PUP.Eshield Safe Search

By CagedTech in Potentially Unwanted Programs

Threat Scorecard

Ranking:	2,921
Threat Level:	10 % (Normal)
Infected Computers:	38,756

First Seen:	May 8, 2015
Last Seen:	March 22, 2024
OS(es) Affected:	Windows

Table of Contents

SpyHunter Detects & Remove PUP.Eshield Safe Search

File System Details

PUP.Eshield Safe Search may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	tnt2user.exe	a4dc06e5970b0d8e24170561febd282a	546
Name: tnt2user.exe MD5: a4dc06e5970b0d8e24170561febd282a Size: 692.48 KB (692480 bytes) Detections: 546 Type: Executable File Path: c:\Users\<username>\appdata\local\tnt2\2.0.0.1995\tnt2user.exe Group: Malware file Last Updated: November 24, 2023
2.	TNT2User.exe	574ad2b8e54387111ab13fe140f65fdd	205
Name: TNT2User.exe MD5: 574ad2b8e54387111ab13fe140f65fdd Size: 693.5 KB (693504 bytes) Detections: 205 Type: Executable File Path: C:\Users\<username>\AppData\Local\TNT2\2.0.0.1991\TNT2User.exe Group: Malware file Last Updated: December 20, 2023
3.	TNT2User.exe	bd2c2006a7eb6e430b175b9489d40d10	177
Name: TNT2User.exe MD5: bd2c2006a7eb6e430b175b9489d40d10 Size: 666.83 KB (666832 bytes) Detections: 177 Type: Executable File Path: %SYSTEMDRIVE%\Users\<username>\AppData\Local\TNT2\2.0.0.2065\TNT2User.exe Group: Malware file Last Updated: February 27, 2024
4.	TNT2User.exe	f80a934f7f68e22d57ac9c59f55d8d45	90
Name: TNT2User.exe MD5: f80a934f7f68e22d57ac9c59f55d8d45 Size: 666.83 KB (666832 bytes) Detections: 90 Type: Executable File Path: C:\Users\<username>\AppData\Local\TNT2\2.0.0.2030\TNT2User.exe Group: Malware file Last Updated: January 8, 2024
5.	TNT2User.exe	768e74114c598879e6e6423aadb8599a	86
Name: TNT2User.exe MD5: 768e74114c598879e6e6423aadb8599a Size: 665.8 KB (665808 bytes) Detections: 86 Type: Executable File Path: C:\Users\<username>\AppData\Local\TNT2\2.0.0.2010\TNT2User.exe Group: Malware file Last Updated: September 21, 2023
6.	TNT2User.exe	ddacbe1e203e7e50b574c4fb1e2f30f8	51
Name: TNT2User.exe MD5: ddacbe1e203e7e50b574c4fb1e2f30f8 Size: 659.66 KB (659664 bytes) Detections: 51 Type: Executable File Path: C:\Documents and Settings\<username>\Ustawienia lokalne\Dane aplikacji\TNT2\2.0.0.1983\TNT2User.exe Group: Malware file Last Updated: July 5, 2023
7.	TNT2User.exe	97b4238c82c585f4374baec985e700bc	51
Name: TNT2User.exe MD5: 97b4238c82c585f4374baec985e700bc Size: 692.99 KB (692992 bytes) Detections: 51 Type: Executable File Path: C:\Users\<username>\AppData\Local\TNT2\2.0.0.2029\TNT2User.exe Group: Malware file Last Updated: October 23, 2023
8.	TNT2User.exe	9e98e26401c4dca46bb5bda007b51e5f	33
Name: TNT2User.exe MD5: 9e98e26401c4dca46bb5bda007b51e5f Size: 654.03 KB (654032 bytes) Detections: 33 Type: Executable File Path: C:\Users\<username>\AppData\Local\TNT2\2.0.0.1924\TNT2User.exe Group: Malware file Last Updated: September 17, 2022
9.	TNT2User.exe	5fae2922cce154dc1f3a57f3fff9df95	32
Name: TNT2User.exe MD5: 5fae2922cce154dc1f3a57f3fff9df95 Size: 692.48 KB (692480 bytes) Detections: 32 Type: Executable File Path: C:\Users\<username>\AppData\Local\TNT2\2.0.0.1995\TNT2User.exe Group: Malware file Last Updated: September 29, 2022
10.	TNT2User.exe	9f783a935c63193b08e6c7cb2af36f2d	31
Name: TNT2User.exe MD5: 9f783a935c63193b08e6c7cb2af36f2d Size: 654.09 KB (654096 bytes) Detections: 31 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.1918 Group: Malware file Last Updated: June 2, 2017
11.	TNT2User.exe	85cabeb6c86c3e03ee818f7dc5f364b4	30
Name: TNT2User.exe MD5: 85cabeb6c86c3e03ee818f7dc5f364b4 Size: 680.7 KB (680704 bytes) Detections: 30 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.1805 Group: Malware file Last Updated: November 9, 2019
12.	TNT2User.exe	550942eb8ad6de47abc971763a689625	29
Name: TNT2User.exe MD5: 550942eb8ad6de47abc971763a689625 Size: 693.5 KB (693504 bytes) Detections: 29 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.1966 Group: Malware file Last Updated: October 27, 2019
13.	TNT2User.exe	f8b22ff0e62eb248e59f8c624caf25ae	27
