How to remove npConduitNewTabPlugin.dll.vir

npConduitNewTabPlugin.dll.vir

The module npConduitNewTabPlugin.dll.vir has been detected as Adware.Conduit

npConduitNewTabPlugin.dll.vir
Remove npConduitNewTabPlugi

File Details

Product Name:

Conduit Chrome Plugin
Company Name:

Conduit Ltd.
MD5: 606681a1900e7b7930d759eadee15de1
Size: 60 KB
First Published: 2017-10-19 14:04:43 (6 years ago)
Latest Published: 2019-03-28 13:44:53 (5 years ago)
Status: Adware.Conduit (on last analysis)
Analysis Date: 2019-03-28 13:44:53 (5 years ago)

Overview

Signed By: Conduit Ltd.
Status: Valid

Common Places:

%chromeprofile%\extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.20.101.5_0\search\plugins
%localappdata%\torch\user data\default\extensions\aanjjkgbodmfkdnkkhcjcghgnibdllak\10.20.101.5_0\search\plugins
%system%\config\systemprofile\appdata\local\google\chrome\user data\default\extensions\bejbohlohkkgompgecdcbbglkpjfjgdj\10.20.101.5_0\search
%localappdata%\google\chrome sxs\user data\default\extensions\nlgmkneodlhgobiipoilolfbeaelbhpc\10.20.101.5_0\search
%system%\config\systemprofile\appdata\local\google\chrome\user data\default\extensions\pacgpkgadgmibnhpdidcnfafllnmeomc\10.20.101.5_0\search
%system%\config\systemprofile\appdata\local\google\chrome\user data\default\extensions\elhjaoldnkkbifioodjndkijecdeinld\10.20.101.5_0\search
%localappdata%\torch\user data\default\extensions\aanjjkgbodmfkdnkkhcjcghgnibdllak\10.20.101.5_0\search
%sysdrive%\adwcleaner\quarantine\c\users\owner\appdata\local\torch\user data\default\extensions\jokmfbcmohghocigimginpgjnghgepci\10.20.101.5_0\search
%sysdrive%\pasta g\windows\system32\config\systemprofile\appdata\local\google\chrome\user data\default\extensions\mdebcffgnijbblbinknkbefciofebcda\10.20.101.5_0\search
%localappdata%\torch\user data\default\extensions\aanjjkgbodmfkdnkkhcjcghgnibdllak\10.20.101.5_0\search

File Names:

npConduitNewTabPlugin.dll
npConduitNewTabPlugin.dll.vir

Geography:

50.0%
7.1%
7.1%
7.1%
7.1%
7.1%
7.1%
7.1%

OS Version:

Windows 10 64.3%
Windows 7 28.6%
Windows Vista 7.1%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x10000000
Entry Address: 0x0000243d

PE Sections:

Name Size of data MD5
.text 31232 592e45bc2ef95c1f12a4b03dfd12a5cb
.rdata 13312 5d4e5d8336fb44f826eeb89048b775d7
.data 3584 78a0419e02e625f26a878b6ae868004e
.rsrc 1536 68b3f2cfeba269582267ea3186a977e2
.reloc 5120 24e33a605085b474277d1af1f9ed7938

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for npConduitNewTabPlugin.dll.vir
copyright for information about npConduitNewTabPlugin.dll.vir