WhiteSmoke US Toolbar

WhiteSmoke US Toolbar

Known Toolbar

by WhiteSmoke

What is WhiteSmoke US Toolbar?

WhiteSmoke US Toolbar is software application developed by WhiteSmoke. It is most commonly found on computers running Windows 7 with nearly 84.71% of installations running this operating system. WhiteSmoke US Toolbar's installer is typically 4.00 MB in size and installs around 16 files. The most common release is 6.8.10.0 with 47.77% of all installations currently using this version.

WhiteSmoke US Toolbar is most popular in the United States with 83.00% of installations residing in this country.

WhiteSmoke US Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, WhiteSmoke US Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About WhiteSmoke US Toolbar?

WhiteSmoke US Toolbar is a browser extension designed for Internet Explorer and Firefox. The toolbar provides various features, including a search box, and may suggest services or display relevant advertising based on your web browsing habits. It is important to note that during installation, users should exercise caution to prevent any unwanted changes to their home page and search provider settings. If these settings are altered, they will need to be manually reverted after uninstalling the toolbar. Additionally, the toolbar may automatically download and install updates without user notification. In compliance with the End User License Agreement (EULA), the application may locally collect and store information about your web browsing habits to enhance the personalized services and targeted advertising provided. The collected data is utilized to make generalized inferences to improve user experience. Note: The description has been updated to focus on the functionality and potential impact of the toolbar on user settings and browsing habits, avoiding specific references to third-party companies.

Multiple virus scanners have detected malware in WhiteSmoke US Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 3 scanners:
Scanner Software Result
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
ESET-NOD32 a variant of Win32/Toolbar.Conduit.P
tbWhi2.dll (MD5: 975993043e355206a1fba5a702044f0c) has been flagged by 8 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.~A
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Malwarebytes PUP.Optional.Conduit
Panda Antivirus Adware/Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
VIPRE Antivirus Conduit (fs)
Agnitum Outpost PUA.Toolbar.Conduit!
Dr.Web Adware.Conduit.16
prxtbWhi2.dll (MD5: 4b5780c90e38e579a651dbc4774a1f1f) has been flagged by 6 scanners:
Scanner Software Result
Agnitum Outpost PUA.Toolbar.Conduit!
Dr.Web Adware.Conduit.16
ESET-NOD32 Win32/Toolbar.Conduit.W
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Comodo Security Application.Win32.Conduit.r
tbWhi0.dll (MD5: 90a1b31ba3d3c1fd73b6021c1d8c1c8f) has been flagged by 4 scanners:
Scanner Software Result
Comodo Security Application.Win32.Conduit.r
ESET-NOD32 a variant of Win32/Toolbar.Conduit.B
Panda Antivirus Adware/Conduit
VIPRE Antivirus Conduit (fs)
prxtbWhi0.dll (MD5: c89d9c80fd468c6b51c4aadcc8463c2d) has been flagged by 12 scanners:
Scanner Software Result
AVware Conduit (fs)
Baidu-International PUA.Win32.Conduit.BX
ESET-NOD32 Win32/Toolbar.Conduit.X
Fortinet FortiGate Riskware/Toolbar_Conduit
G Data Win32.Application.Conduit.F
Panda Antivirus PUP/Conduit.A
VIPRE Antivirus Conduit (fs)
Comodo Security Application.Win32.Conduit.~A
Malwarebytes PUP.Optional.Conduit
TrendMicro-HouseCall TROJ_GEN.F47V1113
Agnitum Outpost PUA.Toolbar.Conduit!
Dr.Web Adware.Conduit.16

Software Behaviors

Firewall:
  • WhiteSmoke_USToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.
Scheduled tasks:
  • uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
  • WhiteSmoke_USToolbarHelper.exe is scheduled as a task with the class '{34C01E1F-1D33-4264-8F52-97E13432C5E2}' (runs on registration).

Software Details

URL:
https://whitesmokeustoolbar.ourtoolbar.com
Support:
https://whitesmokeustoolbar.ourtoolbar.com/help
Installation path:
C:\Program Files\whitesmoke_us
Uninstaller:
C:\Program Files\WhiteSmoke_US\uninstall.exe toolbar
Size:
4.00 MB
Language:
English

WhiteSmoke US Toolbar Executable Details

Primary executable:
WhiteSmoke_USToolbarHelper.exe
Name:
WhiteSmoke US Toolbar
Path:
C:\Program Files\whitesmoke_us\WhiteSmoke_USToolbarHelper.exe
MD5:
da11d78d765e4b8fa4cfa5a37e8a94ff
SHA-1:
SHA-256:
Files installed by WhiteSmoke US Toolbar
File Type Filename MD5
EXE
b728fa6a309e5d18141947b95b730e95
DLL
975993043e355206a1fba5a702044f0c
DLL
4b5780c90e38e579a651dbc4774a1f1f
DLL
d02a0fcc9755f67b07ed08bacb9dde82
DLL
737a8c01189ebceec360f7ab2c035225
DLL
391072928af4a618447e6660746f0ebf
DLL
d46078b3d29bf33be627b431c22f6399
DLL
30154e5d7cba4d89f0313e5c0c8893b4
DLL
367ef01c64a948849c024e653be5f18a
DLL
tbWhi0.dll
Malware
90a1b31ba3d3c1fd73b6021c1d8c1c8f