Hotspot Shield Toolbar for IE

Hotspot Shield Toolbar for IE

Known Toolbar

by Conduit Ltd.

What is Hotspot Shield Toolbar for IE?

Hotspot Shield Toolbar for IE is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 67.79% of installations running this operating system. Hotspot Shield Toolbar for IE's installer is typically 1.00 MB in size and installs around 21 files. The most common release is 6.20.0.10 with 38.98% of all installations currently using this version.

Hotspot Shield Toolbar for IE is most popular in the United States with 32.26% of installations residing in this country.

Hotspot Shield Toolbar for IE adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Hotspot Shield Toolbar for IE is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About Hotspot Shield Toolbar for IE?

Hotspot Shield is a browser extension and Browser Helper Object developed by Conduit Connect for Internet Explorer. It is distributed through the Conduit/Perion monetization platform and is often included as an optional offer with third-party software. Upon installation, this toolbar may modify the home page and new tab pages to a Conduit-controlled search portal using Bing as the primary search engine. It may also change the default search provider to use Bing. According to the license agreement, the installation process may involve changes to Internet Browser settings, mobile device settings, and social network account settings. This could include modifying the default search engine in the browser, allowing software updates for the Conduit Software, and providing Conduit with access to information on your social network account or site. Users have the option to opt in to these changes separately. Please note that this information is accurate as of the latest update.

Multiple virus scanners have detected malware in Hotspot Shield Toolbar for IE.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
prxtbHot0.dll (MD5: e86e5671c52b7b05f6614fc57ad1fa80) has been flagged by 4 scanners:
Scanner Software Result
Dr.Web Adware.Conduit.16
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Hotspot_ShieldToolbarHelper.exe (MD5: 943f313974a830d4634c73beb8103f5e) has been flagged by 6 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.~f
Dr.Web Adware.Toolbar.202
Malwarebytes PUP.Optional.Conduit.A
VIPRE Antivirus Conduit (fs)
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
Panda Antivirus PUP/Conduit.A
tbHots.dll (MD5: 975993043e355206a1fba5a702044f0c) has been flagged by 7 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.~A
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Malwarebytes PUP.Optional.Conduit
Panda Antivirus Adware/Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
VIPRE Antivirus Conduit (fs)
Dr.Web Adware.Toolbar.202
prxtbHots.dll (MD5: 480994ae776f86dc885fd654665ebdfa) has been flagged by 8 scanners:
Scanner Software Result
Agnitum Outpost PUA.Toolbar.Conduit
Dr.Web Adware.Conduit.16
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113

Software Behaviors

Services:
  • UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Firewall:
  • UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.
  • Hotspot_ShieldToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).

Software Details

URL:
https://hotspotshield.ourtoolbar.com
Support:
https://hotspotshield.ourtoolbar.com/help
Installation path:
C:\Documents and Settings\user\Application data\conduit\ie\ct1561552
Uninstaller:
C:\Documents and Settings\user\Application Data\Conduit\IE\CT1561552\UninstallerUI.exe -ctid=CT1561552 -toolbarName=Hotspot Shield -toolbarEnv=conduit
Size:
1.00 MB
Language:
English

Hotspot Shield Toolbar for IE Executable Details

Primary executable:
prxtbHots.dll
Name:
Hotspot Shield Toolbar for IE
Path:
C:\Documents and Settings\user\Application data\conduit\ie\ct1561552\prxtbHots.dll
MD5:
480994ae776f86dc885fd654665ebdfa
SHA-1:
SHA-256:
Files installed by Hotspot Shield Toolbar for IE
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
EXE
973567b98cdfc147df4e60471d9df072
EXE
b23d301e29f53c9c8ebe007f17812170
DLL
070718c33ed2503b6b1fc4818c5d6250
DLL
975993043e355206a1fba5a702044f0c
DLL
975993043e355206a1fba5a702044f0c
DLL
59f4aa1a1ecf4c023f44872a9aae3b76
DLL
e86e5671c52b7b05f6614fc57ad1fa80
DLL
e94cd032c188546fd629b194364f19c4
DLL
e94cd032c188546fd629b194364f19c4