Should I remove ansarsunna Toolbar?

What percent of users and experts removed it?

77% remove it23% keep it

Overall Sentiment

Bad

What do people think about it?

(click star to rate)

How common is it?

Reach <0.001%

Versions

Version	Distribution
6.11.2.6	100.00%

Other programs by Conduit

ansarsunna Toolbar

from Conduit Ltd.

Remove ansarsunna Toolbar by Conduit

What is ansarsunna Toolbar?

ansarsunna Toolbar is an ad-supported (users may see additional banner and in-text link advertisements) cross web browser plugin for Internet Explorer (BHO) and Firefox/Chrome (plugin) and distributed through various monetization platforms during installation. The browser extension includes various features that will modify the default or custom settings of the browser including the home page, search settings and in some cases will modify Internet Explorer's load time threshold, place a lock file within Firefox to prevent competing software from changing its settings as well as disable the browser's Content Security Policy in order to allow for cross site scripting of the plugin.

What the toolbar does:
- Changes the default search engine in your web browser's built-in search box.
- Changes the default home page of your web browser.
- Adds alternative "page not found" functionality.
- Enable search from the address bar of your web browser.
- Allows software updates of the application once a new version is released.

About (from Conduit)

Each Application includes a new search box for your use and enjoyment. In addition, while installing the Application, you may voluntarily opt to change your home page, other search related preferences, add components, receive notifications, offers or enable other features provided to you by the Publisher or other third... Read more

Overview

Malware detected in the program
Integrates into the web browser
Built on and distributed using the Conduit toolbar
Installs a Windows Service
Injects advertisements unassociated with the underlying web page
Hijacks the web browser's home page
The experts agree, you should remove it!

Warning, multiple anti-virus scanners have detected possible malware in ansarsunna Toolbar.

tbansa.dll (54fd24da8d214c59ca495f08785ce15a) has been flagged by the following 4 scanners:
Anti-Virus software	Version	Detection
Bkav FE	1.3.0.4923	W32.HfsAutoA
ESET-NOD32	7.9320	a variant of Win32/Toolbar.Conduit.B
Panda Antivirus	14.01.26.11	Adware/Conduit
VIPRE Antivirus	25664	Conduit (fs)
prxtbans0.dll (9117027aea464e41c60b87b9826e8447) has been flagged by the following 6 scanners:
Anti-Virus software	Software version	Detection
AVware	1.5.0.21	Conduit (fs)
Baidu-International	3.5.1.41473	PUA.Win32.Conduit.BX
ESET-NOD32	10641	a variant of Win32/Toolbar.Conduit.X
G Data	24	Win32.Application.Conduit.F
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	31234	Conduit (fs)
ansarsunnaToolbarHelper.exe (a320df2b47cfcaf98d06eb59cd72084c) has been flagged by the following 5 scanners:
Anti-Virus software	Software version	Detection
Bkav FE	1.3.0.6379	W32.HfsAdware.C534
Dr.Web	7.0.12.3050	Adware.Conduit.300
G Data	25	Win32.Adware.Conduit.B
IKARUS anti.virus	T3.1.6.1.0	PUA.ClientConnect
Panda Antivirus	4.6.4.2	PUP/Conduit.A
ansarsunnaToolbarHelper1.exe (3167b101e3345524acebba29772a858e) has been flagged by the following 2 scanners:
Anti-Virus software	Software version	Detection
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	28252	Conduit (fs)
uninstall.exe (b728fa6a309e5d18141947b95b730e95) has been flagged by the following 2 scanners:
Anti-Virus software	Software version	Detection
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	26380	Conduit (fs)

View all 19 all detections

Program details

Displayed publisher: ansarsunna

URL: ansarsunna.ForumToolbar.com

Help link: ansarsunna.ForumToolbar.com/help

Installation folder: C:\Program Files\ansarsunna

Uninstaller: C:\Program Files\ansarsunna\uninstall.exe

Estimated size: 12.89 MB

This is a Community Toolbar by Conduit, what does that mean?

Conduit is a toolbar monetization platform for software publishers. It provides a utility for developers to create branded generic web browser toolbars. Publishers can bundle these toolbars with their software programs or provide access to download them separately through ansarsunna.ForumToolbar.com. Once installed, the toolbar modifies the browser's home page and search settings in order to redirect searches through the Conduit portal (which utilizes Bing or Yahoo! Search engines). Read more...

