Should I block it?
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization
Additional versions
Relationships
sphook32.dll
Search Protect by Conduit Ltd. (Signed)
| Version: | 1.4.1.12 |
| MD5: | 469ab1fd3b113728cc1aa6cffbfed00b |
| SHA1: | 36bc84f5e53f297f9bb6c1f1660f7a1046ad4ccf |
| SHA256: | 05ad09399ea2a76f4fd4d6630f9233d67b4fbcddd3f9d82037d5768e0f6d5754 |
Warning 3 antivirus scanners has detected malware.
Overview
sphook32.dll is malware that is loaded as dynamic link library that runs in the context of a process. It is installed with a couple of know programs including Search Protect by conduit published by Conduit Ltd. and Search Protect by conduit published by Conduit Ltd.. The file is digitally signed by Conduit Ltd. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | sphook32.dll |
| Publisher: | Conduit |
| Product name: | Search Protect |
| Description: | Search Protect by Conduit |
| Typical file path: | C:\users\user\appdata\roaming\searchprotect\bin\sphook32.dll |
| Original name: | SearchProtect (R) P |
| File version: | 1.4.1.12 |
| Size: | 146.28 KB (149,792 bytes) |
| Certificate |
| Issued to: | Conduit Ltd. |
| Authority (CA): | VeriSign |
| Effective date: | Wednesday, January 2, 2013 |
| Expiration date: | Sunday, April 3, 2016 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| Code language: | Microsoft Visual C++ 10.0 |
| .NET CLR: | No |
More details
Programs
The following programs will install this file
The Conduit Search Protect software is designed to prevent other competing web browser plugins from changing the homepage and search settings that are created by the Conduit OurToolbar from being changed automatically. It is typically installed with various Community toolbars.
During install of a Conduit Toolbar, you by default except the EULA to install the included SearchProtect software (which is required). Upon installation the p...
Malware detections
Based on 40+ industry antivirus scanners, 3 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| Dr.Web |
8.13.9.26 |
Adware.BGuard.15 |
| ESET NOD32 |
7.8693 |
Win32/Conduit.SearchProtect.A |
| VIPRE Antivirus |
20540 |
Conduit (fs) (not malicious) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
33.33% |
|
| Windows 8 Pro |
33.33% |
|
| Windows 7 Ultimate |
33.33% |
|
Distribution by country
United States installs about 100.00% of Search Protect.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Hewlett-Packard |
66.67% |
|
| Acer |
33.33% |
|
