Ashampoo PO Toolbar

Ashampoo PO Toolbar

Known Toolbar

by Ashampoo GmbH & Co. KG

What is Ashampoo PO Toolbar?

Ashampoo PO Toolbar is software application developed by Ashampoo GmbH & Co. KG. It is most commonly found on computers running Windows 7 with nearly 60.00% of installations running this operating system. Ashampoo PO Toolbar's installer is typically 9.00 MB in size and installs around 17 files. The most common release is 6.9.0.16 with 23.33% of all installations currently using this version.

Ashampoo PO Toolbar is most popular in Poland with 77.14% of installations residing in this country.

Ashampoo PO Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Ashampoo PO Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About Ashampoo PO Toolbar?

The Ashampoo PO Toolbar is a browser extension designed for Internet Explorer and Firefox. This toolbar is capable of storing and transmitting information about users' browsing activities to provide targeted advertising and suggest services. Additionally, it has the ability to change the home page and search provider settings during installation if not carefully monitored. If these settings are altered, the user will need to manually restore them after uninstalling the toolbar. It is important to note that the toolbar may download and install updates without prior notification to the user. According to the End User License Agreement (EULA), the Application may locally collect and store information about web browsing activities to provide personalized ads and relevant services. Only generalized inferences are transmitted from the Application to their servers.

Multiple virus scanners have detected malware in Ashampoo PO Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 3 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
ESET-NOD32 a variant of Win32/Toolbar.Conduit.P
tbAsha.dll (MD5: 1c1d673fb3efc0643271226ea42a25d9) has been flagged by 9 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
IKARUS anti.virus PUA.ClientConnect
Comodo Security Application.Win32.Conduit.r
tbAsh0.dll (MD5: 90a1b31ba3d3c1fd73b6021c1d8c1c8f) has been flagged by 6 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.r
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
IKARUS anti.virus PUA.ClientConnect
prxtbAsha.dll (MD5: b92293778555ce3dabe7f0a7e98b34c0) has been flagged by 5 scanners:
Scanner Software Result
AVware Conduit (fs)
IKARUS anti.virus PUA.ClientConnect
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
ESET-NOD32 a variant of Win32/Toolbar.Conduit.P
prxtbAsh0.dll (MD5: c89d9c80fd468c6b51c4aadcc8463c2d) has been flagged by 9 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
ESET-NOD32 Win32/Toolbar.Conduit.X
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
IKARUS anti.virus PUA.ClientConnect
Comodo Security Application.Win32.Conduit.r

Software Behaviors

Firewall:
  • Ashampoo_POToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • Ashampoo_POToolbarHelper.exe is scheduled as a task with the class '{34C01E1F-1D33-4264-8F52-97E13432C5E2}' (runs on registration).

Software Details

URL:
https://ashampoopo.ourtoolbar.com
Support:
https://ashampoopo.ourtoolbar.com/help
Installation path:
C:\users\user\appdata\local\conduit\ct2481033
Uninstaller:
C:\users\user\appdata\Local\Conduit\CT2481033\uninstall.exe toolbar
Size:
9.00 MB
Language:
English

Ashampoo PO Toolbar Executable Details

Primary executable:
tbAsha.dll
Name:
Ashampoo PO Toolbar
Path:
C:\users\user\appdata\local\conduit\ct2481033\tbAsha.dll
MD5:
1c1d673fb3efc0643271226ea42a25d9
SHA-1:
SHA-256:
Files installed by Ashampoo PO Toolbar
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
DLL
tbAsha.dll
Malware
1c1d673fb3efc0643271226ea42a25d9
DLL
7c37127525d29b9c9fc0574b1a0cf24e
DLL
tbAsh0.dll
Malware
90a1b31ba3d3c1fd73b6021c1d8c1c8f
DLL
b92293778555ce3dabe7f0a7e98b34c0
DLL
c89d9c80fd468c6b51c4aadcc8463c2d
DLL
76b3946090c94bb38dbbca54ac8ff9f7
DLL
ef4da153fd7287abc5ebe34970f673b9
DLL
ce49528c9b0b3b3018ee2f70e76b362a
DLL
12661d0dd7c4a799503d19e6fa8f700e