What is WhiteSmoke US Toolbar?

WhiteSmoke US Toolbar is software application developed by WhiteSmoke. It is most commonly found on computers running Windows 7 with nearly 84.71% of installations running this operating system. WhiteSmoke US Toolbar's installer is typically 4.00 MB in size and installs around 16 files. The most common release is 6.8.10.0 with 47.77% of all installations currently using this version.

WhiteSmoke US Toolbar is most popular in the United States with 83.00% of installations residing in this country.

WhiteSmoke US Toolbar adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, WhiteSmoke US Toolbar is known to create 1 firewall exception to allow inbound and outbound connectivity.

About WhiteSmoke US Toolbar?

WhiteSmoke US Toolbar is a browser extension designed for Internet Explorer and Firefox. The toolbar provides various features, including a search box, and may suggest services or display relevant advertising based on your web browsing habits. It is important to note that during installation, users should exercise caution to prevent any unwanted changes to their home page and search provider settings. If these settings are altered, they will need to be manually reverted after uninstalling the toolbar. Additionally, the toolbar may automatically download and install updates without user notification. In compliance with the End User License Agreement (EULA), the application may locally collect and store information about your web browsing habits to enhance the personalized services and targeted advertising provided. The collected data is utilized to make generalized inferences to improve user experience. Note: The description has been updated to focus on the functionality and potential impact of the toolbar on user settings and browsing habits, avoiding specific references to third-party companies.

Multiple virus scanners have detected malware in WhiteSmoke US Toolbar.

uninstall.exe (MD5: b728fa6a309e5d18141947b95b730e95) has been flagged by 3 scanners:

Scanner Software	Version	Result
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	26380	Conduit (fs)
ESET-NOD32	9148	a variant of Win32/Toolbar.Conduit.P

tbWhi2.dll (MD5: 975993043e355206a1fba5a702044f0c) has been flagged by 8 scanners:

Scanner Software	Version	Result
Comodo Security	17676	Application.Win32.Conduit.~A
ESET-NOD32	9338	a variant of Win32/Toolbar.Conduit.B
Malwarebytes	1.75.0.1	PUP.Optional.Conduit
Panda Antivirus	10.0.3.5	Adware/Conduit
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F47V1113
VIPRE Antivirus	25818	Conduit (fs)
Agnitum Outpost	5.5.1.3	PUA.Toolbar.Conduit!
Dr.Web	7.00.8.02260	Adware.Conduit.16

prxtbWhi2.dll (MD5: 4b5780c90e38e579a651dbc4774a1f1f) has been flagged by 6 scanners:

Scanner Software	Version	Result
Agnitum Outpost	5.5.1.3	PUA.Toolbar.Conduit!
Dr.Web	7.00.8.02260	Adware.Conduit.16
ESET-NOD32	9639	Win32/Toolbar.Conduit.W
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	28068	Conduit (fs)
Comodo Security	17602	Application.Win32.Conduit.r

tbWhi0.dll (MD5: 90a1b31ba3d3c1fd73b6021c1d8c1c8f) has been flagged by 4 scanners:

Scanner Software	Version	Result
Comodo Security	17602	Application.Win32.Conduit.r
ESET-NOD32	9281	a variant of Win32/Toolbar.Conduit.B
Panda Antivirus	10.0.3.5	Adware/Conduit
VIPRE Antivirus	25382	Conduit (fs)

prxtbWhi0.dll (MD5: c89d9c80fd468c6b51c4aadcc8463c2d) has been flagged by 12 scanners:

Scanner Software	Version	Result
AVware	1.5.0.21	Conduit (fs)
Baidu-International	3.5.1.41473	PUA.Win32.Conduit.BX
ESET-NOD32	10643	Win32/Toolbar.Conduit.X
Fortinet FortiGate	5.0.999.0	Riskware/Toolbar_Conduit
G Data	24	Win32.Application.Conduit.F
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	34366	Conduit (fs)
Comodo Security	17676	Application.Win32.Conduit.~A
Malwarebytes	1.75.0.1	PUP.Optional.Conduit
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F47V1113
Agnitum Outpost	5.5.1.3	PUA.Toolbar.Conduit!
Dr.Web	7.00.8.02260	Adware.Conduit.16

Software Behaviors

Firewall:

WhiteSmoke_USToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.

Scheduled tasks:

uninstall.exe is scheduled as a task with the class '{42CD7A24-AF4B-44A0-A119-1C6F9B6E2A90}' (runs on registration).
WhiteSmoke_USToolbarHelper.exe is scheduled as a task with the class '{34C01E1F-1D33-4264-8F52-97E13432C5E2}' (runs on registration).

Software Details

URL:

https://whitesmokeustoolbar.ourtoolbar.com

Support:

https://whitesmokeustoolbar.ourtoolbar.com/help

Installation path:

C:\Program Files\whitesmoke_us

Uninstaller:

C:\Program Files\WhiteSmoke_US\uninstall.exe toolbar

Size:

4.00 MB

Language:

English

WhiteSmoke US Toolbar Executable Details

Primary executable:

WhiteSmoke_USToolbarHelper.exe

Name:

WhiteSmoke US Toolbar

Path:

C:\Program Files\whitesmoke_us\WhiteSmoke_USToolbarHelper.exe

MD5:

da11d78d765e4b8fa4cfa5a37e8a94ff

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

prxtbWhi0.dll

Adware

c89d9c80fd468c6b51c4aadcc8463c2d

DLL

ldrtbWhi0.dll

Malware

ce49528c9b0b3b3018ee2f70e76b362a

DLL

hktbWhi0.dll

65394bd2969dd5002fef2eaa6096fd99

DLL

hk64tbWhi0.dll

0cdcb4b27180b1e7106ca7807b944454

EXE