Name: TNT2User.exe MD5: f8b22ff0e62eb248e59f8c624caf25ae Size: 654.09 KB (654096 bytes) Detections: 27 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.1928 Group: Malware file Last Updated: June 2, 2017
14.	TNT2User.exe	08915eefa3e1eea302243a8491591997	23
Name: TNT2User.exe MD5: 08915eefa3e1eea302243a8491591997 Size: 693.5 KB (693504 bytes) Detections: 23 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.1966 Group: Malware file Last Updated: February 7, 2020
15.	TNT2User.exe	ccfaa1398803e94cf104f3eb5cf09ee1	21
Name: TNT2User.exe MD5: ccfaa1398803e94cf104f3eb5cf09ee1 Size: 693.64 KB (693648 bytes) Detections: 21 Type: Executable File Path: C:\Users\<username>\AppData\Local\TNT2\2.0.0.2094\TNT2User.exe Group: Malware file Last Updated: November 19, 2021
16.	TNT2User.exe	53102cf12db143b49586143abd6cc3d0	19
Name: TNT2User.exe MD5: 53102cf12db143b49586143abd6cc3d0 Size: 654.09 KB (654096 bytes) Detections: 19 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.1923 Group: Malware file Last Updated: June 2, 2017
17.	eShieldToolbar.exe	760b8f3fe7110cb734ca6ea790e4b6d5	19
Name: eShieldToolbar.exe MD5: 760b8f3fe7110cb734ca6ea790e4b6d5 Size: 1.44 MB (1440976 bytes) Detections: 19 Type: Executable File Path: C:\Users\<username>\AppData\Local\Temp\CWvf5dhjehAdX8cj\182\eShieldToolbar.exe Group: Malware file Last Updated: December 10, 2023
18.	MonitorApp.exe	697685abcaa30712579cf22453616f14	18
Name: MonitorApp.exe MD5: 697685abcaa30712579cf22453616f14 Size: 140.68 KB (140688 bytes) Detections: 18 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.2083 Group: Malware file Last Updated: March 2, 2020
19.	CliffBar.exe	7242a78638404f3027c5294bf7d3e538	17
Name: CliffBar.exe MD5: 7242a78638404f3027c5294bf7d3e538 Size: 141.2 KB (141200 bytes) Detections: 17 Type: Executable File Path: C:\Users\<username>\AppData\Local\TNT2\2.0.0.2094\CliffBar.exe Group: Malware file Last Updated: October 21, 2023
20.	TNT2User.exe	36b2c70db4cbf2051d9c4b65bf39ce65	13
Name: TNT2User.exe MD5: 36b2c70db4cbf2051d9c4b65bf39ce65 Size: 724.98 KB (724988 bytes) Detections: 13 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.1855 Group: Malware file Last Updated: June 2, 2017
21.	TNT2User.exe	196d6877c02efa38381bbc6a19a93acf	8
Name: TNT2User.exe MD5: 196d6877c02efa38381bbc6a19a93acf Size: 693.5 KB (693504 bytes) Detections: 8 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.1957 Group: Malware file Last Updated: June 2, 2017
22.	TNT2User.exe	29a87c312eae7c41ba6b7db1e72b02a0	8
Name: TNT2User.exe MD5: 29a87c312eae7c41ba6b7db1e72b02a0 Size: 666.32 KB (666320 bytes) Detections: 8 Type: Executable File Path: D:\Users\<username>\AppData\Local\TNT2\2.0.0.2000\TNT2User.exe Group: Malware file Last Updated: August 19, 2020
23.	TNT2User.exe	ada4729778aa78c4486b74394833bb35	5
Name: TNT2User.exe MD5: ada4729778aa78c4486b74394833bb35 Size: 734.97 KB (734976 bytes) Detections: 5 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.1983 Group: Malware file Last Updated: June 2, 2017
24.	TNT2User.exe	177008ee6d96d148d7b86f3c45f6959d	4
Name: TNT2User.exe MD5: 177008ee6d96d148d7b86f3c45f6959d Size: 626.96 KB (626960 bytes) Detections: 4 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.1702 Group: Malware file Last Updated: June 2, 2017
25.	TNT2User.exe	287aa966c0f5eae4319fe894b5f57168	3
Name: TNT2User.exe MD5: 287aa966c0f5eae4319fe894b5f57168 Size: 617.74 KB (617744 bytes) Detections: 3 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.1599 Group: Malware file Last Updated: June 2, 2017
26.	TNT2User.exe	3ede0914c25245be3851a9691b8d5b85	3
Name: TNT2User.exe MD5: 3ede0914c25245be3851a9691b8d5b85 Size: 689.42 KB (689424 bytes) Detections: 3 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.1829 Group: Malware file Last Updated: June 2, 2017
27.	TNT2User.exe	da87aef30921004f5f1f4359e5b68075	3
Name: TNT2User.exe MD5: da87aef30921004f5f1f4359e5b68075 Size: 752.89 KB (752896 bytes) Detections: 3 Type: Executable File Path: %LOCALAPPDATA%\TNT2\2.0.0.1918 Group: Malware file Last Updated: June 2, 2017

