What is WhiteSmoke US New Toolbar?

WhiteSmoke US New Toolbar is software application developed by WhiteSmoke. It is most commonly found on computers running Windows 7 with nearly 80.22% of installations running this operating system. WhiteSmoke US New Toolbar's installer is typically 4.00 MB in size and installs around 16 files. The most common release is 6.9.0.16 with 59.04% of all installations currently using this version.

WhiteSmoke US New Toolbar is most popular in the United States with 62.16% of installations residing in this country.

WhiteSmoke US New Toolbar adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About WhiteSmoke US New Toolbar?

The WhiteSmoke US New Toolbar is a browser extension that features a Conduit toolbar to enhance the user's web browsing experience. The toolbar collects information about the user's browsing habits and securely transmits this data to Conduit in order to offer personalized services and targeted advertisements within the toolbar interface.

Multiple virus scanners have detected malware in WhiteSmoke US New Toolbar.

tbWhi2.dll (MD5: 975993043e355206a1fba5a702044f0c) has been flagged by 9 scanners:

Scanner Software	Version	Result
Comodo Security	17676	Application.Win32.Conduit.~A
ESET-NOD32	9338	a variant of Win32/Toolbar.Conduit.B
Malwarebytes	1.75.0.1	PUP.Optional.Conduit
Panda Antivirus	10.0.3.5	Adware/Conduit
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F47V1113
VIPRE Antivirus	25818	Conduit (fs)
Agnitum Outpost	5.5.1.3	PUA.Toolbar.Conduit!
Dr.Web	7.00.9.04080	Adware.Conduit.16
Bkav FE	1.3.0.4246	HW32.Stranact.ckae

prxtbWhi2.dll (MD5: 02d550437bd96f4b2add86fd4073e60e) has been flagged by 6 scanners:

Scanner Software	Version	Result
Agnitum Outpost	5.5.1.3	PUA.Toolbar.Conduit!
Dr.Web	7.00.9.04080	Adware.Conduit.16
ESET-NOD32	9726	Win32/Toolbar.Conduit.X
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	28606	Conduit (fs)
Bkav FE	1.3.0.4246	HW32.Stranact.ckae

tbWhi0.dll (MD5: cef32b574f8c732bacafd93210642dbb) has been flagged by 4 scanners:

Scanner Software	Version	Result
Bkav FE	1.3.0.4246	HW32.Stranact.ckae
ESET-NOD32	9702	a variant of Win32/Toolbar.Conduit.B
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	28454	Conduit (fs)

prxtbWhi0.dll (MD5: c89d9c80fd468c6b51c4aadcc8463c2d) has been flagged by 13 scanners:

Scanner Software	Version	Result
AVware	1.5.0.21	Conduit (fs)
Baidu-International	3.5.1.41473	PUA.Win32.Conduit.BX
ESET-NOD32	10643	Win32/Toolbar.Conduit.X
Fortinet FortiGate	5.0.999.0	Riskware/Toolbar_Conduit
G Data	24	Win32.Application.Conduit.F
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	34366	Conduit (fs)
Comodo Security	17676	Application.Win32.Conduit.~A
Malwarebytes	1.75.0.1	PUP.Optional.Conduit
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F47V1113
Agnitum Outpost	5.5.1.3	PUA.Toolbar.Conduit!
Dr.Web	7.00.9.04080	Adware.Conduit.16
Bkav FE	1.3.0.4246	HW32.Stranact.ckae

WhiteSmoke_US_NewToolbarHelper.exe (MD5: da11d78d765e4b8fa4cfa5a37e8a94ff) has been flagged by 14 scanners:

Scanner Software	Version	Result
Baidu-International	4.0.3.14620	Adware.Win32.Conduit.45
ESET-NOD32	7.10301	Win32/Toolbar.Conduit.Q
G Data	14.8.24	Win32.Adware.Conduit
IKARUS anti.virus	t3scan.1.7.5.0	PUA.ClientConnect
Panda Antivirus	14.01.11.12	PUP/Conduit.A
AVware	1.5.0.21	Conduit (fs)
Fortinet FortiGate	5.0.999.0	Riskware/Toolbar_Conduit
VIPRE Antivirus	34366	Conduit (fs)
Comodo Security	17676	Application.Win32.Conduit.~A
Malwarebytes	1.75.0.1	PUP.Optional.Conduit
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F47V1113
Agnitum Outpost	5.5.1.3	PUA.Toolbar.Conduit!
Dr.Web	7.00.9.04080	Adware.Conduit.16
Bkav FE	1.3.0.4246	HW32.Stranact.ckae

Software Behaviors

Scheduled tasks:

WhiteSmoke_US_NewToolbarHelper.exe is scheduled as a task with the class '{34C01E1F-1D33-4264-8F52-97E13432C5E2}' (runs on registration).

Software Details

URL:

https://whitesmokeusnew.ourtoolbar.com

Support:

https://whitesmokeusnew.ourtoolbar.com/help

Installation path:

C:\Program Files\whitesmoke_us_new

Uninstaller:

C:\Program Files\WhiteSmoke_US_New\uninstall.exe toolbar

Size:

4.00 MB

Language:

English

WhiteSmoke US New Toolbar Executable Details

Primary executable:

WhiteSmoke_US_NewToolbarHelper.exe

Name:

WhiteSmoke US New Toolbar

Path:

C:\Program Files\whitesmoke_us_new\WhiteSmoke_US_NewToolbarHelper.exe

MD5:

da11d78d765e4b8fa4cfa5a37e8a94ff

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

prxtbWhi0.dll

Malware

c89d9c80fd468c6b51c4aadcc8463c2d

DLL

ldrtbWhi0.dll

d02a0fcc9755f67b07ed08bacb9dde82

DLL

hktbWhi0.dll

54fd5436d7c0e6fecca23bf35d682e3a

DLL

hk64tbWhi0.dll

83fb63e3a985ffe3a72de8d42a86b797

EXE