NCH DE Toolbar

NCH DE Toolbar

Known Toolbar

by NCH Software

What is NCH DE Toolbar?

NCH DE Toolbar is software application developed by NCH Software. It is most commonly found on computers running Windows 7 with nearly 83.21% of installations running this operating system. NCH DE Toolbar's installer is typically 4.00 MB in size and installs around 20 files. The most common release is 6.8.5.1 with 27.74% of all installations currently using this version.

NCH DE Toolbar is most popular in Germany with 77.46% of installations residing in this country.

NCH DE Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, NCH DE Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About NCH DE Toolbar?

The NCH DE Toolbar is an internet browser extension designed for Internet Explorer and Firefox. It has the capability to gather and retain data concerning your online browsing behavior and transmit this data to Conduit for the purpose of offering personalized services and advertising through the toolbar. During the installation process, it may make attempts to alter your homepage and search provider, and it comes equipped with a search box and other standard features. If the toolbar modifies your homepage and search settings, it is the user's responsibility to manually restore them if the decision is made to uninstall the toolbar. Additionally, the toolbar has the ability to install updates without providing prior notification to the user. As stated in the End User License Agreement (EULA), the application has the ability to collect and retain information about your web browsing activities locally on your device, and this information may be utilized to provide personalized services and ads. However, only generalized inferences are communicated from the application to Conduit's servers.

Multiple virus scanners have detected malware in NCH DE Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
tbNCH_.dll (MD5: cef32b574f8c732bacafd93210642dbb) has been flagged by 16 scanners:
Scanner Software Result
Bkav FE HW32.Stranact
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.Agent.azm
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.M
Cyren W32/Conduit.TTAU-0102
F-Prot W32/Conduit.A
G Data Win32.Application.Conduit.F
K7 AntiVirus Trojan ( 004b219d1 )
K7GW Trojan ( 004b219d1 )
Kaspersky not-a-virus:WebToolbar.Win32.Agent.azm
Fortinet FortiGate Riskware/Toolbar_Conduit
Dr.Web Adware.Conduit.300
IKARUS anti.virus PUA.ClientConnect
prxtbNCH0.dll (MD5: c89d9c80fd468c6b51c4aadcc8463c2d) has been flagged by 10 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
ESET-NOD32 Win32/Toolbar.Conduit.X
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
IKARUS anti.virus PUA.ClientConnect
prxtbNCH_.dll (MD5: d0133250565180c9dc8ee0aecccbfd53) has been flagged by 16 scanners:
Scanner Software Result
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.Agent.azm
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.M
Cyren W32/Conduit.TTAU-0102
ESET-NOD32 Win32/Toolbar.Conduit.N potentially unwanted
F-Prot W32/Conduit.A
G Data Win32.Application.Conduit.F
K7 AntiVirus Trojan ( 004b219d1 )
K7GW Trojan ( 004b219d1 )
Kaspersky not-a-virus:WebToolbar.Win32.Agent.azm
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Fortinet FortiGate Riskware/Toolbar_Conduit
Bkav FE W32.HfsAdware.C534
Dr.Web Adware.Conduit.300
IKARUS anti.virus PUA.ClientConnect
ldrtbNCH_.dll (MD5: 76b3946090c94bb38dbbca54ac8ff9f7) has been flagged by 3 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.P
VIPRE Antivirus Conduit (fs)
Panda Antivirus PUP/Conduit.A

Software Behaviors

Firewall:
  • NCH_DEToolbarHelper1.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • NCH_DEToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).

Software Details

URL:
https://nchde.ourtoolbar.com
Support:
https://nchde.ourtoolbar.com/help
Installation path:
C:\Program Files\nch_de
Uninstaller:
C:\Program Files\NCH_DE\uninstall.exe toolbar
Size:
4.00 MB
Language:
English

NCH DE Toolbar Executable Details

Primary executable:
tbNCH_.dll
Name:
NCH DE Toolbar
Path:
C:\Program Files\nch_de\tbNCH_.dll
MD5:
cef32b574f8c732bacafd93210642dbb
SHA-1:
SHA-256:
Files installed by NCH DE Toolbar
File Type Filename MD5
DLL
76b3946090c94bb38dbbca54ac8ff9f7
DLL
5be2f20b4fd444542e3652d26c28b8bb
DLL
a904f104993d059df4438aaf66f65cbc
DLL
79bc777b877824832146404753e05572
DLL
2d0a6567b7dd2a2b8db0056ecd564b69
DLL
5e6f6c1d35ade76cb898becc9c5d9e44
DLL
db10401ed351b75b7021ce6e03374e59
DLL
72e4f0fbb9f786f492d50a6aa98955db
EXE
a320df2b47cfcaf98d06eb59cd72084c
EXE
3f3fd84ae08dbe06a687e2a23783cd1e