What is Utility Chest Firefox Toolbar?

Utility Chest Firefox Toolbar is software application developed by Mindspark Interactive Network. It is most commonly found on computers running Windows 7 with nearly 65.12% of installations running this operating system. Utility Chest Firefox Toolbar's installer is typically 8.00 MB in size and installs around 20 files.

Utility Chest Firefox Toolbar is most popular in the United States with 38.86% of installations residing in this country.

About Utility Chest Firefox Toolbar?

The software facilitates the installation of a Mindspark toolbar in the user's web browser. This toolbar collects and stores information about the user's web browsing patterns for the purpose of providing personalized services and targeted advertisements.

Multiple virus scanners have detected malware in Utility Chest Firefox Toolbar.

49brmon.exe (MD5: 3e1dfacf17584f0aa2372f993ec15618) has been flagged by 17 scanners:

Scanner Software	Version	Result
Avira AntiVir	7.11.63.174	TR/Trash.Gen
avast!	6.0.1289.0	Win32:FunWeb-K [PUP]
Comodo Security	15462	UnclassifiedMalware
Dr.Web		Trojan.Damaged.1
IKARUS anti.virus	T3.1.4.0.0	Trojan.Trash
McAfee-GW-Edition	2012.1	Heuristic.BehavesLike.Exploit.CodeExec.I
PC Tools	9.0.0.2	HeurEngine.MalPE
SUPERAntiSpyware	5.6.0.1008	Trojan.Agent/Gen-Nullo[Short]
Symantec	20121.3.0.76	Bloodhound.MalPE
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.RCBH1KE
AVG	13.0.0.3169	Zango
ESET-NOD32	8831	Win32/Toolbar.MyWebSearch.T
F-Prot	4.7.1.166	W32/Mywebsearch.H2.gen!Eldorado
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
VIPRE Antivirus	21740	MyWebSearch.J (v) (not malicious)
Bkav FE	1.3.0.4261	W32.Clod028.Trojan.f1cd
nProtect	2013-10-29.04	Adware/W32.Agent.62864

NP49Stub.dll (MD5: d28039a93f6c0745aeb3faa4fbe29667) has been flagged by 9 scanners:

Scanner Software	Version	Result
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	13.0.0.3169	Zango
ESET-NOD32	8831	Win32/Toolbar.MyWebSearch.T
F-Prot	4.7.1.166	W32/Mywebsearch.H2.gen!Eldorado
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F47V0921
VIPRE Antivirus	21740	MyWebSearch.J (v) (not malicious)
Bkav FE	1.3.0.4261	W32.Clod028.Trojan.f1cd
nProtect	2013-10-29.04	Adware/W32.Agent.62864

49SrchMn.exe (MD5: fb85f333d10b1475650c4304f99a1ece) has been flagged by 21 scanners:

Scanner Software	Version	Result
Antiy-AVL	2.0.3.7	Trojan/Win32.Generic
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	13.0.0.3169	Skodna.Generic.AOF
Bkav FE	1.3.0.4613	W32.Cloddd7.Trojan.8c0b
Dr.Web		Adware.MyWebSearch.47
ESET-NOD32	9262	Win32/Toolbar.MyWebSearch.W
K7 AntiVirus	9.175.10766	Trojan ( 0047e1181 )
K7GW	9.175.10766	Trojan ( 0047e1181 )
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Undef.(kcloud)
NANO AntiVirus	0.28.0.57029	Trojan.Win32.MyWebSearch.crhhqy
nProtect	2014-01-08.01	Trojan/W32.Agent.44784.D
VIPRE Antivirus	25210	MyWebSearch.J (v) (not malicious)
Avira AntiVir	7.11.63.174	TR/Trash.Gen
Comodo Security	15462	UnclassifiedMalware
IKARUS anti.virus	T3.1.4.0.0	Trojan.Trash
McAfee-GW-Edition	2012.1	Heuristic.BehavesLike.Exploit.CodeExec.I
PC Tools	9.0.0.2	HeurEngine.MalPE
SUPERAntiSpyware	5.6.0.1008	Trojan.Agent/Gen-Nullo[Short]
Symantec	20121.3.0.76	Bloodhound.MalPE
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.RCBH1KE
F-Prot	4.7.1.166	W32/Mywebsearch.H2.gen!Eldorado

49SrcAs.dll (MD5: cb31249537d2758f73046888aa02ca7a) has been flagged by 5 scanners:

Scanner Software	Version	Result
avast!	8.0.1489.320	Win32:FunWeb-K [PUP]
AVG	13.0.0.3169	AdInstaller.FunWeb
Bkav FE	1.3.0.4261	W32.Clod028.Trojan.f1cd
nProtect	2013-10-29.04	Adware/W32.Agent.62864
VIPRE Antivirus	22822	MyWebSearch.J (v) (not malicious)

Startup Entries

Registry entries:

49brmon.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ctfmon.exe' and executes as C:\Program Files3\rundll32.exe C:\Program Files3\lni28.dat,FG00.

Software Details

URL:

https://support.mindspark.com

Support:

–

Installation path:

C:\Program Files\UtilityChest_49\bar\1.bin

Uninstaller:

rundll32 "C:\Program Files\UtilityChest_49\bar\1.bin\49Bar.dll",O mindsparktoolbarkey="UtilityChest_49" uninstalltype="FF"

Size:

8.00 MB

Language:

English

Utility Chest Firefox Toolbar Executable Details

Primary executable:

49bar.dll

Name:

Utility Chest Firefox Toolbar

Path:

C:\Program Files\UtilityChest_49\bar\1.bin\49bar.dll

MD5:

f86336c978311761bc3e2a80b08d46bc

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

NP49Stub.dll

Adware

d28039a93f6c0745aeb3faa4fbe29667

EXE

49SrchMn.exe

Malware

fb85f333d10b1475650c4304f99a1ece

DLL

49SrcAs.dll

Malware

cb31249537d2758f73046888aa02ca7a

DLL

49reghk.dll

071d962e0e256dcf0b360b59ad6897eb

DLL

49hkstub.dll

98e56fd43f64538baa9b1f367951091f

DLL

49regiet.dll

a4c73c71941826db74af6598336eda99

DLL

49regfft.dll

5de55f0f8967fdb31ee5b259a5aba975

EXE

49medint.exe

04826c949a4de20b5a95ad88363ea3c6

EXE

49highin.exe

635f5e4b01597d0baf2422245c8ff541

DLL