NCH Toolbar

NCH Toolbar

Known Toolbar

by Conduit Ltd.

What is NCH Toolbar?

NCH Toolbar is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 67.49% of installations running this operating system. NCH Toolbar's installer is typically 4.00 MB in size and installs around 21 files. The most common release is 6.3.3.3 with 23.46% of all installations currently using this version.

NCH Toolbar is most popular in the United States with 46.98% of installations residing in this country.

NCH Toolbar adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, NCH Toolbar is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About NCH Toolbar?

The NCH Toolbar, designed by Conduit, is a Community Toolbar compatible with Internet Explorer, Chrome, and Firefox web browsers. It gathers and stores data on your internet browsing habits, which is then sent to OurToolbar for the purpose of suggesting relevant services and displaying advertisements via the toolbar. The installation process may include attempts to modify the browser's home page and search provider settings, with the option to opt out available to the user, though checked by default. Additional features include a search box and various other standard features within the toolbar. Furthermore, the toolbar may transmit event logs and other system-related information to a server and conduct automatic downloads and installations of updates without user notification. It is important to note that this toolbar operates on a pay per install (PPI) model, where the publisher receives payment from Conduit for each installation, as well as monthly payments for the duration of the toolbar's presence in the user's web browser, with the exact amount varying based on the user's country of origin.

Multiple virus scanners have detected malware in NCH Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 3 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
ESET-NOD32 a variant of Win32/Toolbar.Conduit.P
tbNC2.dll (MD5: 01799def4ee217264f0abd2ccf1beff5) has been flagged by 3 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
prxtbNC2.dll (MD5: 480994ae776f86dc885fd654665ebdfa) has been flagged by 9 scanners:
Scanner Software Result
Agnitum Outpost PUA.Toolbar.Conduit!
Dr.Web Adware.Conduit.16
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Bkav FE W32.HfsAdware.C534
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
AVware Conduit (fs)
prxtbNC1.dll (MD5: 9117027aea464e41c60b87b9826e8447) has been flagged by 10 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
G Data Win32.Application.Conduit.F
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Agnitum Outpost PUA.Toolbar.Conduit!
Dr.Web Adware.Conduit.16
Bkav FE W32.HfsAdware.C534
IKARUS anti.virus PUA.ClientConnect
prxtbNC0.dll (MD5: c89d9c80fd468c6b51c4aadcc8463c2d) has been flagged by 11 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
ESET-NOD32 Win32/Toolbar.Conduit.X
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Agnitum Outpost PUA.Toolbar.Conduit!
Dr.Web Adware.Conduit.16
Bkav FE W32.HfsAdware.C534
IKARUS anti.virus PUA.ClientConnect

Software Behaviors

Services:
  • UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Firewall:
  • UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.
  • NCHToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).
  • NCHToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).

Software Details

URL:
https://nch.ourtoolbar.com
Support:
https://nch.ourtoolbar.com/help
Installation path:
C:\Program Files\nch
Uninstaller:
C:\Program Files\NCH\uninstall.exe
Size:
4.00 MB
Language:
English

NCH Toolbar Executable Details

Primary executable:
tbNCH_.dll
Name:
NCH Toolbar
Path:
C:\Program Files\nch\tbNCH_.dll
MD5:
d9a0ce26ada5bd15b1b03a752ddf14a6
SHA-1:
SHA-256:
Files installed by NCH Toolbar
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
EXE
973567b98cdfc147df4e60471d9df072
DLL
d9a0ce26ada5bd15b1b03a752ddf14a6
DLL
9117027aea464e41c60b87b9826e8447
DLL
e66d899a5da9550f46e7edaffb20b9b4
DLL
8f7928532b88f3c8ae75d7af16d13bdd
DLL
9a302f14b18a9fb9b351ad7048cc15b5
DLL
tbNC2.dll
Malware
01799def4ee217264f0abd2ccf1beff5
DLL
480994ae776f86dc885fd654665ebdfa
DLL
9117027aea464e41c60b87b9826e8447