PhotoJoy Bar Toolbar

PhotoJoy Bar Toolbar

Known Toolbar

by Conduit Ltd.

What is PhotoJoy Bar Toolbar?

PhotoJoy Bar Toolbar is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 60.00% of installations running this operating system. PhotoJoy Bar Toolbar's installer is typically 12.00 MB in size and installs around 16 files. The most common release is 6.3.3.3 with 67.69% of all installations currently using this version.

PhotoJoy Bar Toolbar is most popular in the United States with 85.44% of installations residing in this country.

PhotoJoy Bar Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, PhotoJoy Bar Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About PhotoJoy Bar Toolbar?

The PhotoJoy Bar Toolbar from Conduit is a community toolbar that is compatible with web browsers such as Internet Explorer, Chrome, and Firefox. This toolbar is designed to display advertisements within the bar and may modify the browser's home page and search settings in order to gather usage statistics. The toolbar is often bundled with third-party developer programs to help monetize software. During installation, users may be prompted to modify their home and search pages, although this option is typically pre-selected. If the software is removed from the user's computer, the settings will need to be manually reverted back. In accordance with the End User License Agreement (EULA), Conduit has the authorization to automatically download and install remote updates, as well as gather and store details about the user's web browsing activities locally on the PC. This is used to provide targeted advertising and suggest additional services through the toolbar application. The EULA also states that by using Conduit software, users may enable Conduit to access, use, and collect both personal and non-personal information regarding their internet browser, browsing habits, and computer details.

Multiple virus scanners have detected malware in PhotoJoy Bar Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
tbPhot.dll (MD5: 1a8438854dd15e4389f5bdef502c369d) has been flagged by 12 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Bkav FE W32.HfsAdware
Dr.Web Adware.Conduit.299
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B potentially unwanted
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
Agnitum Outpost PUA.Toolbar.Conduit!
IKARUS anti.virus PUA.ClientConnect
Comodo Security Application.Win32.Conduit.ks
tbPho2.dll (MD5: 8de9d8fda8df6dd2e1b99a1f297faa8a) has been flagged by 4 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.ks
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
VIPRE Antivirus Conduit (fs)
Panda Antivirus Adware/Conduit
tbPho0.dll (MD5: ac4c5cab0028cf445961f628c19a8477) has been flagged by 3 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
prxtbPhot.dll (MD5: b92293778555ce3dabe7f0a7e98b34c0) has been flagged by 6 scanners:
Scanner Software Result
AVware Conduit (fs)
IKARUS anti.virus PUA.ClientConnect
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Comodo Security Application.Win32.Conduit.ks
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B

Software Behaviors

Firewall:
  • PhotoJoy_BarToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • PhotoJoy_BarToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).

Software Details

URL:
https://photojoybar.ourtoolbar.com
Support:
https://photojoybar.ourtoolbar.com/help
Installation path:
C:\Program Files\photojoy_bar
Uninstaller:
C:\Program Files\PhotoJoy_Bar\uninstall.exe
Size:
12.00 MB
Language:
English

PhotoJoy Bar Toolbar Executable Details

Primary executable:
tbPhot.dll
Name:
PhotoJoy Bar Toolbar
Path:
C:\Program Files\photojoy_bar\tbPhot.dll
MD5:
1a8438854dd15e4389f5bdef502c369d
SHA-1:
SHA-256:
Files installed by PhotoJoy Bar Toolbar
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
DLL
tbPhot.dll
Malware
1a8438854dd15e4389f5bdef502c369d
DLL
8de9d8fda8df6dd2e1b99a1f297faa8a
DLL
tbPho0.dll
Malware
ac4c5cab0028cf445961f628c19a8477
DLL
b92293778555ce3dabe7f0a7e98b34c0
DLL
4b5780c90e38e579a651dbc4774a1f1f
DLL
c89d9c80fd468c6b51c4aadcc8463c2d
DLL
ca4ec20fe5227224fb98c74032d5dc26
DLL
ec2a7051556e2e8473d2dad42620f665
DLL
76b3946090c94bb38dbbca54ac8ff9f7