What is Winload Toolbar?

Winload Toolbar is software application developed by Conduit Ltd.. It is most commonly found on computers running Windows 7 with nearly 72.20% of installations running this operating system. Winload Toolbar's installer is typically 4.00 MB in size and installs around 24 files. The most common release is 6.9.0.16 with 28.48% of all installations currently using this version.

Winload Toolbar is most popular in Germany with 81.21% of installations residing in this country.

Winload Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, Winload Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About Winload Toolbar?

The Winload Toolbar, developed by Conduit, is a browser extension compatible with Internet Explorer, Chrome, and Firefox. It gathers and retains browsing data, forwarding it to OurToolbar for the purpose of offering personalized services and displaying ads through the toolbar. The installation process may prompt the user to modify their home page and search provider settings, with these options pre-selected by default. Once installed, the toolbar furnishes a search box and a range of standard features. Additionally, it has the capability to automatically download and install updates without user notification. Classified as a PPI (pay per install) toolbar, Conduit compensates the publisher for each installation and for every month the toolbar remains installed on a user's web browser, offering various payment rates depending on the country of installation.

Multiple virus scanners have detected malware in Winload Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 3 scanners:

Scanner Software	Version	Result
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	26380	Conduit (fs)
ESET-NOD32	9148	a variant of Win32/Toolbar.Conduit.P

tbWinl.dll (MD5: 1a8438854dd15e4389f5bdef502c369d) has been flagged by 13 scanners:

Scanner Software	Version	Result
AVware	1.5.0.21	Conduit (fs)
Baidu-International	4.0.3.15817	Adware.Win32.Conduit.Y
Bkav FE	1.3.0.6379	W32.HfsAdware
Dr.Web	9.0.0.0229	Adware.Conduit.299
ESET-NOD32	7.11614	a variant of Win32/Toolbar.Conduit.B potentially unwanted
Panda Antivirus	15.08.17.12	PUP/Conduit.A
VIPRE Antivirus	40170	Conduit (fs)
Fortinet FortiGate	5.0.999.0	Riskware/Toolbar_Conduit
G Data	24	Win32.Application.Conduit.F
Comodo Security	17676	Application.Win32.Conduit.~A
Malwarebytes	1.75.0.1	PUP.Optional.Conduit
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F47V1113
IKARUS anti.virus	T3.1.6.1.0	PUA.ClientConnect

tbWin2.dll (MD5: 975993043e355206a1fba5a702044f0c) has been flagged by 11 scanners:

Scanner Software	Version	Result
Comodo Security	17676	Application.Win32.Conduit.~A
ESET-NOD32	9338	a variant of Win32/Toolbar.Conduit.B
Malwarebytes	1.75.0.1	PUP.Optional.Conduit
Panda Antivirus	10.0.3.5	Adware/Conduit
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F47V1113
VIPRE Antivirus	25818	Conduit (fs)
Bkav FE	1.3.0.6379	W32.HfsAdware.C534
Dr.Web	7.0.12.3050	Adware.Conduit.300
G Data	25	Win32.Adware.Conduit.B
IKARUS anti.virus	T3.1.6.1.0	PUA.ClientConnect
AVware	1.5.0.16	Conduit (fs)

tbWin0.dll (MD5: 90a1b31ba3d3c1fd73b6021c1d8c1c8f) has been flagged by 4 scanners:

Scanner Software	Version	Result
Comodo Security	17602	Application.Win32.Conduit.r
ESET-NOD32	9281	a variant of Win32/Toolbar.Conduit.B
Panda Antivirus	10.0.3.5	Adware/Conduit
VIPRE Antivirus	25382	Conduit (fs)

prxtbWin2.dll (MD5: 9117027aea464e41c60b87b9826e8447) has been flagged by 12 scanners:

Scanner Software	Version	Result
AVware	1.5.0.21	Conduit (fs)
Baidu-International	3.5.1.41473	PUA.Win32.Conduit.BX
ESET-NOD32	10641	a variant of Win32/Toolbar.Conduit.X
G Data	24	Win32.Application.Conduit.F
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	31234	Conduit (fs)
Comodo Security	17676	Application.Win32.Conduit.~A
Malwarebytes	1.75.0.1	PUP.Optional.Conduit
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F47V1113
Bkav FE	1.3.0.6379	W32.HfsAdware.C534
Dr.Web	7.0.12.3050	Adware.Conduit.300
IKARUS anti.virus	T3.1.6.1.0	PUA.ClientConnect

Software Behaviors

Firewall:

WinloadToolbarHelper1.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.

Scheduled tasks:

uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
WinloadToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).

Software Details

URL:

https://winload.ourtoolbar.com

Support:

https://winload.ourtoolbar.com/help

Installation path:

C:\Program Files\winload

Uninstaller:

C:\Program Files\Winload\uninstall.exe toolbar

Size:

4.00 MB

Language:

English

Winload Toolbar Executable Details

Primary executable:

tbWinl.dll

Name:

Winload Toolbar

Path:

C:\Program Files\winload\tbWinl.dll

MD5:

1a8438854dd15e4389f5bdef502c369d

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

WinloadToolbarHelper.exe

Malware

a320df2b47cfcaf98d06eb59cd72084c

DLL

tbWin1.dll

7cfe2e651641ad73c1fc579a16e64dbf

DLL

Sprache_Vizadoo.dll

f5a33a601218c62d144beb357f0e307c

EXE

Vizadoo.exe

a361de86a96de359a10980089e65e714

File Type	Filename	MD5
EXE	WinloadToolbarHelper.exe Malware	a320df2b47cfcaf98d06eb59cd72084c
DLL	tbWin1.dll	7cfe2e651641ad73c1fc579a16e64dbf
DLL	Sprache_Vizadoo.dll	f5a33a601218c62d144beb357f0e307c
EXE	Vizadoo.exe	a361de86a96de359a10980089e65e714