Should I remove Bonzuma Toolbar?

What percent of users and experts removed it?

82% remove it18% keep it

Overall Sentiment

Bad

What do people think about it?

(click star to rate)

How common is it?

Reach 0.0002%

Versions

Version	Distribution
6.15.0.27	66.67%
6.13.3.505	33.33%

Other programs by Conduit

Bonzuma Toolbar

from Conduit Ltd.

Remove Bonzuma Toolbar by Conduit

What is Bonzuma Toolbar?

This is a Conduit/Perion (ClientConnect) powered toolbar that provides limited web browser functionality but will modify the user's search and home pages as well as bundle various ad-supported components. Also, the toolbar will bundle additional potentially unwanted features such as Search Protect which will make sure that the browser maintains its modified home and search pages to Conduit.

About (from Conduit)

As part of the functionality provided by the Conduit Software, we may collect and store information about your search activity when you use our web search services (such as search queries). This information may be shared with third-party applications that use Search Data to function, or to offer you more customized inf... Read more

Overview

The most used version is 6.15.0.27, with over 98% of all installations currently using this version. The program adds a toolbar to Microsoft Internet Explorer. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The software is designed to connect to the Internet and adds a Windows Firewall exception in order to do so without being interfered with. The main program executable is tbBonz.dll. Typically most users end up uninstalling this just after a few days. It also bundles additional software in the form of the Conduit Engine, which installs a potentially unwanted toolbar, and makes homepage and default search engine changes to a user's web browser. The software installer includes 8 files and is usually about 8.04 MB (8,431,342 bytes).

Possible malware installed by this program
Loads into the web browser
Built on and distributed using the Conduit toolbar
Hijacks the web browser's home page
The experts agree, you should remove it!

Warning, multiple anti-virus scanners have detected possible malware in Bonzuma Toolbar.

tbBonz.dll (e1b87b513c14d3a417b1a027be739de1) has been flagged by the following 3 scanners:
Anti-Virus software	Version	Detection
ESET-NOD32	8.9321	a variant of Win32/Toolbar.Conduit.B
Panda Antivirus	14.01.26.12	Adware/Conduit
VIPRE Antivirus	25676	Conduit (fs)
prxtbBonz.dll (4b5780c90e38e579a651dbc4774a1f1f) has been flagged by the following 5 scanners:
Anti-Virus software	Software version	Detection
Agnitum Outpost	5.5.1.3	PUA.Toolbar.Conduit!
Dr.Web	7.00.8.02260	Adware.Conduit.16
ESET-NOD32	9639	Win32/Toolbar.Conduit.W
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	28068	Conduit (fs)
prxtbBon0.dll (2fffa4711ee94bed0a982886f65aaf3a) has been flagged by the following 4 scanners:
Anti-Virus software	Software version	Detection
AVware	1.5.0.16	Conduit (fs)
ESET-NOD32	10274	Win32/Toolbar.Conduit.N
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	32328	Conduit (fs)
BonzumaToolbarHelper.exe (943f313974a830d4634c73beb8103f5e) has been flagged by the following 4 scanners:
Anti-Virus software	Software version	Detection
Comodo Security	17313	Application.Win32.Conduit.~f
Dr.Web		Adware.Toolbar.202
Malwarebytes	1.75.0.1	PUP.Optional.Conduit.A
VIPRE Antivirus	23610	Conduit (fs)
uninstall.exe (b728fa6a309e5d18141947b95b730e95) has been flagged by the following 2 scanners:
Anti-Virus software	Software version	Detection
Panda Antivirus	10.0.3.5	PUP/Conduit.A
VIPRE Antivirus	26380	Conduit (fs)

View all 18 all detections

Program details

Displayed publisher: Bonzuma

URL: Bonzuma.OurToolbar.com

Help link: Bonzuma.OurToolbar.com/help

Installation folder: C:\Program Files\bonzuma

Uninstaller: C:\Program Files\Bonzuma\uninstall.exe toolbar

Estimated size: 8.04 MB

This is a Community Toolbar by Conduit, what does that mean?

