What is EasyPDFCombine Internet Explorer Toolbar?

EasyPDFCombine Internet Explorer Toolbar is software application developed by Mindspark Interactive Network. It is most commonly found on computers running Windows 7 with nearly 57.38% of installations running this operating system. EasyPDFCombine Internet Explorer Toolbar's installer is typically 10.00 MB in size and installs around 48 files.

EasyPDFCombine Internet Explorer Toolbar is most popular in the United States with 42.43% of installations residing in this country.

Multiple virus scanners have detected malware in EasyPDFCombine Internet Explorer Toolbar.

AppIntegrator64.exe (MD5: dde9c9b89b413a5868d7358511db5a6a) has been flagged by 10 scanners:

Scanner Software	Version	Result
AhnLab-V3	2014.10.25.00	PUP/Win32.MyWebSearch
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	14.0.0.4040	MyWebSearch
AVware	1.5.0.21	MyWebSearch.J (v)
Baidu-International	3.5.1.41473	Adware.Win32.MyWebSearch.bQ
Kaspersky	12.0.0.1225	not-a-virus:WebToolbar.Win32.MyWebSearch.si
Malwarebytes	1.75.0.1	PUP.Optional.MindSpark
Qihoo-360	1.0.0.1015	Win32/Virus.WebToolbar.30b
Tencent	1.0.0.1	Win32.Trojan.Falsesign.Wwof
VIPRE Antivirus	34214	MyWebSearch.J (v) (not malicious)

APPINTEGRATOR.EXE (MD5: b83db01d9e4bd53c9b65214806b54eb7) has been flagged by 16 scanners:

Scanner Software	Version	Result
AhnLab-V3	2014.11.21.00	PUP/Win32.MyWebSearch
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	15.0.0.4189	MyWebSearch
AVware	1.5.0.21	MyWebSearch.J (v)
Baidu-International	3.5.1.41473	Adware.Win32.MyWebSearch.bQ
ESET-NOD32	10755	a variant of Win32/Toolbar.MyWebSearch.AJ
Fortinet FortiGate	5.0.999.0	Riskware/MyWebSearch
G Data	24	Win32.Adware.Mindspark.C
Kaspersky	15.0.1.10	not-a-virus:WebToolbar.Win32.MyWebSearch.si
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.MyWebSearch.si.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.MindSpark
Qihoo-360	1.0.0.1015	Win32/Virus.WebToolbar.30b
Tencent	1.0.0.1	Win32.Trojan.Falsesign.Pepp
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V1106
VIPRE Antivirus	34964	MyWebSearch.J (v) (not malicious)
Zillya	2.0.0.1988	Adware.MyWebSearch.Win32.1695

ceSrcAs.dll (MD5: aa5270eb6804dadda21905c65f2ab255) has been flagged by 17 scanners:

Scanner Software	Version	Result
AhnLab-V3	2014.11.21.00	PUP/Win32.MyWebSearch
Antiy-AVL	1.0.0.1	RiskWare[WebToolbar:not-a-virus]/Win32.MyWebSearch
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	15.0.0.4189	MyWebSearch
AVware	1.5.0.21	MyWebSearch.J (v)
Baidu-International	3.5.1.41473	Adware.Win32.MyWebSearch.bQ
ESET-NOD32	10755	a variant of Win32/Toolbar.MyWebSearch.AK
Fortinet FortiGate	5.0.999.0	Riskware/MyWebSearch
G Data	24	Win32.Adware.Mindspark.C
Kaspersky	15.0.1.10	not-a-virus:WebToolbar.Win32.MyWebSearch.si
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.MyWebSearch.si.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.MindSpark
Qihoo-360	1.0.0.1015	Win32/Virus.WebToolbar.30b
Tencent	1.0.0.1	Win32.Trojan.Falsesign.Lndy
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V1106
VIPRE Antivirus	34964	MyWebSearch.J (v) (not malicious)
Zillya	2.0.0.1988	Adware.MyWebSearch.Win32.902

cemedint.exe (MD5: 4de35f24efb8446518e0586fd54043b8) has been flagged by 15 scanners:

