PhotoJoy US Toolbar

PhotoJoy US Toolbar

Known Toolbar

by Conduit Ltd.

What is PhotoJoy US Toolbar?

PhotoJoy US Toolbar is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 72.34% of installations running this operating system. PhotoJoy US Toolbar's installer is typically 17.00 MB in size and installs around 16 files. The most common release is 6.5.2.8 with 97.87% of all installations currently using this version.

PhotoJoy US Toolbar is most popular in the United States with 79.45% of installations residing in this country.

PhotoJoy US Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, PhotoJoy US Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About PhotoJoy US Toolbar?

PhotoJoy US Toolbar is a community toolbar offered by Conduit, and is compatible with major web browsers such as Google Chrome, Firefox, and Internet Explorer. This ad-supported program is designed to display advertisements within the toolbar, and may modify the user's browser's home page and search settings to capture web search traffic. Additionally, it collects and aggregates usage information and statistics. The toolbar is often bundled with third-party developer programs to help monetize free and some paid software. During installation, users may be given the option to modify the home and search pages, although this is typically checked by default and overlooked. If the software is removed from the user's PC, the settings will need to be manually reverted back. According to the End User License Agreement (EULA), the company has the ability to automatically download and install remote updates, as well as collect and store details about the user's web browsing activities on the PC in order to suggest additional services or provide targeted advertising. The EULA also states, "By Using a Conduit Software you may enable Conduit to access, use and collect a variety of information, both personal and non-personal, regarding your Internet Browser, your browsing habits, and information about your computer."

Multiple virus scanners have detected malware in PhotoJoy US Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
tbPhot.dll (MD5: ac4c5cab0028cf445961f628c19a8477) has been flagged by 3 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
tbPho2.dll (MD5: 8de9d8fda8df6dd2e1b99a1f297faa8a) has been flagged by 4 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.ks
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
VIPRE Antivirus Conduit (fs)
Panda Antivirus Adware/Conduit
tbPho0.dll (MD5: 90a1b31ba3d3c1fd73b6021c1d8c1c8f) has been flagged by 6 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.r
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
Dr.Web Adware.Toolbar.202
Malwarebytes PUP.Optional.Conduit.A
prxtbPho2.dll (MD5: 9117027aea464e41c60b87b9826e8447) has been flagged by 10 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
G Data Win32.Application.Conduit
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
IKARUS anti.virus PUA.ClientConnect
Comodo Security Application.Win32.Conduit.r
Dr.Web Adware.Toolbar.202
Malwarebytes PUP.Optional.Conduit.A

Software Behaviors

Firewall:
  • PhotoJoy_USToolbarHelper1.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • PhotoJoy_USToolbarHelper.exe is scheduled as a task with the class '{34C01E1F-1D33-4264-8F52-97E13432C5E2}' (runs on registration).

Software Details

URL:
https://photojoyus.ourtoolbar.com
Support:
https://photojoyus.ourtoolbar.com/help
Installation path:
C:\Program Files\photojoy_us
Uninstaller:
C:\Program Files\PhotoJoy_US\uninstall.exe
Size:
17.00 MB
Language:
English

PhotoJoy US Toolbar Executable Details

Primary executable:
prxtbPho2.dll
Name:
PhotoJoy US Toolbar
Path:
C:\Program Files\photojoy_us\prxtbPho2.dll
MD5:
9117027aea464e41c60b87b9826e8447
SHA-1:
SHA-256:
Files installed by PhotoJoy US Toolbar
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
DLL
tbPhot.dll
Malware
ac4c5cab0028cf445961f628c19a8477
DLL
8de9d8fda8df6dd2e1b99a1f297faa8a
DLL
tbPho0.dll
Malware
90a1b31ba3d3c1fd73b6021c1d8c1c8f
DLL
4c163bd2a5905d18893ee311608e8c54
DLL
9117027aea464e41c60b87b9826e8447
DLL
4c163bd2a5905d18893ee311608e8c54
DLL
ca4ec20fe5227224fb98c74032d5dc26
DLL
e66d899a5da9550f46e7edaffb20b9b4
DLL
76b3946090c94bb38dbbca54ac8ff9f7