What is Elite Unzip Internet Explorer Toolbar?

Elite Unzip Internet Explorer Toolbar is software application developed by Mindspark Interactive Network. It is most commonly found on computers running Windows 7 with nearly 49.08% of installations running this operating system. Elite Unzip Internet Explorer Toolbar's installer is typically 11.00 MB in size and installs around 54 files.

Elite Unzip Internet Explorer Toolbar is most popular in the United States with 44.27% of installations residing in this country.

Elite Unzip Internet Explorer Toolbar adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

Multiple virus scanners have detected malware in Elite Unzip Internet Explorer Toolbar.

AppIntegrator64.exe (MD5: 1c1fc14dd1028aa438b0f82d0ac76c09) has been flagged by 21 scanners:

Scanner Software	Version	Result
AhnLab-V3	2015.07.11.00	PUP/Win32.MyWebSearch
Antiy-AVL	1.0.0.1	RiskWare[WebToolbar]/Win32.MyWebSearch.si
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	15.0.0.4365	MyWebSearch
AVware	1.5.0.21	MyWebSearch.J (v)
Baidu-International	3.5.1.41473	Adware.Win32.MyWebSearch.bQ
Bkav FE	1.3.0.6979	W64.HfsAdware.1166
Cyren	5.4.16.7	W64/Mywebsearch.L.gen!Eldorado
Dr.Web	7.0.13.5270	Adware.MyWebSearch.82
ESET-NOD32	11923	a variant of Win64/Toolbar.MyWebSearch.F potentially unwanted
F-Prot	4.7.1.166	W64/Mywebsearch.L.gen!Eldorado
Kaspersky	15.0.1.10	not-a-virus:WebToolbar.Win32.MyWebSearch.si
Malwarebytes	2.1.1.1115	PUP.Optional.Mindspark.A
SUPERAntiSpyware	5.6.0.1032	Adware.MindSpark/Variant
Tencent	1.0.0.1	Win32.Trojan.Falsesign.Dxxf
VIPRE Antivirus	41904	MyWebSearch.J (v) (not malicious)
Zillya	2.0.0.2279	Adware.MyWebSearch.Win32.3755
Fortinet FortiGate	5.0.999.0	Riskware/MyWebSearch
G Data	24	Win32.Adware.Mindspark.C
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.MyWebSearch.si.(kcloud)
Qihoo-360	1.0.0.1015	Win32/Virus.WebToolbar.30b

APPINTEGRATOR.EXE (MD5: 6677fe95d591c4718057bacfa9006eb2) has been flagged by 24 scanners:

Scanner Software	Version	Result
AhnLab-V3	2015.07.11.00	PUP/Win32.MyWebSearch
Antiy-AVL	1.0.0.1	RiskWare[WebToolbar]/Win32.MyWebSearch.si
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	15.0.0.4365	MyWebSearch
AVware	1.5.0.21	MyWebSearch.J (v)
Baidu-International	3.5.1.41473	Adware.Win32.MyWebSearch.bQ
Bkav FE	1.3.0.6979	W32.HfsAdware.1166
Cyren	5.4.16.7	W32/Mywebsearch.K.gen!Eldorado
Dr.Web	7.0.13.5270	Adware.MyWebSearch.82
ESET-NOD32	11923	a variant of Win32/Toolbar.MyWebSearch.AJ potentially unwanted
Fortinet FortiGate	5.1.220.0	Riskware/MyWebSearch
F-Prot	4.7.1.166	W32/Mywebsearch.K.gen!Eldorado
G Data	25	Win32.Adware.Mindspark.C
Kaspersky	15.0.1.10	not-a-virus:WebToolbar.Win32.MyWebSearch.si
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.MyWebSearch.si.(kcloud)
Malwarebytes	2.1.1.1115	PUP.Optional.Mindspark.A
Rising Antivirus	25.0.0.17	PE:Trojan.Win32.Generic.18097546!403273030
Tencent	1.0.0.1	Win32.Trojan.Falsesign.Wopz
VIPRE Antivirus	41900	MyWebSearch.J (v) (not malicious)
Zillya	2.0.0.2279	Adware.MyWebSearch.Win32.2370
NANO AntiVirus	0.28.2.62671	Riskware.Win32.Toolbar.dfqike
Qihoo-360	1.0.0.1015	Win32/Virus.WebToolbar.30b
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V0812
SUPERAntiSpyware	5.6.0.1032	Adware.MindSpark/Variant

aaSrchMn.exe (MD5: 3c93215de9cc97c60b1892ad8dbe4411) has been flagged by 16 scanners:

