PHPNukeIT Toolbar

PHPNukeIT Toolbar

Known Toolbar

by Conduit Ltd.

What is PHPNukeIT Toolbar?

PHPNukeIT Toolbar is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 58.49% of installations running this operating system. PHPNukeIT Toolbar's installer is typically 15.00 MB in size and installs around 17 files. The most common release is 6.1.0.7 with 35.85% of all installations currently using this version.

PHPNukeIT Toolbar is most popular in Italy with 80.70% of installations residing in this country.

PHPNukeIT Toolbar adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, PHPNukeIT Toolbar is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About PHPNukeIT Toolbar?

The PHPNukeIT Toolbar is a web browser plugin designed to enhance the browsing experience for Internet Explorer, Chrome, and Firefox users. Developed by Conduit, the toolbar provides a range of features including a search box and other generic tools to improve online navigation. It may also offer personalized services and advertising based on the user's browsing habits, however, this is subject to the user's consent and can be managed through the browser settings. It is important to note that during installation, users should exercise caution to ensure that their home page and search provider settings are not automatically altered. In the event that these settings are modified, they will need to be manually reverted by the user if and when the toolbar is uninstalled. Additionally, users should be aware that the toolbar has the capability to automatically download and install updates without user notification. As outlined in the License Agreement, the Application may gather and store browsing information locally on the user's device. This data may be utilized to deliver more relevant services and ads, with only generalized insights being transmitted from the Application to the servers. It's critical for users to review the terms and conditions, and to carefully consider the implications of using the PHPNukeIT Toolbar in order to make informed decisions about its suitability for their browsing needs.

Multiple virus scanners have detected malware in PHPNukeIT Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
tbPHPN.dll (MD5: 895c4812245e244b2f81c71bad0c4e55) has been flagged by 15 scanners:
Scanner Software Result
Bkav FE HW32.Stranfom
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Dr.Web Adware.Conduit.299
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
Agnitum Outpost PUA.Toolbar.Conduit!
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
eSafe Win32.TrojanHorse
ViRobot Trojan.Win32.A.ShipUp.2166296
tbPHP2.dll (MD5: 1a8438854dd15e4389f5bdef502c369d) has been flagged by 15 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.299
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B potentially unwanted
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
Agnitum Outpost PUA.Toolbar.Conduit!
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
eSafe Win32.TrojanHorse
ViRobot Trojan.Win32.A.ShipUp.2166296
prxtbPHP2.dll (MD5: 4b5780c90e38e579a651dbc4774a1f1f) has been flagged by 12 scanners:
Scanner Software Result
Agnitum Outpost PUA.Toolbar.Conduit!
Dr.Web Adware.Conduit.16
ESET-NOD32 Win32/Toolbar.Conduit.W
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.45
Bkav FE W32.HfsAdware.C534
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
eSafe Win32.TrojanHorse
ViRobot Trojan.Win32.A.ShipUp.2166296
prxtbPHP0.dll (MD5: 4c163bd2a5905d18893ee311608e8c54) has been flagged by 11 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.45
ESET-NOD32 Win32/Toolbar.Conduit.O
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
eSafe Win32.TrojanHorse
ViRobot Trojan.Win32.A.ShipUp.2166296

Software Behaviors

Services:
  • UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Firewall:
  • UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.
  • PHPNukeITToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).
  • PHPNukeITToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).
  • PHPNukeITToolbarHelper1.exe is scheduled as a task with the class '{34C01E1F-1D33-4264-8F52-97E13432C5E2}' (runs on registration).

Software Details

URL:
https://phpnukeit.ourtoolbar.com
Support:
https://phpnukeit.ourtoolbar.com/help
Installation path:
C:\Program Files\phpnukeit
Uninstaller:
C:\Program Files\PHPNukeIT\uninstall.exe
Size:
15.00 MB
Language:
English

PHPNukeIT Toolbar Executable Details

Primary executable:
tbPHPN.dll
Name:
PHPNukeIT Toolbar
Path:
C:\Program Files\phpnukeit\tbPHPN.dll
MD5:
895c4812245e244b2f81c71bad0c4e55
SHA-1:
SHA-256:
Files installed by PHPNukeIT Toolbar
File Type Filename MD5
DLL
f7057821b040a7d169711ce27c55012a
DLL
b69c4f58f49e614f75758d22e4ebc6bf
DLL
bbccf6b24155d931fd339c6c4210710c
DLL
tbPHP1.dll
Malware
37810b173024d75560d08b5206893a02
DLL
tbPHP0.dll
Malware
975993043e355206a1fba5a702044f0c
EXE
f3011af04d7bf1afe16cec5eb7d9a586
EXE
a320df2b47cfcaf98d06eb59cd72084c