What is TSAdBot.exe?

TSAdBot.exe is part of Conducent AdGateway and developed by Conducent Technologies, Inc. according to the TSAdBot.exe version information.

TSAdBot.exe's description is "TSAdBot"

TSAdBot.exe is usually located in the 'C:\Program Files (x86)\TimeSink\AdGateway\' folder.

Some of the anti-virus scanners at VirusTotal detected TSAdBot.exe.

If you have additional information about the file, please share it with the FreeFixer users by posting a comment at the bottom of this page.

VirusTotal report

47 of the 71 anti-virus programs at VirusTotal detected the TSAdBot.exe file. That's a 66% detection rate.

Scanner	Detection Name
Ad-Aware	Gen:Adware.Heur.fu0@RK@5Esei
AegisLab	Riskware.Win32.Timesink.1!c
Alibaba	AdWare:Win32/TimeSink.855b11f2
ALYac	Spyware.Timesink
Antiy-AVL	GrayWare[AdWare]/Win32.TimeSink
Arcabit	Adware.Heur.EF2B61
Avast	Win32:Timesink-B [PUP]
AVG	FileRepMalware [PUP]
Avira	HEUR/AGEN.1022199
BitDefender	Gen:Adware.Heur.fu0@RK@5Esei
ClamAV	Win.Adware.Timesink-1
CMC	Generic.Win32.17d376f548!MD
Comodo	Application.Win32.Adware.TimeSink@3t8a
Cybereason	malicious.54898b
Cylance	Unsafe
Cyren	W32/TSAdbot.IKZI-5024
DrWeb	Adware.TSAdvert
Emsisoft	Gen:Adware.Heur.fu0@RK@5Esei (B)
Endgame	malicious (high confidence)
ESET-NOD32	Win32/Adware.TimeSink
F-Prot	W32/TSAdbot.A
F-Secure	Heuristic.HEUR/AGEN.1022199
FireEye	Gen:Adware.Heur.fu0@RK@5Esei
Fortinet	Adware/TimeSink
GData	Gen:Adware.Heur.fu0@RK@5Esei
Jiangmin	AdWare/TimeSink.b
MAX	malware (ai score=100)
McAfee	Adware-TSADB.a
McAfee-GW-Edition	Adware-TSADB.a
Microsoft	Spyware:Win32/Conducent
MicroWorld-eScan	Gen:Adware.Heur.fu0@RK@5Esei
NANO-Antivirus	Riskware.Win32.TimeSink.bnnlc
Qihoo-360	Win32/Virus.Adware.ad5
Rising	Spyware.Conducent!8.254B (RDMK:cmRtazqEejuDXqRqehNE6m9RO1s4)
Sophos	AdGateway Timesink (PUA)
SUPERAntiSpyware	Adware.TimeSink/Variant
Symantec	Adware.TSAdBot
TACHYON	Trojan-Clicker/W32.TimeSink.90624
Tencent	Win32.Adware.Timesink.Eanr
TrendMicro	ADWARE_CONDUCENTTECH
TrendMicro-HouseCall	ADWARE_CONDUCENTTECH
VBA32	BScope.Adware.TSAdvert
VIPRE	Conducent/Timesink
ViRobot	Adware.TimeSink.90624
Webroot	Adware.TimeSink
Yandex	Adware.TimeSink!tMC4kaJe57Y
Zillya	Adware.TimeSink.Win32.43

Sandbox Report

The following information was gathered by executing the file inside Cuckoo Sandbox.

Summary

Successfully executed process in sandbox.

Generic

[
    {
        "process_path": "C:\\Windows\\System32\\lsass.exe",
        "process_name": "lsass.exe",
        "pid": 476,
        "summary": {},
        "first_seen": 1582228402.328125,
        "ppid": 376
    }
]

Signatures

[
    {
        "markcount": 1,
        "families": [],
        "description": "The executable uses a known packer",
        "severity": 1,
        "marks": [
            {
                "category": "packer",
                "ioc": "InstallShield 2000",
                "type": "ioc",
                "description": null
            }
        ],
        "references": [],
        "name": "peid_packer"
    }
]

Yara

The Yara rules did not detect anything in the file.