Scanner Software	Version	Result
AhnLab-V3	2014.11.14.00	Trojan/Win32.Buzus
Antiy-AVL	1.0.0.1	RiskWare[WebToolbar:not-a-virus]/Win32.MyWebSearch
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	15.0.0.4189	MyWebSearch
AVware	1.5.0.21	MyWebSearch.J (v)
Baidu-International	3.5.1.41473	Adware.Win32.MyWebSearch.abZ
ESET-NOD32	10722	a variant of Win32/Toolbar.MyWebSearch.AJ
Fortinet FortiGate	5.0.999.0	Riskware/MyWebSearch
G Data	24	Win32.Adware.Mindspark.C
Kaspersky	12.0.0.1225	not-a-virus:WebToolbar.Win32.MyWebSearch.si
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.MyWebSearch.si.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.MindSpark
Qihoo-360	1.0.0.1015	Win32/Virus.WebToolbar.30b
Tencent	1.0.0.1	Win32.Trojan.Falsesign.Lmut
VIPRE Antivirus	34774	MyWebSearch.J (v) (not malicious)
Zillya	2.0.0.1982	Adware.MyWebSearch.Win32.1351

aaSrcAs.dll (MD5: 779662595f6b51bb86f96eccc230f13c) has been flagged by 24 scanners:

Scanner Software	Version	Result
AhnLab-V3	2014.10.18.00	PUP/Win32.MyWebSearch
Antiy-AVL	1.0.0.1	RiskWare[WebToolbar:not-a-virus]/Win32.MyWebSearch
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	14.0.0.4040	MyWebSearch
AVware	1.5.0.21	MyWebSearch.J (v)
Baidu-International	3.5.1.41473	Adware.Win32.MyWebSearch.aRmS
ESET-NOD32	10579	a variant of Win32/Toolbar.MyWebSearch.AC
Fortinet FortiGate	5.1.152.0	Riskware/MyWebSearch
G Data	24	Win32.Adware.Mindspark.C
Kaspersky	12.0.0.1225	not-a-virus:WebToolbar.Win32.MyWebSearch.si
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.MyWebSearch.si.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.MindSpark
NANO AntiVirus	0.28.2.62671	Riskware.Win32.Toolbar.dfqike
Qihoo-360	1.0.0.1015	Win32/Virus.WebToolbar.30b
Tencent	1.0.0.1	Win32.Trojan.Falsesign.Aisc
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V0812
VIPRE Antivirus	34006	MyWebSearch.J (v) (not malicious)
Zillya	2.0.0.1958	Adware.MyWebSearch.Win32.902
Bkav FE	1.3.0.6979	W32.HfsAdware.1166
Dr.Web	7.0.13.5270	Adware.MyWebSearch.82
Rising Antivirus	25.0.0.17	PE:Trojan.Win32.Generic.1809D55E!403297630
SUPERAntiSpyware	5.6.0.1032	Adware.MindSpark/Variant
Cyren	5.4.16.7	W64/Mywebsearch.L.gen!Eldorado
F-Prot	4.7.1.166	W64/Mywebsearch.L.gen!Eldorado

aamedint.exe (MD5: 9d22a2837c2f8af5699bca1690f212d8) has been flagged by 22 scanners:

Scanner Software	Version	Result
AhnLab-V3	2015.07.11.00	PUP/Win32.MyWebSearch
Antiy-AVL	1.0.0.1	RiskWare[WebToolbar]/Win32.MyWebSearch.si
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	15.0.0.4365	MyWebSearch
Baidu-International	3.5.1.41473	Adware.Win32.MyWebSearch.bQ
Bkav FE	1.3.0.6979	W32.HfsAdware.1166
Dr.Web	7.0.13.5270	Adware.MyWebSearch.82
ESET-NOD32	11923	a variant of Win32/Toolbar.MyWebSearch.AJ potentially unwanted
Fortinet FortiGate	5.1.220.0	Riskware/MyWebSearch
G Data	25	Win32.Adware.Mindspark.C
Kaspersky	15.0.1.10	not-a-virus:WebToolbar.Win32.MyWebSearch.si
Malwarebytes	2.1.1.1115	PUP.Optional.Mindspark.A
Qihoo-360	1.0.0.1015	HEUR/QVM20.1.Malware.Gen
Rising Antivirus	25.0.0.17	PE:Trojan.Win32.Generic.1809D55E!403297630
SUPERAntiSpyware	5.6.0.1032	Adware.MindSpark/Variant
Tencent	1.0.0.1	Win32.Trojan.Falsesign.Hufi
VIPRE Antivirus	41904	MyWebSearch.J (v) (not malicious)
Zillya	2.0.0.2279	Adware.MyWebSearch.Win32.1392
AVware	1.5.0.21	MyWebSearch.J (v)
Cyren	5.4.16.7	W64/Mywebsearch.L.gen!Eldorado
F-Prot	4.7.1.166	W64/Mywebsearch.L.gen!Eldorado
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.MyWebSearch.si.(kcloud)

