How to remove TBMessagingHost.exe.vir

TBMessagingHost.exe.vir

The module TBMessagingHost.exe.vir has been detected as Adware.Gen

TBMessagingHost.exe.vir
Remove TBMessagingHost.exe.

File Details

Product Name:

TBMessagingHost
Company Name:

Conduit Ltd.
MD5: 953490b2f5b775f3880b5d45067e6672
Size: 976 KB
First Published: 2017-06-22 17:02:17 (7 years ago)
Latest Published: 2020-03-06 06:25:33 (4 years ago)
Status: Adware.Gen (on last analysis)
Analysis Date: 2020-03-06 06:25:33 (4 years ago)

Overview

Signed By: Conduit Ltd.
Status: Valid

Common Places:

%localappdata%\nativemessaging\ct3225826\1_0_0_7
%localappdata%\nativemessaging\ct3202343\1_0_0_7
%localappdata%\nativemessaging\ct3205709
%chromeprofile%\extensions\gipmblamjgodbimgeafaiegdpfbaeihe\10.24.3.503_0
%chromeprofile%\extensions\pkmpcdbgnfjfeelcpebpkflcmbkclfho\10.24.3.503_0
%system%\config\systemprofile\appdata\local\google\chrome\user data\default\extensions\dkjaldeegndmngnahlmdbfnejdobkmil\10.24.3.503_0
%system%\config\systemprofile\appdata\local\google\chrome\user data\default\extensions\pbofibgamhkgoonaocfgemncghhadmgb\10.24.3.503_0
%profile%\documents and settings\1.rodjendan\local settings\application data\google\chrome\user data\default\extensions\giolhomkcooifelkdfpejhidfidaahlc\10.24.3.503_0
%localappdata%\nativemessaging\ct3289075
%sysdrive%\cafrica\j\bobo\backup set 2013-12-29 190003\backup files 2014-01-05 190007\backup files 7.zip\c\users\äöä\appdata\local\google\chrome\user data\default\extensions\kgbcbdejncdpahgapnmkjimfmlipdgdl\10.24.3.503_0

File Names:

TBMessagingHost.exe
TBMessagingHost.exe.vir

Geography:

54.8%
16.1%
12.9%
3.2%
3.2%
3.2%
3.2%
3.2%

OS Version:

Windows 10 54.8%
Windows 7 41.9%
Windows XP 3.2%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000430a8

PE Sections:

Name Size of data MD5
.text 694272 98efb8bfc3e6b80eb7e20a9b8611b752
.rdata 151552 99b262d4424b1019449604af494aa066
.data 46592 b9916ba064fb3f7808ced9bae0716bbe
.rsrc 1536 e5d67be2fa04bb488467f1c7d59cfcba
.reloc 98816 abfc8d615f35ea999a86e9e98f39db95

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for TBMessagingHost.exe.vir
copyright for information about TBMessagingHost.exe.vir