SafePCRepair Internet Explorer Toolbar
What is SafePCRepair Internet Explorer Toolbar?
SafePCRepair Internet Explorer Toolbar is software application developed by Mindspark Interactive Network. It is most commonly found on computers running Windows 7 with nearly 64.96% of installations running this operating system. SafePCRepair Internet Explorer Toolbar's installer is typically 8.00 MB in size and installs around 46 files. The most common release is 11.0.9600.16438 with 0.18% of all installations currently using this version.
SafePCRepair Internet Explorer Toolbar is most popular in the United States with 71.85% of installations residing in this country.
SafePCRepair Internet Explorer Toolbar adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.
About SafePCRepair Internet Explorer Toolbar?
SafePCRepair Internet Explorer Toolbar is a web browser extension designed to modify the browser's search and home pages to deliver search advertising revenue. The software is specifically designed to protect and maintain the default browser search engine while also modifying the search provider. This toolbar is commonly bundled with third-party software distributions and installed through bundled offers. It is typically distributed through third-party publishers to maximize installation revenue, with payouts ranging from a few cents to a couple dollars depending on the geographical location of the host. Key features of the toolbar include the ability to change the default search engine, including the browser's built-in search box and address bar, as well as the ability to change the default home page and new tabs while protecting search settings.
Multiple virus scanners have detected malware in SafePCRepair Internet Explorer Toolbar.
Software Behaviors
- Services:
-
- 89barsvc.exe runs as a service named 'ConservativeTalkNowService' (ConservativeTalkNow_4nService).
- Scheduled tasks:
-
- AppIntegrator64.exe is scheduled as a task named 'Price Fountain' (runs daily at 4:45 PM).
- 89medint.exe is scheduled as a task with the class '{CEC2F177-6434-48CF-AEA5-AB1F3AD5E60A}' (runs on registration).
- 89SrchMn.exe is scheduled as a task named 'MetaCrawler' (runs daily at 15:24).
Startup Entries
- Startup tasks:
-
- AppIntegrator64.exe is automatically launched at startup through a scheduled task named 7.
- 89SrchMn.exe is automatically launched at startup through a scheduled task named 3.
- 89medint.exe is automatically launched at startup through a scheduled task named 2.
- 89brmon64.exe is automatically launched at startup through a scheduled task named 5.
- 89brmon.exe is automatically launched at startup through a scheduled task named 4.
- Registry entries:
-
- 89medint.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'MapsGalaxy EPM Support' and executes as "C:\Program Files2\MAPSGA~2\bar\1.bin\39medint.exe" T8EPMSUP.DLL,S.
- 89brmon64.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'MapsGalaxy_39 Browser Plugin Loader 64' and executes as C:\Program Files\MapsGalaxy_39\bar\1.bin\39brmon64.exe.
- 89brmon.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ctfmon.exe' and executes as C:\Program Files3\rundll32.exe C:\Program Files3\lni28.dat,FG00.
- 89SrchMn.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Hoolapp Android' and executes as "C:\users\user\appdata\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized.
Software Details
- URL:
- https://support.mindspark.com
- Support:
- –
- Installation path:
- C:\Program Files\SafePCRepair_89\bar\1.bin
- Uninstaller:
- rundll32 "C:\Program Files\SafePCRepair_89\bar\1.bin\89Bar.dll",O mindsparktoolbarkey="SafePCRepair_89" uninstalltype="IE"
- Size:
- 8.00 MB
- Language:
- English
SafePCRepair Internet Explorer Toolbar Executable Details
- Primary executable:
- 89bar.dll
- Name:
- SafePCRepair Internet Explorer Toolbar
- Path:
- C:\Program Files\SafePCRepair_89\bar\1.bin\89bar.dll
- MD5:
- 3f7583821989e49412f4a3531f04744b
- SHA-1:
- –
- SHA-256:
- –
| File Type | Filename | MD5 |
|---|---|---|
|
DLL
|
b927852e2e860edbc4d2ec2b436cfaba | |
|
DLL
|
05e7f2c19ae83dd990a6960a19755752 | |
|
EXE
|
89medint.exe
Malware
|
afb7164d26ec83773352b226b9b80bb9 |
|
EXE
|
635f5e4b01597d0baf2422245c8ff541 | |
|
DLL
|
3f7583821989e49412f4a3531f04744b | |
|
DLL
|
6146de22c9e7684123e93c291c725e31 |