NCH DE Toolbar

NCH DE Toolbar

Known Toolbar

by NCH Software

What is NCH DE Toolbar?

NCH DE Toolbar is software application developed by NCH Software. It is most commonly found on computers running Windows 7 with nearly 83.21% of installations running this operating system. NCH DE Toolbar's installer is typically 4.00 MB in size and installs around 20 files. The most common release is 6.8.5.1 with 27.74% of all installations currently using this version.

NCH DE Toolbar is most popular in Germany with 77.46% of installations residing in this country.

NCH DE Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, NCH DE Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About NCH DE Toolbar?

The NCH DE Toolbar is an internet browser extension designed for Internet Explorer and Firefox. It has the capability to gather and retain data concerning your online browsing behavior and transmit this data to Conduit for the purpose of offering personalized services and advertising through the toolbar. During the installation process, it may make attempts to alter your homepage and search provider, and it comes equipped with a search box and other standard features. If the toolbar modifies your homepage and search settings, it is the user's responsibility to manually restore them if the decision is made to uninstall the toolbar. Additionally, the toolbar has the ability to install updates without providing prior notification to the user. As stated in the End User License Agreement (EULA), the application has the ability to collect and retain information about your web browsing activities locally on your device, and this information may be utilized to provide personalized services and ads. However, only generalized inferences are communicated from the application to Conduit's servers.

Multiple virus scanners have detected malware in NCH DE Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
tbNCH_.dll (MD5: cef32b574f8c732bacafd93210642dbb) has been flagged by 16 scanners:
Scanner Software Result
Bkav FE HW32.Stranact
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.Agent.azm
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.M
Cyren W32/Conduit.TTAU-0102
F-Prot W32/Conduit.A
G Data Win32.Application.Conduit.F
K7 AntiVirus Trojan ( 004b219d1 )
K7GW Trojan ( 004b219d1 )
Kaspersky not-a-virus:WebToolbar.Win32.Agent.azm
Fortinet FortiGate Riskware/Toolbar_Conduit
Dr.Web Adware.Conduit.300
IKARUS anti.virus PUA.ClientConnect
prxtbNCH0.dll (MD5: c89d9c80fd468c6b51c4aadcc8463c2d) has been flagged by 10 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
ESET-NOD32 Win32/Toolbar.Conduit.X
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
IKARUS anti.virus PUA.ClientConnect
prxtbNCH_.dll (MD5: d0133250565180c9dc8ee0aecccbfd53) has been flagged by 16 scanners:
Scanner Software Result
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.Agent.azm
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.M
Cyren W32/Conduit.TTAU-0102
ESET-NOD32 Win32/Toolbar.Conduit.N potentially unwanted
F-Prot W32/Conduit.A
G Data Win32.Application.Conduit.F
K7 AntiVirus Trojan ( 004b219d1 )
K7GW Trojan ( 004b219d1 )
Kaspersky not-a-virus:WebToolbar.Win32.Agent.azm
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Fortinet FortiGate Riskware/Toolbar_Conduit
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
IKARUS anti.virus PUA.ClientConnect
ldrtbNCH_.dll (MD5: 76b3946090c94bb38dbbca54ac8ff9f7) has been flagged by 3 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.P
VIPRE Antivirus Conduit (fs)
Panda Antivirus PUP/Conduit.A

Software Behaviors

Firewall:
  • NCH_DEToolbarHelper1.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • NCH_DEToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).

Software Details

URL:
https://nchde.ourtoolbar.com
Support:
https://nchde.ourtoolbar.com/help
Installation path:
C:\Program Files\nch_de
Uninstaller:
C:\Program Files\NCH_DE\uninstall.exe toolbar
Size:
4.00 MB
Language:
English

NCH DE Toolbar Executable Details

Primary executable:
tbNCH_.dll
Name:
NCH DE Toolbar
Path:
C:\Program Files\nch_de\tbNCH_.dll
MD5:
cef32b574f8c732bacafd93210642dbb
SHA-1:
SHA-256:
Files installed by NCH DE Toolbar
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
EXE
5cf949316c40314d66b45f0bf00aa6f6
DLL
70303c6eeba0842a1e59000e93e58b62
DLL
cbe1be97fdc777d510da7f704e366b94
DLL
tbNCH_.dll
Malware
cef32b574f8c732bacafd93210642dbb
DLL
904e144256a5d456d10914868acb0d8b
DLL
c89d9c80fd468c6b51c4aadcc8463c2d
DLL
d0133250565180c9dc8ee0aecccbfd53
DLL
baf6ff5b1ed79ed52ca2cffd53506b63
DLL
e66d899a5da9550f46e7edaffb20b9b4