WhiteSmoke New Toolbar

WhiteSmoke New Toolbar

Known Toolbar

by WhiteSmoke

What is WhiteSmoke New Toolbar?

WhiteSmoke New Toolbar is software application developed by WhiteSmoke. It is most commonly found on computers running Windows 7 with nearly 64.40% of installations running this operating system. WhiteSmoke New Toolbar's installer is typically 7.00 MB in size and installs around 24 files. The most common release is 6.11.2.6 with 14.23% of all installations currently using this version.

WhiteSmoke New Toolbar is most popular in the United States with 83.88% of installations residing in this country.

WhiteSmoke New Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, WhiteSmoke New Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About WhiteSmoke New Toolbar?

The WhiteSmoke New Toolbar is a browser extension developed by Conduit, and it is compatible with major web browsers such as Google Chrome, Firefox, and Internet Explorer. This ad-supported toolbar is designed to display advertisements within the program, modify the browser's home page and search settings, and gather usage information and statistics from web search traffic. It is often bundled with third-party developer programs to support the monetization of free and paid software. During installation, users may have the option to modify the home and search pages, although these options are often pre-selected by default and are easily overlooked. If the software is removed from the user's PC, the settings will need to be manually restored. According to the End User License Agreement (EULA), the company has the ability to automatically download and install remote updates, as well as collect and store information about the user's web browsing activities locally on the PC. This information is used to interact with the toolbar application, providing targeted advertising and suggesting additional services. The EULA states, "By using a Conduit Software, you may enable Conduit to access, use, and collect a variety of information, both personal and non-personal, regarding your Internet Browser, your browsing habits, and information about your computer."

Multiple virus scanners have detected malware in WhiteSmoke New Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 2 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
WhiteSmoke_NewToolbarHelper.exe (MD5: da11d78d765e4b8fa4cfa5a37e8a94ff) has been flagged by 15 scanners:
Scanner Software Result
Baidu-International Adware.Win32.Conduit.45
ESET-NOD32 Win32/Toolbar.Conduit.Q
G Data Win32.Adware.Conduit
IKARUS anti.virus PUA.ClientConnect
Panda Antivirus PUP/Conduit.A
Dr.Web Adware.Conduit.16
Fortinet FortiGate Riskware/Toolbar_Conduit
McAfee Artemis!74F7298216EE
McAfee-GW-Edition Artemis!74F7298216EE
TrendMicro-HouseCall TROJ_GEN.F47V0201
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
Bkav FE HW32.Stranact.ckae
tbWhit.dll (MD5: cef32b574f8c732bacafd93210642dbb) has been flagged by 5 scanners:
Scanner Software Result
Bkav FE HW32.Stranact.ckae
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
TrendMicro-HouseCall TROJ_GEN.F47V1114
prxtbWhit.dll (MD5: 74f7298216eeaef6b9795b9a5b32c22f) has been flagged by 14 scanners:
Scanner Software Result
Dr.Web Adware.Conduit.16
ESET-NOD32 Win32/Toolbar.Conduit.W
Fortinet FortiGate Riskware/Toolbar_Conduit
McAfee Artemis!74F7298216EE
McAfee-GW-Edition Artemis!74F7298216EE
Panda Antivirus PUP/Conduit.A
TrendMicro-HouseCall TROJ_GEN.F47V0201
VIPRE Antivirus Conduit (fs)
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
G Data Win32.Application.Conduit.F
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
Bkav FE HW32.Stranact.ckae
ldrtbWhit.dll (MD5: 17f8ce1ec27fc5404153c734943afd77) has been flagged by 4 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.Conduit.P
TrendMicro-HouseCall TROJ_GEN.F47V1114
VIPRE Antivirus Conduit (fs)
Panda Antivirus PUP/Conduit.A

Software Behaviors

Firewall:
  • WhiteSmoke_NewToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • WhiteSmoke_NewToolbarHelper.exe is scheduled as a task with the class '{34C01E1F-1D33-4264-8F52-97E13432C5E2}' (runs on registration).

Software Details

URL:
https://whitesmokenew.ourtoolbar.com
Support:
https://whitesmokenew.ourtoolbar.com/help
Installation path:
C:\Program Files\whitesmoke_new
Uninstaller:
C:\Program Files\WhiteSmoke_New\uninstall.exe toolbar
Size:
7.00 MB
Language:
English

WhiteSmoke New Toolbar Executable Details

Primary executable:
WhiteSmoke_NewToolbarHelper.exe
Name:
WhiteSmoke New Toolbar
Path:
C:\Program Files\whitesmoke_new\WhiteSmoke_NewToolbarHelper.exe
MD5:
da11d78d765e4b8fa4cfa5a37e8a94ff
SHA-1:
SHA-256:
Files installed by WhiteSmoke New Toolbar
File Type Filename MD5
DLL
e41b2abe9c54c61076419a68a2cec8f7
DLL
c1659c631ce5ed6d6866c5d4938ad46a
DLL
tbWhi0.dll
Malware
975993043e355206a1fba5a702044f0c
DLL
c89d9c80fd468c6b51c4aadcc8463c2d
DLL
d677d97bcd69134d2c97a0374a3985fc
DLL
b721acafb3c4d6f19d94f4d622f1461e
DLL
ce896340a9f4257b2e313cfc18c32228
DLL
ba9f2ab0ecffb93c0a71281e7aae9407
DLL
52ff2964a9283fe087a91e7d579931f4
DLL
6575ba801291517b9133d79e93694d9d