PHPNukeEN Toolbar

PHPNukeEN Toolbar

Known Toolbar

by Conduit Ltd.

What is PHPNukeEN Toolbar?

PHPNukeEN Toolbar is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 71.43% of installations running this operating system. PHPNukeEN Toolbar's installer is typically 15.00 MB in size and installs around 18 files. The most common release is 6.3.3.3 with 20.00% of all installations currently using this version.

PHPNukeEN Toolbar is most popular in the United States with 43.86% of installations residing in this country.

PHPNukeEN Toolbar adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, PHPNukeEN Toolbar is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About PHPNukeEN Toolbar?

The PHPNukeEN Toolbar is a Community Toolbar developed by Conduit, that integrates into popular web browsers including Internet Explorer, Chrome, and Firefox. This toolbar is supported by advertising and is designed to display ads within the toolbar and modify the browser's home page and search settings to gather usage statistics. It is often bundled with third-party developer programs to help monetize free and some paid software. During installation, users may have the option to modify the home and search pages, although this is typically pre-selected and overlooked. If the software is removed from the user's computer, the settings will need to be manually restored. According to the End User License Agreement (EULA), the company will automatically download and install remote updates and collect and store details about the user's web browsing activities locally on the PC to suggest additional services or provide targeted advertising. The EULA states, "By using Conduit Software, you may enable Conduit to access, use, and collect a variety of information, both personal and non-personal, regarding your Internet Browser, your browsing habits, and information about your computer."

Multiple virus scanners have detected malware in PHPNukeEN Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 3 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
ESET-NOD32 a variant of Win32/Toolbar.Conduit.P
tbPHPN.dll (MD5: 469b44ae63d2ae02b512ec92c64d4a06) has been flagged by 11 scanners:
Scanner Software Result
Bkav FE HW32.Stranact
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Dr.Web Adware.Conduit.299
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
IKARUS anti.virus PUA.ClientConnect
Comodo Security Application.Win32.Conduit.ks
tbPHP2.dll (MD5: 8de9d8fda8df6dd2e1b99a1f297faa8a) has been flagged by 4 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.ks
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
VIPRE Antivirus Conduit (fs)
Panda Antivirus PUP/Conduit.A
prxtbPHP2.dll (MD5: 9117027aea464e41c60b87b9826e8447) has been flagged by 10 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
G Data Win32.Application.Conduit.F
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
IKARUS anti.virus PUA.ClientConnect
Comodo Security Application.Win32.Conduit.ks
prxtbPHP1.dll (MD5: c89d9c80fd468c6b51c4aadcc8463c2d) has been flagged by 11 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
ESET-NOD32 Win32/Toolbar.Conduit.X
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
IKARUS anti.virus PUA.ClientConnect
Comodo Security Application.Win32.Conduit.ks

Software Behaviors

Services:
  • UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Firewall:
  • UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.
  • PHPNukeENToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).
  • PHPNukeENToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).

Software Details

URL:
https://phpnukeen.ourtoolbar.com
Support:
https://phpnukeen.ourtoolbar.com/help
Installation path:
C:\Program Files\phpnukeen
Uninstaller:
C:\Program Files\PHPNukeEN\uninstall.exe
Size:
15.00 MB
Language:
English

PHPNukeEN Toolbar Executable Details

Primary executable:
tbPHPN.dll
Name:
PHPNukeEN Toolbar
Path:
C:\Program Files\phpnukeen\tbPHPN.dll
MD5:
469b44ae63d2ae02b512ec92c64d4a06
SHA-1:
SHA-256:
Files installed by PHPNukeEN Toolbar
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
EXE
973567b98cdfc147df4e60471d9df072
DLL
tbPHPN.dll
Malware
469b44ae63d2ae02b512ec92c64d4a06
DLL
tbPHP2.dll
Malware
8de9d8fda8df6dd2e1b99a1f297faa8a
DLL
b92293778555ce3dabe7f0a7e98b34c0
DLL
9117027aea464e41c60b87b9826e8447
DLL
c89d9c80fd468c6b51c4aadcc8463c2d
DLL
4c163bd2a5905d18893ee311608e8c54
DLL
76b3946090c94bb38dbbca54ac8ff9f7
DLL
ce49528c9b0b3b3018ee2f70e76b362a