QuotationCafe Internet Explorer Toolbar
What is QuotationCafe Internet Explorer Toolbar?
QuotationCafe Internet Explorer Toolbar is software application developed by Mindspark Interactive Network. It is most commonly found on computers running Windows 7 with nearly 60.29% of installations running this operating system. QuotationCafe Internet Explorer Toolbar's installer is typically 8.00 MB in size and installs around 49 files.
QuotationCafe Internet Explorer Toolbar is most popular in the United States with 85.19% of installations residing in this country.
QuotationCafe Internet Explorer Toolbar adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.
About QuotationCafe Internet Explorer Toolbar?
QuotationCafe is a web browser toolbar developed by Mindspark that customizes the user's search and home pages to Ask.com or MyWebSearch.
Multiple virus scanners have detected malware in QuotationCafe Internet Explorer Toolbar.
Software Behaviors
- Services:
-
- 45barsvc.exe runs as a service named 'InboxNowService' (InboxNow_drService).
- Scheduled tasks:
-
- AppIntegrator64.exe is scheduled as a task named 'Price Fountain' (runs daily at 4:45 PM).
- 45medint.exe is scheduled as a task with the class '{CEC2F177-6434-48CF-AEA5-AB1F3AD5E60A}' (runs on registration).
- 45SrchMn.exe is scheduled as a task named 'MetaCrawler' (runs daily at 15:24).
Startup Entries
- Startup tasks:
-
- AppIntegrator64.exe is automatically launched at startup through a scheduled task named 7.
- 45SrchMn.exe is automatically launched at startup through a scheduled task named 3.
- 45medint.exe is automatically launched at startup through a scheduled task named 2.
- APPINTEGRATOR.EXE is automatically launched at startup through a scheduled task named OnlineMapFinder AppIntegrator 32-bit_Reg_HKLMWow6432Run.
- Registry entries:
-
- 45medint.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'MapsGalaxy EPM Support' and executes as "C:\Program Files2\MAPSGA~2\bar\1.bin\39medint.exe" T8EPMSUP.DLL,S.
- APPINTEGRATOR.EXE is loaded in the current user (HKCU) registry as an auto-starting executable named 'PowerSuite' and executes as "C:\Program Files1\Uniblue\POWERS~1\launcher.exe" delay 20000 -m.
- AppIntegrator64.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Hoolapp Android' and executes as "C:\users\user\appdata\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized.
- 45SrchMn.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Hoolapp Android' and executes as "C:\users\user\appdata\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized.
Software Details
- URL:
- https://support.mindspark.com
- Support:
- –
- Installation path:
- C:\Program Files\QuotationCafe_45\bar\1.bin
- Uninstaller:
- rundll32 "C:\Program Files\QuotationCafe_45\bar\1.bin\45Bar.dll",O mindsparktoolbarkey="QuotationCafe_45" uninstalltype="IE"
- Size:
- 8.00 MB
- Language:
- English
QuotationCafe Internet Explorer Toolbar Executable Details
- Primary executable:
- 45bar.dll
- Name:
- QuotationCafe Internet Explorer Toolbar
- Path:
- C:\Program Files\QuotationCafe_45\bar\1.bin\45bar.dll
- MD5:
- f86336c978311761bc3e2a80b08d46bc
- SHA-1:
- –
- SHA-256:
- –
| File Type | Filename | MD5 |
|---|---|---|
|
DLL
|
af8c7080961317cac447e67700994ca4 | |
|
EXE
|
45barsvc.exe
Malware
|
b3dae11b5316528e6853a94d39e141e3 |
|
DLL
|
071d962e0e256dcf0b360b59ad6897eb | |
|
DLL
|
98e56fd43f64538baa9b1f367951091f | |
|
DLL
|
a4c73c71941826db74af6598336eda99 | |
|
DLL
|
5de55f0f8967fdb31ee5b259a5aba975 | |
|
EXE
|
45medint.exe
Malware
|
4de35f24efb8446518e0586fd54043b8 |
|
EXE
|
635f5e4b01597d0baf2422245c8ff541 | |
|
DLL
|
f86336c978311761bc3e2a80b08d46bc |