Should I block it?

40%
40% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

1.0.0.3 10.00%
1.0.0.2 90.00%

Relationships

Hosts
Parent process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegSetValueExW, RegCreateKeyExW, RegOpenKeyExW, RegCloseKey, SetSecurityDescriptorSacl, GetSecurityDescriptorSacl, SetSecurityDescriptorDacl, InitializeSecurityDescriptor, ConvertStringSecurityDescriptorToSecurityDescriptorW, LookupAccountSidW, GetTokenInformation, OpenProcessToken
kernel32.dll
CreateToolhelp32Snapshot, GetCurrentProcessId, Thread32First, GetCurrentThreadId, Thread32Next, GetModuleHandleW, GetModuleFileNameW, GetVersionExW, LoadLibraryW, GetProcAddress, FreeLibrary, GetModuleHandleExW, CreateMutexW, GetLastError, OpenProcess, VirtualAllocEx, WriteProcessMemory, SetThreadPriority, CreateRemoteThread, WaitForSingleObject, Process32FirstW, Process32NextW, ReleaseMutex, InitializeCriticalSectionAndSpinCount, MultiByteToWideChar, WideCharToMultiByte, GetEnvironmentVariableW, SetFilePointerEx, GetCurrentThread, GetThreadPriority, CloseHandle, Sleep, ResumeThread, GetThreadContext, SuspendThread, OpenThread, VirtualFree, VirtualAlloc, VirtualQuery, GetSystemInfo, FlushInstructionCache, VirtualProtectEx, GetCurrentProcess, SetStdHandle, CreateFileW, VirtualFreeEx, HeapReAlloc, GetConsoleMode, GetConsoleCP, InterlockedIncrement, InterlockedDecrement, GetStringTypeW, EncodePointer, DecodePointer, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, HeapAlloc, HeapFree, GetCommandLineA, GetStdHandle, GetFileType, WriteConsoleW, RaiseException, RtlUnwind, GetCPInfo, IsProcessorFeaturePresent, UnhandledExceptionFilter, SetUnhandledExceptionFilter, SetLastError, TerminateProcess, TlsAlloc, TlsGetValue, TlsSetValue, TlsFree, GetStartupInfoW, LCMapStringW, GetLocaleInfoW, IsValidLocale, GetUserDefaultLCID, EnumSystemLocalesW, IsDebuggerPresent, ExitProcess, HeapSize, WriteFile, GetProcessHeap, IsValidCodePage, GetACP, GetOEMCP, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetModuleFileNameA, QueryPerformanceCounter, GetSystemTimeAsFileTime, OutputDebugStringW, LoadLibraryExW, FlushFileBuffers
ole32.dll
CoTaskMemFree
psapi.dll
GetModuleFileNameExW, EnumProcessModules
shell32.dll
SHGetFolderPathW
user32.dll
SetPropW

tbhostsupport.dll

TBHostSupport by Conduit Ltd. (Signed)

Remove tbhostsupport.dll
Version:   1.0.0.2
MD5:   9fd16d3cc543eb20f067dd6537432082
SHA1:   60a882dfb633b1179ec55f395f1862192babe03a

Overview

tbhostsupport.dll executes as a process with the local user's privileges typically within the hosted context of rundll32.exe (Run a DLL as an App by Microsoft). It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). The file is digitally signed by Conduit Ltd. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:tbhostsupport.dll
Publisher:Conduit Ltd.
Product name:TBHostSupport
Typical file path:C:\users\user\appdata\local\tbhostsupport\tbhostsupport.dll
Original name:TBHostSu.dll
File version:1.0.0.2
Size:447.28 KB (458,016 bytes)
Certificate
Issued to:Conduit Ltd.
Authority (CA):VeriSign
Effective date:Wednesday, January 2, 2013
Expiration date:Sunday, April 3, 2016
Digital DNA
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'TBHostSupport' → "C:\Windows\SysWOW64\Rundll32.exe" "C:\users\user\appdata\Local\TBHostSupport\TBHostSupport.dll",DLLRunTBHostSupportPlugin

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00564753%
0.028634%
Kernel CPU:0.00135396%
0.013761%
User CPU:0.00429358%
0.014873%
Kernel CPU time:807,622 ms/min
100,923,805ms/min
CPU cycles:20,159,753/sec
17,470,203/sec
Memory
Private memory:2.45 MB
21.59 MB
Private (maximum):5.39 MB
Private (minimum):2.81 MB
Non-paged memory:2.45 MB
21.59 MB
Virtual memory:57.66 MB
140.96 MB
Virtual memory (peak):69.98 MB
169.69 MB
Working set:2.85 MB
18.61 MB
Working set (peak):5.55 MB
37.95 MB
Page faults:35,127,054/min
2,039/min
I/O
I/O read transfer:48 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O other transfer:7 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:2
12
Handles:71
600
GUI GDI count:14
103
GUI GDI peak:16
142
GUI USER count:5
49
GUI USER peak:5
71

BehaviorsProcess properties

Integrety level:Medium
Platform:64-bit
Command lines:
  • "C:\windows\syswow64\rundll32.exe" "C:\users\user\appdata\local\tbhostsupport\tbhostsupport.dll",dllruntbhostsupportplugin
  • "C:\Windows\System32\rundll32.exe" "C:\Documents and Settings\user\Application data\tbhostsupport\tbhostsupport.dll",dllruntbhostsupportplugin
Owner:User
Parent process:chrome.exe (Google Chrome by Google Inc)

ResourcesThreads

Averages
 
rundll32.exe (Windows host process (Rundll32) by Microsoft)
Total CPU:4.35913944%
0.272967%
Kernel CPU:3.84826638%
0.107585%
User CPU:0.51087306%
0.165382%
CPU cycles:112,309,274/sec
5,741,424/sec
Context switches:10/sec
79/sec
Memory:56 KB
1.16 MB

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 60.00%
Microsoft Windows XP 20.00%
Windows 8.1 10.00%
Windows 8.1 Single Language 10.00%

Distribution by countryDistribution by country

United States installs about 50.00% of TBHostSupport.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
ASUS 33.33%
Hewlett-Packard 25.00%
American Megatrends 16.67%
Dell 16.67%
Acer 8.33%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE