SearchElf 1.1 Toolbar

SearchElf 1.1 Toolbar

Known Toolbar

by Conduit Ltd.

What is SearchElf 1.1 Toolbar?

SearchElf 1.1 Toolbar is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 60.00% of installations running this operating system. SearchElf 1.1 Toolbar's installer is typically 4.00 MB in size and installs around 17 files. The most common release is 6.2.6.0 with 46.00% of all installations currently using this version.

SearchElf 1.1 Toolbar is most popular in the United States with 95.29% of installations residing in this country.

SearchElf 1.1 Toolbar adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, SearchElf 1.1 Toolbar is known to create 2 firewall exceptions to allow inbound and outbound connectivity.

About SearchElf 1.1 Toolbar?

The software installs a browser toolbar that may collect and store information about your web browsing activities. This data is used by the toolbar provider to offer personalized services or display targeted advertisements. The toolbar is often included as an optional component during the installation of the free 4shared program and may not be automatically removed when the 4shared software is uninstalled. Users may need to manually uninstall the toolbar if it remains on their PC after removing 4shared. Additionally, users may need to manually restore their home page and search settings if they were modified by the toolbar.

Multiple virus scanners have detected malware in SearchElf 1.1 Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
tbSear.dll (MD5: 01e190b029476013db4d7203fd20cebc) has been flagged by 10 scanners:
Scanner Software Result
AVware Conduit (fs)
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.299
Agnitum Outpost PUA.Toolbar.Conduit!
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
tbSea2.dll (MD5: 1a8438854dd15e4389f5bdef502c369d) has been flagged by 10 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.299
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B potentially unwanted
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Agnitum Outpost PUA.Toolbar.Conduit!
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
tbSea0.dll (MD5: 2d2894581d355d5f44eae38898a66846) has been flagged by 3 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
VIPRE Antivirus Conduit (fs)
Panda Antivirus PUP/Conduit.A
prxtbSea2.dll (MD5: 4b5780c90e38e579a651dbc4774a1f1f) has been flagged by 10 scanners:
Scanner Software Result
Agnitum Outpost PUA.Toolbar.Conduit!
Dr.Web Adware.Conduit.16
ESET-NOD32 Win32/Toolbar.Conduit.W
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.45
Bkav FE W32.HfsAdware.C534
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect

Software Behaviors

Services:
  • UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).
Firewall:
  • UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.
  • SearchElf_1.1ToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).
  • SearchElf_1.1ToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).
  • SearchElf_1.1ToolbarHelper1.exe is scheduled as a task with the class '{34C01E1F-1D33-4264-8F52-97E13432C5E2}' (runs on registration).

Software Details

URL:
https://searchelf11.ourtoolbar.com
Support:
https://searchelf11.ourtoolbar.com/help
Installation path:
C:\Program Files\SearchElf_1.1
Uninstaller:
C:\Program Files2\SEARCH~1.1\UNWISE.EXE /U C:\Program Files2\SEARCH~1.1\INSTALL.LOG
Size:
4.00 MB
Language:
English

SearchElf 1.1 Toolbar Executable Details

Primary executable:
tbSear.dll
Name:
SearchElf 1.1 Toolbar
Path:
C:\Program Files\SearchElf_1.1\tbSear.dll
MD5:
01e190b029476013db4d7203fd20cebc
SHA-1:
SHA-256:
Files installed by SearchElf 1.1 Toolbar
File Type Filename MD5
DLL
b721acafb3c4d6f19d94f4d622f1461e
DLL
b69c4f58f49e614f75758d22e4ebc6bf
DLL
ce896340a9f4257b2e313cfc18c32228
DLL
5e16941abd53231f36f7f4b0e4b575ea
EXE
a320df2b47cfcaf98d06eb59cd72084c
DLL
tbSea1.dll
Malware
d9a0ce26ada5bd15b1b03a752ddf14a6
EXE
25e74a80d2c86f373aba62e74c5d0123