SearchElf 1.1 Toolbar

SearchElf 1.1 Toolbar

Known Toolbar

by Conduit Ltd.

What is SearchElf 1.1 Toolbar?

SearchElf 1.1 Toolbar is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 60.00% of installations running this operating system. SearchElf 1.1 Toolbar's installer is typically 4.00 MB in size and installs around 17 files. The most common release is 6.2.6.0 with 46.00% of all installations currently using this version.

SearchElf 1.1 Toolbar is most popular in the United States with 95.29% of installations residing in this country.

SearchElf 1.1 Toolbar adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, SearchElf 1.1 Toolbar is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About SearchElf 1.1 Toolbar?

The software installs a browser toolbar that may collect and store information about your web browsing activities. This data is used by the toolbar provider to offer personalized services or display targeted advertisements. The toolbar is often included as an optional component during the installation of the free 4shared program and may not be automatically removed when the 4shared software is uninstalled. Users may need to manually uninstall the toolbar if it remains on their PC after removing 4shared. Additionally, users may need to manually restore their home page and search settings if they were modified by the toolbar.

Multiple virus scanners have detected malware in SearchElf 1.1 Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
tbSear.dll (MD5: 01e190b029476013db4d7203fd20cebc) has been flagged by 10 scanners:
Scanner Software Result
AVware Conduit (fs)
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.299
Agnitum Outpost PUA.Toolbar.Conduit!
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
tbSea2.dll (MD5: 1a8438854dd15e4389f5bdef502c369d) has been flagged by 10 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.299
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B potentially unwanted
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Agnitum Outpost PUA.Toolbar.Conduit!
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
tbSea0.dll (MD5: 2d2894581d355d5f44eae38898a66846) has been flagged by 3 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
VIPRE Antivirus Conduit (fs)
Panda Antivirus PUP/Conduit.A
prxtbSea2.dll (MD5: 4b5780c90e38e579a651dbc4774a1f1f) has been flagged by 10 scanners:
Scanner Software Result
Agnitum Outpost PUA.Toolbar.Conduit!
Dr.Web Adware.Conduit.16
ESET-NOD32 Win32/Toolbar.Conduit.W
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.45
Bkav FE W32.HfsAdware.C534
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect

Software Behaviors

Services:
  • UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Firewall:
  • UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.
  • SearchElf_1.1ToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).
  • SearchElf_1.1ToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).
  • SearchElf_1.1ToolbarHelper1.exe is scheduled as a task with the class '{34C01E1F-1D33-4264-8F52-97E13432C5E2}' (runs on registration).

Software Details

URL:
https://searchelf11.ourtoolbar.com
Support:
https://searchelf11.ourtoolbar.com/help
Installation path:
C:\Program Files\SearchElf_1.1
Uninstaller:
C:\Program Files2\SEARCH~1.1\UNWISE.EXE /U C:\Program Files2\SEARCH~1.1\INSTALL.LOG
Size:
4.00 MB
Language:
English

SearchElf 1.1 Toolbar Executable Details

Primary executable:
tbSear.dll
Name:
SearchElf 1.1 Toolbar
Path:
C:\Program Files\SearchElf_1.1\tbSear.dll
MD5:
01e190b029476013db4d7203fd20cebc
SHA-1:
SHA-256:
Files installed by SearchElf 1.1 Toolbar
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
EXE
973567b98cdfc147df4e60471d9df072
DLL
tbSear.dll
Malware
01e190b029476013db4d7203fd20cebc
DLL
tbSea2.dll
Malware
1a8438854dd15e4389f5bdef502c369d
DLL
tbSea0.dll
Malware
2d2894581d355d5f44eae38898a66846
DLL
4b5780c90e38e579a651dbc4774a1f1f
DLL
4c163bd2a5905d18893ee311608e8c54
DLL
ec2a7051556e2e8473d2dad42620f665
DLL
76b3946090c94bb38dbbca54ac8ff9f7
DLL
e055e5e9888a21a1f8e40c7235ce6fbe