Should I block it?

98%
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization

VersionsAdditional versions

1.5.0.71 33.33%
1.4.1.12 66.67%

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegSetValueExA, RegSetValueW, RegSetValueA, RegQueryValueExW, RegCloseKey, RegOpenKeyExW, RegSetValueExW
kernel32.dll
TerminateThread, CreateEventW, SetEvent, CreateThread, TlsSetValue, ResetEvent, CreateEventA, OpenEventA, TlsGetValue, TlsFree, TlsAlloc, GetProcessHeap, HeapFree, LocalFree, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, LoadLibraryW, GetProcAddress, GetModuleHandleW, GetModuleFileNameW, FreeLibrary, GetModuleHandleExW, WaitForSingleObject, GetCurrentProcess, FlushInstructionCache, VirtualProtect, SetLastError, FormatMessageA, EncodePointer, DecodePointer, InterlockedExchange, Sleep, InterlockedCompareExchange, TerminateProcess, UnhandledExceptionFilter, SetUnhandledExceptionFilter, IsDebuggerPresent, QueryPerformanceCounter, GetTickCount, GetCurrentThreadId, GetSystemTimeAsFileTime, Thread32Next, CloseHandle, Thread32First, CreateToolhelp32Snapshot, GetCurrentProcessId, DisableThreadLibraryCalls, GetLastError, MultiByteToWideChar
msvcp100.dll
DllMain
msvcr100.dll
DllMain
ole32.dll
CoUninitialize, CoInitializeEx
user32.dll
GetMessageW, CreateWindowExW, RegisterClassExW, GetClassInfoW, SetWindowsHookExW, DestroyWindow, PostThreadMessageW, DefWindowProcW, RegisterWindowMessageW, UnhookWindowsHookEx, UnregisterClassW, CallNextHookEx, DispatchMessageW, PostMessageW, TranslateMessage

sphook32.dll

Search Protect by Conduit Ltd. (Signed)

Remove sphook32.dll
Version:   1.5.0.71
MD5:   9feacad9b427f3eac86200053816bfb2
SHA1:   76a69e2af9f1bac40d8d9fe128364894ca2e9f08
SHA256:   8565abe0df81d6cbe878c2091e243614202480c2db6b1b4ead2d0d31be8c76f2
Warning 6 antivirus scanners has detected malware.

Overview

sphook32.dll is malware that is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including Search Protect by conduit published by Conduit Ltd., Search Protect by conduit from Conduit Ltd. and Search Protect by conduit by Conduit Ltd.. The file is digitally signed by Conduit Ltd. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:sphook32.dll
Publisher:Conduit
Product name:Search Protect
Description:Search Protect by Conduit
Typical file path:C:\users\user\appdata\roaming\searchprotect\bin\sphook32.dll
Original name:SearchProtect (R) P
File version:1.5.0.71
Size:157.28 KB (161,056 bytes)
Build date:5/7/2013 11:17 PM
Certificate
Issued to:Conduit Ltd.
Authority (CA):VeriSign
Effective date:Wednesday, January 2, 2013
Expiration date:Sunday, April 3, 2016
Digital DNA
PE subsystem:Windows GUI
File packed:No
Code language:Microsoft Visual C++ 10.0
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Search Protect by conduit
 Conduit Ltd.
  82% remove
The Conduit Search Protect software is designed to prevent other competing web browser plugins from changing the homepage and search settings that are created by the Conduit OurToolbar from being changed automatically. It is typically installed with various Community toolbars. During install of a Conduit Toolbar, you by default except the EULA to install the included SearchProtect software (which is required). Upon installation the p...

MalwareMalware detections

Based on 40+ industry antivirus scanners, 6 of them detected the following malware.
Antivirus engineEngine versionDetection
avast! 8.0.1489.320 Win32:SearchProtect-A [PUP]
Baidu Antivirus 3.5.1.41473 Trojan.Win32.Adware.50
Dr.Web 8.13.10.7 Adware.BGuard.15
ESET NOD32 7.8865 probably a variant of Win32/Conduit.SearchProtect.C
Malwarebytes 1.75.0.1 PUP.Optional.Conduit.A
VIPRE Antivirus 22020 Conduit (fs)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 33.33%
Windows 8 Pro 33.33%
Windows 7 Ultimate 33.33%

Distribution by countryDistribution by country

United States installs about 100.00% of Search Protect.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 66.67%
Acer 33.33%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE