sphook32.dll
Search Protect by Conduit Ltd. (Signed)
Warning 9 antivirus scanners has detected malware in various versions of sphook32.dll.
Overview
There are 2 versions of sphook32.dll in the wild, the latest version being 1.5.0.71. The average file size is about 151.78 KB. The file is a digitally signed and issued to Conduit Ltd. by VeriSign. Some variations of the file have been seen to be installed with the program Search Protect by conduit from Conduit Ltd..
 Details
|
| File name: | sphook32.dll |
| Publisher: | Conduit |
| Product name: | Search Protect |
| Description: | Search Protect by Conduit |
| Typical file path: | C:\users\user\appdata\roaming\searchprotect\bin\sphook32.dll |
| Original name: | SearchProtect (R) P |
| Certificate |
| Issued to: | Conduit Ltd. |
| Authority (CA): | VeriSign |
| Effective date: | Wednesday, January 2, 2013 |
| Expiration date: | Sunday, April 3, 2016 |
Programs installed in
(Note, the programs listed below are for all versions of Search Protect.)
The Conduit Search Protect software is designed to prevent other competing web browser plugins from changing the homepage and search settings that are created by the Conduit OurToolbar from being chan...
Malware detections
Based on 40+ industry antivirus scanners, 9 of them detected the following malware.
| Antivirus engine | Engine version | Detection | File version |
| avast! |
8.0.1489.320 |
Win32:SearchProtect-A [PUP] |
1.5.0.71 |
| Baidu Antivirus |
3.5.1.41473 |
Trojan.Win32.Adware.50 |
1.5.0.71 |
| Dr.Web |
8.13.9.26 |
Adware.BGuard.15 |
1.4.1.12 |
| Dr.Web |
8.13.10.7 |
Adware.BGuard.15 |
1.5.0.71 |
| ESET NOD32 |
7.8693 |
Win32/Conduit.SearchProtect.A |
1.4.1.12 |
| ESET NOD32 |
7.8865 |
probably a variant of Win32/Conduit.SearchProtect.C |
1.5.0.71 |
| Malwarebytes |
1.75.0.1 |
PUP.Optional.Conduit.A |
1.5.0.71 |
| VIPRE Antivirus |
20540 |
Conduit (fs) (not malicious) |
1.4.1.12 |
| VIPRE Antivirus |
22020 |
Conduit (fs) |
1.5.0.71 |
All file variations of sphook32.dll
