Hotspot Shield Toolbar for IE

Hotspot Shield Toolbar for IE

Known Toolbar

by Conduit Ltd.

What is Hotspot Shield Toolbar for IE?

Hotspot Shield Toolbar for IE is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 67.79% of installations running this operating system. Hotspot Shield Toolbar for IE's installer is typically 1.00 MB in size and installs around 21 files. The most common release is 6.20.0.10 with 38.98% of all installations currently using this version.

Hotspot Shield Toolbar for IE is most popular in the United States with 32.26% of installations residing in this country.

Hotspot Shield Toolbar for IE adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Hotspot Shield Toolbar for IE is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About Hotspot Shield Toolbar for IE?

Hotspot Shield is a browser extension and Browser Helper Object developed by Conduit Connect for Internet Explorer. It is distributed through the Conduit/Perion monetization platform and is often included as an optional offer with third-party software. Upon installation, this toolbar may modify the home page and new tab pages to a Conduit-controlled search portal using Bing as the primary search engine. It may also change the default search provider to use Bing. According to the license agreement, the installation process may involve changes to Internet Browser settings, mobile device settings, and social network account settings. This could include modifying the default search engine in the browser, allowing software updates for the Conduit Software, and providing Conduit with access to information on your social network account or site. Users have the option to opt in to these changes separately. Please note that this information is accurate as of the latest update.

Multiple virus scanners have detected malware in Hotspot Shield Toolbar for IE.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
prxtbHot0.dll (MD5: e86e5671c52b7b05f6614fc57ad1fa80) has been flagged by 4 scanners:
Scanner Software Result
Dr.Web Adware.Conduit.16
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Hotspot_ShieldToolbarHelper.exe (MD5: 943f313974a830d4634c73beb8103f5e) has been flagged by 6 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.~f
Dr.Web Adware.Toolbar.202
Malwarebytes PUP.Optional.Conduit.A
VIPRE Antivirus Conduit (fs)
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
Panda Antivirus PUP/Conduit.A
tbHots.dll (MD5: 975993043e355206a1fba5a702044f0c) has been flagged by 7 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.~A
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Malwarebytes PUP.Optional.Conduit
Panda Antivirus Adware/Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
VIPRE Antivirus Conduit (fs)
Dr.Web Adware.Toolbar.202
prxtbHots.dll (MD5: 480994ae776f86dc885fd654665ebdfa) has been flagged by 8 scanners:
Scanner Software Result
Agnitum Outpost PUA.Toolbar.Conduit
Dr.Web Adware.Conduit.16
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113

Software Behaviors

Services:
  • UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Firewall:
  • UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.
  • Hotspot_ShieldToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).

Software Details

URL:
https://hotspotshield.ourtoolbar.com
Support:
https://hotspotshield.ourtoolbar.com/help
Installation path:
C:\Documents and Settings\user\Application data\conduit\ie\ct1561552
Uninstaller:
C:\Documents and Settings\user\Application Data\Conduit\IE\CT1561552\UninstallerUI.exe -ctid=CT1561552 -toolbarName=Hotspot Shield -toolbarEnv=conduit
Size:
1.00 MB
Language:
English

Hotspot Shield Toolbar for IE Executable Details

Primary executable:
prxtbHots.dll
Name:
Hotspot Shield Toolbar for IE
Path:
C:\Documents and Settings\user\Application data\conduit\ie\ct1561552\prxtbHots.dll
MD5:
480994ae776f86dc885fd654665ebdfa
SHA-1:
SHA-256:
Files installed by Hotspot Shield Toolbar for IE
File Type Filename MD5
DLL
f7057821b040a7d169711ce27c55012a
DLL
f7057821b040a7d169711ce27c55012a
DLL
bbccf6b24155d931fd339c6c4210710c
DLL
bbccf6b24155d931fd339c6c4210710c
EXE
943f313974a830d4634c73beb8103f5e
DLL
bbccf6b24155d931fd339c6c4210710c
DLL
f7057821b040a7d169711ce27c55012a
DLL
e94cd032c188546fd629b194364f19c4
DLL
tbHots.dll
Toolbar
975993043e355206a1fba5a702044f0c
DLL
480994ae776f86dc885fd654665ebdfa