Should I remove ecuadortv Toolbar?

What percent of users and experts removed it?

81% remove it19% keep it

Overall Sentiment

Bad

What do people think about it?

(click star to rate)

How common is it?

Reach <0.001%

Versions

Version	Distribution
6.14.0.28	100.00%

Other programs by Conduit

ecuadortv Toolbar

from Conduit Ltd.

Remove ecuadortv Toolbar by Conduit

What is ecuadortv Toolbar?

ecuadortv Toolbar is a Conduit powered search toolbar and Browser helper Object (for IE) that delivers contextual based advertising to the web browser. In addition it will modify the user's browser home and search pages as well as 'New Tab' pages to push advertising and search.

About (from Conduit)

By Using a Conduit Software you may enable Conduit to access, use and collect a variety of information, both personal and non-personal, regarding your Internet Browser, your browsing habits, and information about your computer

Overview

The program adds a toolbar to Microsoft Internet Explorer. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The primary executable is named tbecu2.dll. A majority of users end up uninstalling this less than a week of it being installed. It also bundles additional software in the form of the Conduit Engine, which installs a potentially unwanted toolbar, and makes homepage and default search engine changes to a user's web browser. The setup package generally installs about 12 files.

Malware detected in the program
Integrates into the web browser
Built on and distributed using the Conduit toolbar
The experts agree, you should remove it!

Warning, multiple anti-virus scanners have detected possible malware in ecuadortv Toolbar.

tbecu2.dll (e1b87b513c14d3a417b1a027be739de1) has been flagged by the following 3 scanners:
Anti-Virus software	Version	Detection
ESET-NOD32	8.9321	a variant of Win32/Toolbar.Conduit.B
Panda Antivirus	14.01.26.12	Adware/Conduit
VIPRE Antivirus	25676	Conduit (fs)
prxtbecu2.dll (2fffa4711ee94bed0a982886f65aaf3a) has been flagged by the following 4 scanners:
Anti-Virus software	Software version	Detection
AVware	1.5.0.16	Conduit (fs)
ESET-NOD32	10274	Win32/Toolbar.Conduit.N
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	32328	Conduit (fs)
tbecu0.dll (90a1b31ba3d3c1fd73b6021c1d8c1c8f) has been flagged by the following 4 scanners:
Anti-Virus software	Software version	Detection
Comodo Security	17602	Application.Win32.Conduit.r
ESET-NOD32	9281	a variant of Win32/Toolbar.Conduit.B
Panda Antivirus	10.0.3.5	Adware/Conduit
VIPRE Antivirus	25382	Conduit (fs)
ecuadortvToolbarHelper.exe (943f313974a830d4634c73beb8103f5e) has been flagged by the following 4 scanners:
Anti-Virus software	Software version	Detection
Comodo Security	17313	Application.Win32.Conduit.~f
Dr.Web		Adware.Toolbar.202
Malwarebytes	1.75.0.1	PUP.Optional.Conduit.A
VIPRE Antivirus	23610	Conduit (fs)
prxtbecu0.dll (a795d945351033d699dada999de1bdb1) has been flagged by the following 4 scanners:
Anti-Virus software	Software version	Detection
Dr.Web	7.00.8.02260	Adware.Conduit.16
ESET-NOD32	9675	Win32/Toolbar.Conduit.W
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	28214	Conduit (fs)
uninstall.exe (b728fa6a309e5d18141947b95b730e95) has been flagged by the following 2 scanners:
Anti-Virus software	Software version	Detection
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	26380	Conduit (fs)

View all 21 all detections

Program details

Displayed publisher: ecuadortv

URL: ecuadortv.OurToolbar.com

Help link: ecuadortv.OurToolbar.com/help

Installation folder: C:\Program Files\ecuadortv

Uninstaller: C:\Program Files\ecuadortv\uninstall.exe

This is a Community Toolbar by Conduit, what does that mean?

Conduit is a toolbar monetization platform for software publishers. It provides a utility for developers to create branded generic web browser toolbars. Publishers can bundle these toolbars with their software programs or provide access to download them separately through ecuadortv.OurToolbar.com. Once installed, the toolbar modifies the browser's home page and search settings in order to redirect searches through the Conduit portal (which utilizes Bing or Yahoo! Search engines). Read more...

Files installed by ecuadortv Toolbar

Program module:	tbecu2.dll (Malware detected)
Path:	C:\Program Files\ecuadortv\tbecu2.dll
MD5:	e1b87b513c14d3a417b1a027be739de1

Additional files:

(Malware detected) ecuadortvToolbarHelper.exe
hk64tbecu0.dll
hk64tbecu2.dll
hktbecu0.dll
hktbecu2.dll
ldrtbecu0.dll
ldrtbecu2.dll
(Malware detected) prxtbecu0.dll
(Malware detected) prxtbecu2.dll
(Malware detected) tbecu0.dll
(Malware detected) uninstall.exe

Behaviors exhibited

2 Internet Explorer BHOs

prxtbecu0.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'FunFreeGames Toolbar' with the class of {f8069fe4-3a99-43e0-8643-9497870f5e24} (FunFreeGames).
prxtbecu2.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'WinZipBar Toolbar' with the class of {50fafaf0-70a9-419d-a109-fa4b4ffd4e37} (WinZipBar).

2 Internet Explorer Toolbars

prxtbecu2.dll is loaded as Internet Explorer Toolbar with the name '2Shared Toolbar' with the class of {ef468e5b-5b30-4136-a833-7f2e3a31afdf}.
prxtbecu0.dll is loaded as Internet Explorer Toolbar with the name 'Serif PhotoPlus Toolbar' with the class of {8f2767f8-338a-4258-bd1c-4de5a3d8cdb2}.

2 Internet Explorer URL Search Hooks

prxtbecu0.dll loads into IE as a URL Search Hook named 'FunFreeGames Toolbar' with a class of {f8069fe4-3a99-43e0-8643-9497870f5e24} in order to redirect unknown URL searches.
prxtbecu2.dll loads into IE as a URL Search Hook named '2Shared Toolbar' with a class of {ef468e5b-5b30-4136-a833-7f2e3a31afdf} in order to redirect unknown URL searches.

2 Internet Explorer Web Browsers

prxtbecu2.dll installs an IE Web Browser in Internet Explorer named '2Shared Toolbar' with a class of {EF468E5B-5B30-4136-A833-7F2E3A31AFDF}.
prxtbecu0.dll installs an IE Web Browser in Internet Explorer named 'CCC001 Toolbar' with a class of {91DA5E8A-3318-4F8C-B67E-5964DE3AB546}.

Scheduled Task

uninstall.exe is scheduled as a task with the class '{C247631C-606C-44F8-9B4E-C25B77177427}' (runs on registration).

Windows Firewall Allowed Program

ecuadortvToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.

How do I remove ecuadortv Toolbar?

You can uninstall ecuadortv Toolbar from your computer by using the Add/Remove Program feature in the Window's Control Panel.

On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:

Windows Vista/7/8/10: Click Uninstall a Program.
Windows XP: Click Add or Remove Programs.

When you find the program ecuadortv Toolbar, click it, and then do one of the following:

Windows Vista/7/8/10: Click Uninstall.
Windows XP: Click the Remove or Change/Remove tab (to the right of the program).

Follow the prompts. A progress bar shows you how long it will take to remove ecuadortv Toolbar.
If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.