iWin Toolbar

iWin Toolbar

Known Toolbar

by iWin.com

What is iWin Toolbar?

iWin Toolbar is software application developed by iWin.com. It is most commonly found on computers running Windows 7 with nearly 68.26% of installations running this operating system. iWin Toolbar's installer is typically 4.00 MB in size and installs around 20 files. The most common release is 6.9.0.16 with 16.77% of all installations currently using this version.

iWin Toolbar is most popular in the United States with 75.19% of installations residing in this country.

iWin Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, iWin Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About iWin Toolbar?

The iWin Toolbar is a web browser extension developed by Conduit, capable of running on Internet Explorer, Chrome, and Firefox. This toolbar is designed to collect and store information about a user's web browsing habits, which is then transmitted to OurToolbar for the purpose of suggesting relevant services and displaying advertisements. During installation, the toolbar may attempt to modify the home page and search provider settings of the web browser, though these changes may be optional and checked by default. In addition to providing a search box, the toolbar offers various other standard features. It is also capable of transmitting event logs and other system-related data to a server, and may automatically download and install updates without notifying the user.

Multiple virus scanners have detected malware in iWin Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
tbiWin.dll (MD5: 1a8438854dd15e4389f5bdef502c369d) has been flagged by 7 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.Y
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.299
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B potentially unwanted
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
prxtbiWin.dll (MD5: d0133250565180c9dc8ee0aecccbfd53) has been flagged by 14 scanners:
Scanner Software Result
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.Agent.azm
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.M
Cyren W32/Conduit.TTAU-0102
ESET-NOD32 Win32/Toolbar.Conduit.N potentially unwanted
F-Prot W32/Conduit.A
G Data Win32.Application.Conduit.F
K7 AntiVirus Trojan ( 004b219d1 )
K7GW Trojan ( 004b219d1 )
Kaspersky not-a-virus:WebToolbar.Win32.Agent.azm
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.299
ldrtbiWin.dll (MD5: 76b3946090c94bb38dbbca54ac8ff9f7) has been flagged by 3 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.P
VIPRE Antivirus Conduit (fs)
Panda Antivirus PUP/Conduit.A
iWinToolbarHelper.exe (MD5: da11d78d765e4b8fa4cfa5a37e8a94ff) has been flagged by 15 scanners:
Scanner Software Result
Baidu-International Adware.Win32.Conduit.45
ESET-NOD32 Win32/Toolbar.Conduit.Q
G Data Win32.Adware.Conduit
IKARUS anti.virus PUA.ClientConnect
Panda Antivirus PUP/Conduit.A
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.Agent.azm
AVware Conduit (fs)
Cyren W32/Conduit.TTAU-0102
F-Prot W32/Conduit.A
K7 AntiVirus Trojan ( 004b219d1 )
K7GW Trojan ( 004b219d1 )
Kaspersky not-a-virus:WebToolbar.Win32.Agent.azm
VIPRE Antivirus Conduit (fs)
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.299

Software Behaviors

Firewall:
  • iWinToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • iWinToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).

Software Details

URL:
https://iwin.ourtoolbar.com
Support:
https://iwin.ourtoolbar.com/help
Installation path:
C:\Program Files\iwin
Uninstaller:
C:\Program Files\iWin\uninstall.exe
Size:
4.00 MB
Language:
English

iWin Toolbar Executable Details

Primary executable:
iWinToolbarHelper.exe
Name:
iWin Toolbar
Path:
C:\Program Files\iwin\iWinToolbarHelper.exe
MD5:
da11d78d765e4b8fa4cfa5a37e8a94ff
SHA-1:
SHA-256:
Files installed by iWin Toolbar
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
EXE
5cf949316c40314d66b45f0bf00aa6f6
DLL
tbiWin.dll
Malware
1a8438854dd15e4389f5bdef502c369d
DLL
d0133250565180c9dc8ee0aecccbfd53
DLL
76b3946090c94bb38dbbca54ac8ff9f7
EXE
da11d78d765e4b8fa4cfa5a37e8a94ff
DLL
d87ad7c27a92c37444c41f798412a6bd
DLL
8a5ce15fd3a142eac3ee12aacafeabec
DLL
36c8891fe54774cbbe627d12d4196868
DLL
65aecec6a11a6f718c9965af7fb87400