WiseConvert

WiseConvert

Known Malware

by Opportunities Unified LLC

What is WiseConvert?

WiseConvert is software application developed by Opportunities Unified LLC. It is most commonly found on computers running Windows 7 with nearly 60.78% of installations running this operating system. WiseConvert's installer is typically 4.00 MB in size and installs around 27 files. The most common release is 6.8.8.8 with 32.26% of all installations currently using this version.

WiseConvert is most popular in the United States with 64.61% of installations residing in this country.

WiseConvert adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, WiseConvert is known to create 1 firewall exception to allow inbound and outbound connectivity.

About WiseConvert?

The WiseConvert software bundle includes the OurToolbar Community toolbar, a Conduit toolbar available for Internet Explorer and Firefox. The toolbar is designed to gather and retain data on users' browsing activities and transmit it to Conduit for the purpose of offering services and delivering advertising via the toolbar. During installation, the Wisdom-soft Toolbar may attempt to modify the home page and search provider settings if not carefully monitored. It provides a search box and other standard toolbar features. Typically, the toolbar is offered as an optional bundle during the installation of the free WiseConvert software, and it may not be automatically uninstalled when WiseConvert is removed. Users should manually uninstall it if desired. If the toolbar has modified the home page and search settings, users will need to manually restore them.

Multiple virus scanners have detected malware in WiseConvert.

tbWise.dll (MD5: 73406fa9287b36ca4163797c73a2cd04) has been flagged by 2 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
VIPRE Antivirus Conduit (fs)
tbWis2.dll (MD5: 975993043e355206a1fba5a702044f0c) has been flagged by 9 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.~A
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Malwarebytes PUP.Optional.Conduit
Panda Antivirus Adware/Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
VIPRE Antivirus Conduit (fs)
Baidu-International Adware.Win32.Conduit.45
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
tbWis0.dll (MD5: 90a1b31ba3d3c1fd73b6021c1d8c1c8f) has been flagged by 4 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.r
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
prxtbWise.dll (MD5: 4c163bd2a5905d18893ee311608e8c54) has been flagged by 7 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International Adware.Win32.Conduit.45
ESET-NOD32 Win32/Toolbar.Conduit.O
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
G Data Win32.Adware.Conduit.B
IKARUS anti.virus PUA.ClientConnect
prxtbWis0.dll (MD5: 9117027aea464e41c60b87b9826e8447) has been flagged by 10 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
ESET-NOD32 a variant of Win32/Toolbar.Conduit.X
G Data Win32.Application.Conduit.F
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
IKARUS anti.virus PUA.ClientConnect

Software Behaviors

Firewall:
  • WiseConvert_1.5ToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • WiseConvertToolbarHelper.exe is scheduled as a task with the class '{34C01E1F-1D33-4264-8F52-97E13432C5E2}' (runs on registration).

Software Details

URL:
https://wiseconvert.com
Support:
https://wiseconvert15.ourtoolbar.com/help
Installation path:
C:\Program Files\wiseconvert
Uninstaller:
"C:\Program Files\WiseConvert\uninstall.exe"
Size:
4.00 MB
Language:
English

WiseConvert Executable Details

Primary executable:
wise-convert.exe
Name:
WiseConvert
Path:
C:\Program Files\wiseconvert\wise-convert.exe
MD5:
SHA-1:
SHA-256:
Files installed by WiseConvert
File Type Filename MD5
EXE
e923607cdc9763ba470e4bf34358fc3a
DLL
tbWise.dll
Malware
73406fa9287b36ca4163797c73a2cd04
DLL
tbWis2.dll
Malware
975993043e355206a1fba5a702044f0c
DLL
tbWis0.dll
Malware
90a1b31ba3d3c1fd73b6021c1d8c1c8f
DLL
4c163bd2a5905d18893ee311608e8c54
DLL
02d550437bd96f4b2add86fd4073e60e
DLL
9117027aea464e41c60b87b9826e8447
DLL
ce49528c9b0b3b3018ee2f70e76b362a
DLL
d677d97bcd69134d2c97a0374a3985fc
DLL
36f82905e9d156245e3de52fca7ebeae