Conduit is a toolbar monetization platform for software publishers. It provides a utility for developers to create branded generic web browser toolbars. Publishers can bundle these toolbars with their software programs or provide access to download them separately through Bonzuma.OurToolbar.com. Once installed, the toolbar modifies the browser's home page and search settings in order to redirect searches through the Conduit portal (which utilizes Bing or Yahoo! Search engines). Read more...

Files installed by Bonzuma Toolbar

Program module:	tbBonz.dll (Malware detected)
Name:	Conduit Toolbar
Path:	C:\Program Files\bonzuma\tbBonz.dll
MD5:	e1b87b513c14d3a417b1a027be739de1

Additional files:

(Malware detected) BonzumaToolbarHelper.exe - ToolbarHelper Application
(Malware detected) uninstall.exe - Conduit Toolbar Uninstall
hk64tbBonz.dll - Conduit Toolbar
hktbBonz.dll
ldrtbBonz.dll
(Malware detected) prxtbBon0.dll
(Malware detected) prxtbBonz.dll
(Malware detected) tbBonz.dll

Behaviors exhibited

2 Internet Explorer BHOs

prxtbBonz.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Produtools Manuals Toolbar' with the class of {16bb67e0-6319-4077-be84-f41269e051f3} (Produtools Manuals).
prxtbBon0.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'WinZipBar Toolbar' with the class of {50fafaf0-70a9-419d-a109-fa4b4ffd4e37} (WinZipBar).

2 Internet Explorer Toolbars

prxtbBonz.dll is loaded as Internet Explorer Toolbar with the name 'Produtools Manuals Toolbar' with the class of {16bb67e0-6319-4077-be84-f41269e051f3}.
prxtbBon0.dll is loaded as Internet Explorer Toolbar with the name '2Shared Toolbar' with the class of {ef468e5b-5b30-4136-a833-7f2e3a31afdf}.

2 Internet Explorer URL Search Hooks

prxtbBonz.dll loads into IE as a URL Search Hook named 'Produtools Manuals Toolbar' with a class of {16bb67e0-6319-4077-be84-f41269e051f3} in order to redirect unknown URL searches.
prxtbBon0.dll loads into IE as a URL Search Hook named '2Shared Toolbar' with a class of {ef468e5b-5b30-4136-a833-7f2e3a31afdf} in order to redirect unknown URL searches.

2 Internet Explorer Web Browsers

prxtbBonz.dll installs an IE Web Browser in Internet Explorer named 'Produtools Manuals Toolbar' with a class of {16BB67E0-6319-4077-BE84-F41269E051F3}.
prxtbBon0.dll installs an IE Web Browser in Internet Explorer named '2Shared Toolbar' with a class of {EF468E5B-5B30-4136-A833-7F2E3A31AFDF}.

Scheduled Task

uninstall.exe is scheduled as a task with the class '{C247631C-606C-44F8-9B4E-C25B77177427}' (runs on registration).

Windows Firewall Allowed Program

BonzumaToolbarHelper.exe is added as a firewall exception for 'C:\Program Files\eTvOnline.ro\eTvOnline.roToolbarHelper.exe'.

How do I remove Bonzuma Toolbar?

You can uninstall Bonzuma Toolbar from your computer by using the Add/Remove Program feature in the Window's Control Panel.

On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:

Windows Vista/7/8/10: Click Uninstall a Program.
Windows XP: Click Add or Remove Programs.

When you find the program Bonzuma Toolbar, click it, and then do one of the following:

Windows Vista/7/8/10: Click Uninstall.
Windows XP: Click the Remove or Change/Remove tab (to the right of the program).

Follow the prompts. A progress bar shows you how long it will take to remove Bonzuma Toolbar.
If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.