More files

Registry Details

PUP.Eshield Safe Search may create the following registry entry or registry entries:

CLSID

{3DB34A06-F39E-4976-9FDB-9DB189780010}

{D83C83BF-3EDD-4410-ADAB-5295116DD8C7}

{F1912128-469A-4138-AA26-9699C15BB13E}

HKEY..\..\..\..{RegistryKeys}

Software\Classes\TypeLib\{ABB8A8A5-FF98-40F6-B573-5841B063EA37}

SOFTWARE\Google\Chrome\NativeMessagingHosts\com.eshield.extension_host

Software\Microsoft\Internet Explorer\Approved Extensions\{0BEBF82C-4856-4A7F-B0B1-921BF2E51DE8}

SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{0E0985DE-9794-4BF9-97A2-4F2D39FBFF91}

Software\Microsoft\Internet Explorer\Approved Extensions\{2F2512FC-FA80-4E08-9FA0-4D5F101D7A09}

Software\Microsoft\Internet Explorer\Approved Extensions\{6233B53B-6B6E-4136-81D3-034C132A0752}

Software\Microsoft\Internet Explorer\Approved Extensions\{62F38696-CABD-4B4E-9604-0BBB1039FCF6}

Software\Microsoft\Internet Explorer\Approved Extensions\{6A06EE91-1703-44E4-BA4C-F50C4A1899DF}

SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{87B911D7-7198-4BBD-9ACE-15075198EB25}

Software\Microsoft\Internet Explorer\Approved Extensions\{A22F0D28-065F-41A2-8AD4-24AF8F0C3B7B}

SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{A4DBE24D-AA75-45DA-962F-10E732103FCE}

SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{B3D832D9-85EF-4EE1-8DF7-2516D635A7EE}

