Expat Shield Toolbar for IE

Expat Shield Toolbar for IE

Known Toolbar

by Conduit Ltd.

What is Expat Shield Toolbar for IE?

Expat Shield Toolbar for IE is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 88.00% of installations running this operating system. Expat Shield Toolbar for IE's installer is typically 1.00 MB in size and installs around 14 files. The most common release is 6.17.2.8 with 40.00% of all installations currently using this version.

Expat Shield Toolbar for IE is most popular in the United States with 26.05% of installations residing in this country.

Expat Shield Toolbar for IE adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Expat Shield Toolbar for IE is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About Expat Shield Toolbar for IE?

This toolbar, powered by Conduit/Perion (ClientConnect), is specifically designed for Internet Explorer as a Browser Helper Object (BHO). It offers a range of limited web browsing features, but it also alters the user's search and home pages and includes multiple ad-supported components. Additionally, the toolbar includes potentially unwanted features like Search Protect, which ensures that the browser consistently maintains the modified home and search pages to Conduit. Typically, the toolbar is bundled with a third-party program or can be downloaded through a hosted portal page on the OurToolbar network.

Multiple virus scanners have detected malware in Expat Shield Toolbar for IE.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
prxtbExp0.dll (MD5: 480994ae776f86dc885fd654665ebdfa) has been flagged by 5 scanners:
Scanner Software Result
Agnitum Outpost PUA.Toolbar.Conduit!
Dr.Web Adware.Conduit.16
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
tbExpa.dll (MD5: 975993043e355206a1fba5a702044f0c) has been flagged by 8 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.~A
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Malwarebytes PUP.Optional.Conduit
Panda Antivirus Adware/Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
VIPRE Antivirus Conduit (fs)
Agnitum Outpost PUA.Toolbar.Conduit!
Dr.Web Adware.Conduit.16
prxtbExpa.dll (MD5: 463f34d012b31fc55660ce2f82dc7f34) has been flagged by 11 scanners:
Scanner Software Result
Agnitum Outpost PUA.Toolbar.Conduit!
Dr.Web Adware.Conduit.16
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
Fortinet FortiGate Riskware/Toolbar_Conduit
McAfee Artemis!463F34D012B3
McAfee-GW-Edition Artemis!463F34D012B3
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
Expat_ShieldToolbarHelper.exe (MD5: 943f313974a830d4634c73beb8103f5e) has been flagged by 11 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.~f
Dr.Web Adware.Toolbar.202
Malwarebytes PUP.Optional.Conduit.A
VIPRE Antivirus Conduit (fs)
Agnitum Outpost PUA.Toolbar.Conduit!
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
Fortinet FortiGate Riskware/Toolbar_Conduit
McAfee Artemis!463F34D012B3
McAfee-GW-Edition Artemis!463F34D012B3
Panda Antivirus PUP/Conduit.A
TrendMicro-HouseCall TROJ_GEN.F47V1113

Software Behaviors

Services:
  • UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Firewall:
  • UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.
  • Expat_ShieldToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).

Software Details

URL:
https://expatshield.ourtoolbar.com
Support:
https://expatshield.ourtoolbar.com/help
Installation path:
C:\ProgramData\conduit\ie\ct2549263
Uninstaller:
C:\ProgramData\Conduit\IE\CT2549263\UninstallerUI.exe -ctid=CT2549263 -toolbarName=Expat Shield -toolbarEnv=conduit -type=IE
Size:
1.00 MB
Language:
English

Expat Shield Toolbar for IE Executable Details

Primary executable:
Expat_ShieldToolbarHelper.exe
Name:
Expat Shield Toolbar for IE
Path:
C:\ProgramData\conduit\ie\ct2549263\Expat_ShieldToolbarHelper.exe
MD5:
943f313974a830d4634c73beb8103f5e
SHA-1:
SHA-256:
Files installed by Expat Shield Toolbar for IE
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
EXE
973567b98cdfc147df4e60471d9df072
EXE
4f1ca2acc7cb0404b72a1c2834d733c1
DLL
480994ae776f86dc885fd654665ebdfa
DLL
e94cd032c188546fd629b194364f19c4
DLL
975993043e355206a1fba5a702044f0c
DLL
f7057821b040a7d169711ce27c55012a
DLL
bbccf6b24155d931fd339c6c4210710c
DLL
975993043e355206a1fba5a702044f0c
DLL
463f34d012b31fc55660ce2f82dc7f34