How to remove ChromeApproveTBPlugin.dll.vir
- File Details
- Overview
- Analysis
ChromeApproveTBPlugin.dll.vir
The module ChromeApproveTBPlugin.dll.vir has been detected as Adware.Conduit
File Details
| Product Name: |
|
| Company Name: |
|
| MD5: |
69d91fa2fffd59ea15899a6fb8f372b9 |
| Size: |
113 KB |
| First Published: |
2017-07-24 17:05:00 (7 years ago) |
| Latest Published: |
2018-09-14 06:08:38 (6 years ago) |
| Status: |
Adware.Conduit (on last analysis) |
|
| Analysis Date: |
2018-09-14 06:08:38 (6 years ago) |
Overview
| %chromeprofile%\extensions\dknkjnkhedbanphkkpbpcgoblmkbfhlf\10.14.370.24_0\plugins |
| %desktop%\new folder\windows\users\user\appdata\local\chromium\user data\default\extensions\cjigkifooejljidiapmgeaoeglmgonll\10.14.370.24_0 |
| %sysdrive%\cafrica\j\bobo\backup set 2013-03-10 190001\backup files 2013-03-17 190001\backup files 2.zip\c\users\äöä\appdata\local\google\chrome\user data\default\extensions\kgbcbdejncdpahgapnmkjimfmlipdgdl\10.14.370.524_0 |
| %sysdrive%\cafrica\j\bobo\backup set 2013-03-10 190001\backup files 2013-03-17 190001\backup files 2.zip\c\users\äöä\appdata\local\google\chrome\user data\default\extensions\pielejjfbdmjdfiimgiljjpmlpalgoeg\10.14.370.524_0 |
| %sysdrive%\cafrica\j\bobo\backup set 2013-03-10 190001\backup files 2013-03-17 190001\backup files 2.zip\c\users\äöä\appdata\local\google\chrome\user data\default\extensions\jfjhiccppafcjicfalobggnophliocpp\10.14.370.524_0 |
| %sysdrive%\adwcleaner\quarantine\c\users\joanne nys\appdata\local\google\chrome\user data\default\extensions\mahgaopgbalgbfohkikbdjfmaapiehaf\10.14.370.100_0 |
| %sysdrive%\adwcleaner\quarantine\c\users\joanne nys\appdata\local\google\chrome\user data\default\extensions\pmcmflmkceipgecmhoddphflfndnfbbe\10.14.370.24_0 |
| ChromeApproveTBPlugin.dll |
| ChromeApproveTBPlugin.dll.vir |
| Israel |
60.0% |
|
| United Kingdom |
20.0% |
|
| Canada |
20.0% |
|
| Windows 10 |
90.0% |
|
| Windows 7 |
10.0% |
|
Analysis
| Subsystem: |
Windows GUI |
| PE Type: |
pe |
| OS Bitness: |
32 |
| Image Base: |
0x10000000 |
| Entry Address: |
0x00006e78 |
| Name |
Size of data |
MD5 |
| .text |
72704 |
6d199d249fe504b3c53b7e31034b1ca3 |
| .rdata |
21504 |
afe561dfedbcdaf1150581c84ba63761 |
| .data |
5632 |
1f382a57a2d6a9904cf5d023160a1629 |
| .rsrc |
1536 |
c1e627d4b24a318a1f7563339551cff4 |
| .reloc |
8192 |
75038f024758d8e1a0768e00c1ef3e22 |
