How to remove ChromeApproveTBPlugin.dll.vir

ChromeApproveTBPlugin.dll.vir

The module ChromeApproveTBPlugin.dll.vir has been detected as Adware.Conduit

ChromeApproveTBPlugin.dll.vir
Remove ChromeApproveTBPlugi

File Details

Product Name:

Conduit Chrome Approve TB Plugin
Company Name:

Conduit
MD5: e0afaf62f5c1b5ca9b61d2f2c4b7b2e0
Size: 114 KB
First Published: 2017-10-19 14:04:44 (6 years ago)
Latest Published: 2019-03-28 13:44:41 (5 years ago)
Status: Adware.Conduit (on last analysis)
Analysis Date: 2019-03-28 13:44:41 (5 years ago)

Overview

Signed By: Conduit Ltd.
Status: Valid

Common Places:

%chromeprofile%\extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.20.101.5_0\plugins
%localappdata%\torch\user data\default\extensions\aanjjkgbodmfkdnkkhcjcghgnibdllak\10.20.101.5_0\plugins
%system%\config\systemprofile\appdata\local\google\chrome\user data\default\extensions\bejbohlohkkgompgecdcbbglkpjfjgdj\10.20.101.5_0
%sysdrive%\sylviane-pc\backup set 2014-01-26 130011\backup files 2014-04-20 130011\backup files 1.zip\c\users\sylviane\appdata\local\google\chrome\user data\default\extensions\ebfmlbdgbekinmmpfmpjjkfclcgedhgj\10.20.101.5_0
%localappdata%\google\chrome sxs\user data\default\extensions\nlgmkneodlhgobiipoilolfbeaelbhpc\10.20.101.5_0
%sysdrive%\d2\הודיה\local settings\application data\google\chrome\user data\default\extensions\jfjhiccppafcjicfalobggnophliocpp\10.20.101.5_0
%sysdrive%\casper-casper\backup set 2013-04-23 153435\backup files 2013-11-24 190001\backup files 1.zip\c\users\casper\appdata\local\google\chrome\user data\default\extensions\ldphimnicfkkabnlicekmikglnnbenfc\10.20.101.5_0
%system%\config\systemprofile\appdata\local\google\chrome\user data\default\extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.20.101.5_0
%system%\config\systemprofile\appdata\local\google\chrome\user data\default\extensions\elhjaoldnkkbifioodjndkijecdeinld\10.20.101.5_0
%localappdata%\torch\user data\default\extensions\aanjjkgbodmfkdnkkhcjcghgnibdllak\10.20.101.5_0

File Names:

ChromeApproveTBPlugin.dll
ChromeApproveTBPlugin.dll.vir

Geography:

41.2%
11.8%
11.8%
5.9%
5.9%
5.9%
5.9%
5.9%
5.9%

OS Version:

Windows 10 52.9%
Windows 7 41.2%
Windows Vista 5.9%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x00006e78

PE Sections:

Name Size of data MD5
.text 72704 3ce61d871e6832792115c5230a1b72b0
.rdata 21504 13eb3162dff8216e33f0411748d9ebb9
.data 5632 1f382a57a2d6a9904cf5d023160a1629
.rsrc 1536 26aa818af9e26331cbc0b20af253ee1c
.reloc 8192 ad04769f739ba5cb4f75e3612eabe47b

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for ChromeApproveTBPlugin.dll.vir
copyright for information about ChromeApproveTBPlugin.dll.vir