Scanner Software	Version	Result
AhnLab-V3	2014.10.25.00	PUP/Win32.MyWebSearch
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	14.0.0.4040	MyWebSearch
AVware	1.5.0.21	MyWebSearch.J (v)
Baidu-International	3.5.1.41473	Adware.Win32.MyWebSearch.bQ
ESET-NOD32	10616	a variant of Win32/Toolbar.MyWebSearch.AJ
Fortinet FortiGate	5.0.999.0	Riskware/MyWebSearch
G Data	24	Win32.Adware.Mindspark.C
Kaspersky	12.0.0.1225	not-a-virus:WebToolbar.Win32.MyWebSearch.si
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.MyWebSearch.si.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.MindSpark
Qihoo-360	1.0.0.1015	Win32/Virus.WebToolbar.30b
Tencent	1.0.0.1	Win32.Trojan.Falsesign.Pial
VIPRE Antivirus	34214	MyWebSearch.J (v) (not malicious)
Zillya	2.0.0.1966	Adware.MyWebSearch.Win32.1392

cebarsvc.exe (MD5: eb0b3c1577773cb81ebc0a2507fccfdc) has been flagged by 14 scanners:

Scanner Software	Version	Result
AhnLab-V3	2014.10.25.00	PUP/Win32.MyWebSearch
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	14.0.0.4040	MyWebSearch
AVware	1.5.0.21	MyWebSearch.J (v)
Baidu-International	3.5.1.41473	Adware.Win32.MyWebSearch.bQ
ESET-NOD32	10616	a variant of Win32/Toolbar.MyWebSearch.AE
Fortinet FortiGate	5.0.999.0	Riskware/MyWebSearch
G Data	24	Win32.Adware.Mindspark.C
Kaspersky	12.0.0.1225	not-a-virus:WebToolbar.Win32.MyWebSearch.si
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.MyWebSearch.si.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.MindSpark
Qihoo-360	1.0.0.1015	Win32/Virus.WebToolbar.30b
Tencent	1.0.0.1	Win32.Trojan.Falsesign.Ajlj
VIPRE Antivirus	34214	MyWebSearch.J (v) (not malicious)

Software Behaviors

Services:

cebarsvc.exe runs as a service named 'EasyPDFCombineService' (EasyPDFCombine_ceService).

Startup Entries

Startup tasks:

AppIntegrator64.exe is automatically launched at startup through a scheduled task named OnlineMapFinder AppIntegrator 64-bit_Reg_HKLMWow6432Run.
APPINTEGRATOR.EXE is automatically launched at startup through a scheduled task named OnlineMapFinder AppIntegrator 32-bit_Reg_HKLMWow6432Run.

Registry entries:

APPINTEGRATOR.EXE is loaded in the current user (HKCU) registry as an auto-starting executable named 'PowerSuite' and executes as "C:\Program Files1\Uniblue\POWERS~1\launcher.exe" delay 20000 -m.
AppIntegrator64.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Hoolapp Android' and executes as "C:\users\user\appdata\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized.

Software Details

URL:

https://support.mindspark.com

Support:

–

Installation path:

C:\Program Files\EasyPDFCombine_ce\bar\1.bin

Uninstaller:

rundll32 "C:\Program Files\EasyPDFCombine_ce\bar\1.bin\ceBar.dll",O mindsparktoolbarkey="EasyPDFCombine_ce" uninstalltype=IE

Size:

10.00 MB

Language:

English

EasyPDFCombine Internet Explorer Toolbar Executable Details

Primary executable:

cebar.dll

Name:

EasyPDFCombine Internet Explorer Toolbar

Path:

C:\Program Files\EasyPDFCombine_ce\bar\1.bin\cebar.dll

MD5:

6eae99b0bd80a16a148bb37dd84b71db

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

cescript.dll

dee010833f57f6581be7470f8773049d

DLL

ceregiet.dll

6b4eb4f6694fc5592a7a59dad0a33950

DLL

cereghk.dll

08fef020b225248df46a3bb78ed3bd58

DLL

cePlugin.dll

1b4ff26887c8e9a20735c94c1558238c

DLL

cemlbtn.dll

e751e72245ed43322770a1dcdf690fe0

EXE

cemedint.exe

Adware

4de35f24efb8446518e0586fd54043b8

DLL

ceidle.dll

1b1d7ec0ed79ff36411d2c381043a125

DLL

cehttpct.dll

1439126de0d3a7476032b92cf651c68d

DLL

cehtmlmu.dll

9f9e98996b9ca799dafdd503cbb8f090

DLL

cehkstub.dll

51d3c41e27f7589bd63e6bd588073dfc