Software Behaviors

Services:

aabarsvc.exe runs as a service named 'FindYourMapsService' (FindYourMaps_dpService).

Scheduled tasks:

AppIntegrator64.exe is scheduled as a task named 'Price Fountain' (runs daily at 4:45 PM).
aamedint.exe is scheduled as a task with the class '{CEC2F177-6434-48CF-AEA5-AB1F3AD5E60A}' (runs on registration).
aaSrchMn.exe is scheduled as a task named 'MetaCrawler' (runs daily at 15:24).

Startup Entries

Startup tasks:

AppIntegrator64.exe is automatically launched at startup through a scheduled task named 7.
aaSrchMn.exe is automatically launched at startup through a scheduled task named 3.
aamedint.exe is automatically launched at startup through a scheduled task named 2.

Software Details

URL:

https://support.mindspark.com

Support:

–

Installation path:

C:\Program Files\EliteUnzip_aa\bar\1.bin

Uninstaller:

rundll32 "C:\Program Files\EliteUnzip_aa\bar\1.bin\aaBar.dll",O mindsparktoolbarkey="EliteUnzip_aa" uninstalltype=IE

Size:

11.00 MB

Language:

English

Elite Unzip Internet Explorer Toolbar Executable Details

Primary executable:

aabar.dll

Name:

Elite Unzip Internet Explorer Toolbar

Path:

C:\Program Files\EliteUnzip_aa\bar\1.bin\aabar.dll

MD5:

96a060cf33a2c42617cf13224a47db07

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

AppIntegrator64.exe

Toolbar

1c1fc14dd1028aa438b0f82d0ac76c09

EXE

APPINTEGRATOR.EXE

Adware

6677fe95d591c4718057bacfa9006eb2

DLL

Hpg64.dll

2bd149504e2890da76ddf3e6a891c5cf

DLL

HPG.DLL

186159381df948b37bfc3bbdb4fd991a

EXE

{12EFE309-469E-4A7E-98F5-7CA042964EE4}.exe

6e6030d3165f4ff152839d789548a135

DLL

aaradio.dll

99314afe1aa7f154766c7b10b1b7e90d

DLL

aaieovr.dll

aedf3f97b88562ce2d5128c9422718c1

DLL

aaauxstb64.dll

a842b26aee3d1312bda37096c8490b39

DLL

aaauxstb.dll

bef81913920b66f99cce1b8b94d2335d

EXE

CrExtPaa.exe

9526b7e071abdd76002bbdbb21beb726

File Type	Filename	MD5
EXE	AppIntegrator64.exe Toolbar	1c1fc14dd1028aa438b0f82d0ac76c09
EXE	APPINTEGRATOR.EXE Adware	6677fe95d591c4718057bacfa9006eb2
DLL	Hpg64.dll	2bd149504e2890da76ddf3e6a891c5cf
DLL	HPG.DLL	186159381df948b37bfc3bbdb4fd991a
EXE	{12EFE309-469E-4A7E-98F5-7CA042964EE4}.exe	6e6030d3165f4ff152839d789548a135
DLL	aaradio.dll	99314afe1aa7f154766c7b10b1b7e90d
DLL	aaieovr.dll	aedf3f97b88562ce2d5128c9422718c1
DLL	aaauxstb64.dll	a842b26aee3d1312bda37096c8490b39
DLL	aaauxstb.dll	bef81913920b66f99cce1b8b94d2335d
EXE	CrExtPaa.exe	9526b7e071abdd76002bbdbb21beb726