PHPNukeIT Toolbar

PHPNukeIT Toolbar

Known Toolbar

by Conduit Ltd.

What is PHPNukeIT Toolbar?

PHPNukeIT Toolbar is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 58.49% of installations running this operating system. PHPNukeIT Toolbar's installer is typically 15.00 MB in size and installs around 17 files. The most common release is 6.1.0.7 with 35.85% of all installations currently using this version.

PHPNukeIT Toolbar is most popular in Italy with 80.70% of installations residing in this country.

PHPNukeIT Toolbar adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, PHPNukeIT Toolbar is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About PHPNukeIT Toolbar?

The PHPNukeIT Toolbar is a web browser plugin designed to enhance the browsing experience for Internet Explorer, Chrome, and Firefox users. Developed by Conduit, the toolbar provides a range of features including a search box and other generic tools to improve online navigation. It may also offer personalized services and advertising based on the user's browsing habits, however, this is subject to the user's consent and can be managed through the browser settings. It is important to note that during installation, users should exercise caution to ensure that their home page and search provider settings are not automatically altered. In the event that these settings are modified, they will need to be manually reverted by the user if and when the toolbar is uninstalled. Additionally, users should be aware that the toolbar has the capability to automatically download and install updates without user notification. As outlined in the License Agreement, the Application may gather and store browsing information locally on the user's device. This data may be utilized to deliver more relevant services and ads, with only generalized insights being transmitted from the Application to the servers. It's critical for users to review the terms and conditions, and to carefully consider the implications of using the PHPNukeIT Toolbar in order to make informed decisions about its suitability for their browsing needs.

Multiple virus scanners have detected malware in PHPNukeIT Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
tbPHPN.dll (MD5: 895c4812245e244b2f81c71bad0c4e55) has been flagged by 15 scanners:
Scanner Software Result
Bkav FE HW32.Stranfom
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Dr.Web Adware.Conduit.299
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
Agnitum Outpost PUA.Toolbar.Conduit!
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
eSafe Win32.TrojanHorse
ViRobot Trojan.Win32.A.ShipUp.2166296
tbPHP2.dll (MD5: 1a8438854dd15e4389f5bdef502c369d) has been flagged by 15 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.299
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B potentially unwanted
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
Agnitum Outpost PUA.Toolbar.Conduit!
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
eSafe Win32.TrojanHorse
ViRobot Trojan.Win32.A.ShipUp.2166296
prxtbPHP2.dll (MD5: 4b5780c90e38e579a651dbc4774a1f1f) has been flagged by 12 scanners:
Scanner Software Result
Agnitum Outpost PUA.Toolbar.Conduit!
Dr.Web Adware.Conduit.16
ESET-NOD32 Win32/Toolbar.Conduit.W
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.45
Bkav FE W32.HfsAdware.C534
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
eSafe Win32.TrojanHorse
ViRobot Trojan.Win32.A.ShipUp.2166296
prxtbPHP0.dll (MD5: 4c163bd2a5905d18893ee311608e8c54) has been flagged by 11 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.45
ESET-NOD32 Win32/Toolbar.Conduit.O
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
eSafe Win32.TrojanHorse
ViRobot Trojan.Win32.A.ShipUp.2166296

Software Behaviors

Services:
  • UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Firewall:
  • UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.
  • PHPNukeITToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).
  • PHPNukeITToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).
  • PHPNukeITToolbarHelper1.exe is scheduled as a task with the class '{34C01E1F-1D33-4264-8F52-97E13432C5E2}' (runs on registration).

Software Details

URL:
https://phpnukeit.ourtoolbar.com
Support:
https://phpnukeit.ourtoolbar.com/help
Installation path:
C:\Program Files\phpnukeit
Uninstaller:
C:\Program Files\PHPNukeIT\uninstall.exe
Size:
15.00 MB
Language:
English

PHPNukeIT Toolbar Executable Details

Primary executable:
tbPHPN.dll
Name:
PHPNukeIT Toolbar
Path:
C:\Program Files\phpnukeit\tbPHPN.dll
MD5:
895c4812245e244b2f81c71bad0c4e55
SHA-1:
–
SHA-256:
–
Files installed by PHPNukeIT Toolbar
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
EXE
973567b98cdfc147df4e60471d9df072
DLL
tbPHPN.dll
Malware
895c4812245e244b2f81c71bad0c4e55
DLL
tbPHP2.dll
Malware
1a8438854dd15e4389f5bdef502c369d
DLL
b92293778555ce3dabe7f0a7e98b34c0
DLL
4b5780c90e38e579a651dbc4774a1f1f
DLL
4c163bd2a5905d18893ee311608e8c54
DLL
76b3946090c94bb38dbbca54ac8ff9f7
DLL
76b3946090c94bb38dbbca54ac8ff9f7
DLL
e055e5e9888a21a1f8e40c7235ce6fbe