsha.dll (MD5: 1c1d673fb3efc0643271226ea42a25d9) has been flagged by 9 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.45
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
tbAsh0.dll (MD5: cef32b574f8c732bacafd93210642dbb) has been flagged by 4 scanners:
Scanner Software Result
Bkav FE HW32.Stranact.ckae
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
prxtbAsha.dll (MD5: b92293778555ce3dabe7f0a7e98b34c0) has been flagged by 6 scanners:
Scanner Software Result
AVware Conduit (fs)
IKARUS anti.virus PUA.ClientConnect
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Bkav FE HW32.Stranact.ckae
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
prxtbAsh0.dll (MD5: 4c163bd2a5905d18893ee311608e8c54) has been flagged by 9 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.45
ESET-NOD32 Win32/Toolbar.Conduit.O
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect

Software Behaviors

Firewall:
  • Ashampoo_ESToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • Ashampoo_ESToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).

Software Details

URL:
https://ashampooes.ourtoolbar.com
Support:
https://ashampooes.ourtoolbar.com/help
Installation path:
C:\Program Files\ashampoo_es
Uninstaller:
C:\Program Files\Ashampoo_ES\uninstall.exe toolbar
Size:
4.00 MB
Language:
English

Ashampoo ES Toolbar Executable Details

Primary executable:
tbAsha.dll
Name:
Ashampoo ES Toolbar
Path:
C:\Program Files\ashampoo_es\tbAsha.dll
MD5:
1c1d673fb3efc0643271226ea42a25d9
SHA-1:
SHA-256:
Files installed by Ashampoo ES Toolbar
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
DLL
tbAsha.dll
Malware
1c1d673fb3efc0643271226ea42a25d9
DLL
7c37127525d29b9c9fc0574b1a0cf24e
DLL
tbAsh0.dll
Malware
cef32b574f8c732bacafd93210642dbb
DLL
b92293778555ce3dabe7f0a7e98b34c0
DLL
4c163bd2a5905d18893ee311608e8c54
DLL
76b3946090c94bb38dbbca54ac8ff9f7
DLL
ef4da153fd7287abc5ebe34970f673b9
DLL
ce49528c9b0b3b3018ee2f70e76b362a
DLL
12661d0dd7c4a799503d19e6fa8f700e