Network

{
    "tls": [],
    "udp": [
        {
            "src": "192.168.56.101",
            "dst": "192.168.56.255",
            "offset": 546,
            "time": 3.078655958175659,
            "dport": 137,
            "sport": 137
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 5074,
            "time": 3.0381999015808105,
            "dport": 5355,
            "sport": 51001
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 5402,
            "time": 1.0404820442199707,
            "dport": 5355,
            "sport": 53595
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 5730,
            "time": 3.049543857574463,
            "dport": 5355,
            "sport": 53848
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 6058,
            "time": 1.551386833190918,
            "dport": 5355,
            "sport": 54255
        },
        {
            "src": "192.168.56.101",
            "dst": "224.0.0.252",
            "offset": 6386,
            "time": -0.09698915481567383,
            "dport": 5355,
            "sport": 55314
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 6714,
            "time": 1.5474820137023926,
            "dport": 1900,
            "sport": 1900
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 16512,
            "time": 1.0627899169921875,
            "dport": 3702,
            "sport": 49152
        },
        {
            "src": "192.168.56.101",
            "dst": "239.255.255.250",
            "offset": 24896,
            "time": 3.141326904296875,
            "dport": 1900,
            "sport": 53598
        }
    ],
    "dns_servers": [],
    "http": [],
    "icmp": [],
    "smtp": [],
    "tcp": [],
    "smtp_ex": [],
    "mitm": [],
    "hosts": [],
    "pcap_sha256": "45a9a8a9ec144eed7297126c9cb644c5f7fe835c3a53f65fe60b19396a4ab0ec",
    "dns": [],
    "http_ex": [],
    "domains": [],
    "dead_hosts": [],
    "sorted_pcap_sha256": "d754c94b7eed23a7b2da7dee8b311fe8eaebd78113c5268b4eb19cccefecb7dd",
    "irc": [],
    "https_ex": []
}

Screenshots

TSAdBot.exe removal instructions

The instructions below shows how to remove TSAdBot.exe with help from the FreeFixer removal tool. Basically, you install FreeFixer, scan your computer, check the TSAdBot.exe file for removal, restart your computer and scan it again to verify that TSAdBot.exe has been successfully removed. Here are the removal instructions in more detail:

1. Download and install FreeFixer: http://www.freefixer.com/download.html
2. Start FreeFixer and press the Start Scan button. The scan will finish in approximately five minutes.

   
3. When the scan is finished, locate TSAdBot.exe in the scan result and tick the checkbox next to the TSAdBot.exe file. Do not check any other file for removal unless you are 100% sure you want to delete it. Tip: Press CTRL-F to open up FreeFixer's search dialog to quickly locate TSAdBot.exe in the scan result.

   

   

   C:\Program Files (x86)\TimeSink\AdGateway\TSAdBot.exe

   
4. Scroll down to the bottom of the scan result and press the Fix button. FreeFixer will now delete the TSAdBot.exe file.

   
5. Restart your computer.
6. Start FreeFixer and scan your computer again. If TSAdBot.exe still remains in the scan result, proceed with the next step. If TSAdBot.exe is gone from the scan result you're done.
7. If TSAdBot.exe still remains in the scan result, check its checkbox again in the scan result and click Fix.
8. Restart your computer.
9. Start FreeFixer and scan your computer again. Verify that TSAdBot.exe no longer appear in the scan result.

Folder name variants

TSAdBot.exe may also be located in other folders than C:\Program Files (x86)\TimeSink\AdGateway\. The most common variants are listed below:

• C:\Program Files\TimeSink\AdGateway\

Error Messages

• Privacy Policy