Files installed by ansarsunna Toolbar

Program module:	tbansa.dll (Malware detected)
Name:	Conduit Toolbar
Path:	C:\Program Files\ansarsunna\tbansa.dll
MD5:	54fd24da8d214c59ca495f08785ce15a

Additional files:

tbans1.dll - Conduit Toolbar Automatic Update
(Malware detected) ansarsunnaToolbarHelper1.exe - ToolbarHelper Application
(Malware detected) uninstall.exe - Conduit Toolbar Uninstall
hk64tbans0.dll - Conduit Toolbar
hktbans0.dll
ldrtbans0.dll
(Malware detected) prxtbans0.dll
tbans0.dll
(Malware detected) ansarsunnaToolbarHelper.exe
UNWISE.EXE

Behaviors exhibited

2 Internet Explorer BHOs

prxtbans0.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Produtools Forms Toolbar' with the class of {76a747b4-edc6-46ff-8a5d-9ae61a889d5b} (Produtools Forms).
tbansa.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'XfireXO Toolbar' with the class of {5e5ab302-7f65-44cd-8211-c1d4caaccea3}.

Internet Explorer Bar

prxtbans0.dll installs an Explorer Bar in Internet Explorer called 'uTorrentBar Findbar' with a class of {06157046-AF54-4CF0-9FD0-F577ECC557F8}.

2 Internet Explorer Toolbars

prxtbans0.dll is loaded as Internet Explorer Toolbar with the name 'Avanquest FR Toolbar' with the class of {6ec85fcf-87ad-41d7-ae1f-f116f8ad4848}.
tbansa.dll is loaded as Internet Explorer Toolbar with the name 'XfireXO Toolbar' with the class of {5e5ab302-7f65-44cd-8211-c1d4caaccea3}.

2 Internet Explorer URL Search Hooks

prxtbans0.dll loads into IE as a URL Search Hook named 'Avanquest FR Toolbar' with a class of {6ec85fcf-87ad-41d7-ae1f-f116f8ad4848} in order to redirect unknown URL searches.
tbansa.dll loads into IE as a URL Search Hook named 'XfireXO Toolbar' with a class of {5e5ab302-7f65-44cd-8211-c1d4caaccea3} in order to redirect unknown URL searches.

2 Internet Explorer Web Browsers

prxtbans0.dll installs an IE Web Browser in Internet Explorer named 'Avanquest FR Toolbar' with a class of {6EC85FCF-87AD-41D7-AE1F-F116F8AD4848}.
tbansa.dll installs an IE Web Browser in Internet Explorer named 'XfireXO Toolbar' with a class of {5E5AB302-7F65-44CD-8211-C1D4CAACCEA3}.

3 Scheduled Tasks

UNWISE.EXE is scheduled as a task with the class '{F71A9918-1861-4EFE-AE94-530BDDE46DD4}' (runs on registration).
uninstall.exe is scheduled as a task with the class '{C247631C-606C-44F8-9B4E-C25B77177427}' (runs on registration).
ansarsunnaToolbarHelper.exe is scheduled as a task with the class '{B8E8E278-F25D-478A-BAB2-24A5EDB01F6C}' (runs on registration).

Service

UNWISE.EXE runs as a service named 'Browser System Enahncer' (671c50b0).

Windows Firewall Allowed Program

UNWISE.EXE is added as a firewall exception for 'C:\Program Files1\Yahoo!\MESSEN~1\UNWISE.EXE'.

How do I remove ansarsunna Toolbar?

You can uninstall ansarsunna Toolbar from your computer by using the Add/Remove Program feature in the Window's Control Panel.

On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:

Windows Vista/7/8/10: Click Uninstall a Program.
Windows XP: Click Add or Remove Programs.

When you find the program ansarsunna Toolbar, click it, and then do one of the following:

Windows Vista/7/8/10: Click Uninstall.
Windows XP: Click the Remove or Change/Remove tab (to the right of the program).

Follow the prompts. A progress bar shows you how long it will take to remove ansarsunna Toolbar.
If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.