Software\Microsoft\Internet Explorer\Approved Extensions\{B8250C3A-2FF5-4390-AC3A-4D9F6AE26080}

Software\Microsoft\Internet Explorer\Approved Extensions\{BFE64FA5-7546-492F-850B-4D5B9FF350E5}

Software\Microsoft\Internet Explorer\Approved Extensions\{DE5C91A0-2307-4B02-8E3F-024ED7B7313E}

SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{ED18F0FF-3055-45EC-A87E-2905A539D61A}

SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{F89F2DBD-E9FB-4D68-9428-00FD7947F753}

Software\Microsoft\Internet Explorer\DOMStorage\eshield.com

Software\Microsoft\Internet Explorer\DOMStorage\search.eshield.com

SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0BEBF82C-4856-4A7F-B0B1-921BF2E51DE8}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{0E0985DE-9794-4BF9-97A2-4F2D39FBFF91}

Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{2F2512FC-FA80-4E08-9FA0-4D5F101D7A09}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{62F38696-CABD-4B4E-9604-0BBB1039FCF6}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{6A06EE91-1703-44E4-BA4C-F50C4A1899DF}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{ED18F0FF-3055-45EC-A87E-2905A539D61A}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{0BEBF82C-4856-4A7F-B0B1-921BF2E51DE8}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{0E0985DE-9794-4BF9-97A2-4F2D39FBFF91}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{170CC462-B711-436F-AED5-7FA143063E84}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{2F2512FC-FA80-4E08-9FA0-4D5F101D7A09}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{4250FD22-DEB7-4E76-B9E2-2DD1A6629A20}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6233B53B-6B6E-4136-81D3-034C132A0752}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{62F38696-CABD-4B4E-9604-0BBB1039FCF6}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{69AA24FD-D320-4B99-B8F3-D299AC851DAD}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{6A06EE91-1703-44E4-BA4C-F50C4A1899DF}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{87B911D7-7198-4BBD-9ACE-15075198EB25}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{A4DBE24D-AA75-45DA-962F-10E732103FCE}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{B3D832D9-85EF-4EE1-8DF7-2516D635A7EE}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{B8250C3A-2FF5-4390-AC3A-4D9F6AE26080}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{BFE64FA5-7546-492F-850B-4D5B9FF350E5}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{ED18F0FF-3055-45EC-A87E-2905A539D61A}

SOFTWARE\Microsoft\Internet Explorer\Toolbar\{F89F2DBD-E9FB-4D68-9428-00FD7947F753}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{170CC462-B711-436F-AED5-7FA143063E84}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{2F2512FC-FA80-4E08-9FA0-4D5F101D7A09}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{4250FD22-DEB7-4E76-B9E2-2DD1A6629A20}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{6233B53B-6B6E-4136-81D3-034C132A0752}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{69AA24FD-D320-4B99-B8F3-D299AC851DAD}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{800D8FD3-2DF8-42E5-8931-DF062D4ED064}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{87B911D7-7198-4BBD-9ACE-15075198EB25}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{A22F0D28-065F-41A2-8AD4-24AF8F0C3B7B}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{A4DBE24D-AA75-45DA-962F-10E732103FCE}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{B3D832D9-85EF-4EE1-8DF7-2516D635A7EE}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{B8626E9B-8B92-403E-85B5-E27E38B54D87}

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{BFE64FA5-7546-492F-850B-4D5B9FF350E5}

Directories

PUP.Eshield Safe Search may create the following directory or directories:

%ALLUSERSPROFILE%\Package Cache\{f08feb52-5c48-4ae9-990a-c82930432be8}

URLs

PUP.Eshield Safe Search may call the following URLs:

search.eshield.com

services.eshield.com

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

PUP.Eshield Safe Search

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove PUP.Eshield Safe Search

File System Details

Registry Details

Directories

URLs

Submit Comment

Trending

Videovor.com

Softcnapp

SaveFrom.net

Most Viewed

Discord Shows Black Screen when Sharing Screen

How To Fix 'Printer Driver is Unavailable' Error

What is Msedge.exe?