YourLocalLotto Toolbar Internet Explorer Toolbar
What is YourLocalLotto Toolbar Internet Explorer Toolbar?
YourLocalLotto Toolbar Internet Explorer Toolbar is software application developed by Mindspark Interactive Network. It is most commonly found on computers running Windows 7 with nearly 54.35% of installations running this operating system. YourLocalLotto Toolbar Internet Explorer Toolbar's installer is typically 10.00 MB in size and installs around 52 files.
YourLocalLotto Toolbar Internet Explorer Toolbar is most popular in the United States with 91.52% of installations residing in this country.
YourLocalLotto Toolbar Internet Explorer Toolbar adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.
About YourLocalLotto Toolbar Internet Explorer Toolbar?
The YourLocalLotto Toolbar is a web browser extension created by Mindspark that is designed to customize users' search and home pages to Ask.com or MyWebSearch.
Multiple virus scanners have detected malware in YourLocalLotto Toolbar Internet Explorer Toolbar.
Software Behaviors
- Services:
-
- 20barsvc.exe runs as a service named 'InboxNowService' (InboxNow_drService).
- Scheduled tasks:
-
- AppIntegrator64.exe is scheduled as a task named 'Price Fountain' (runs daily at 4:45 PM).
- 20medint.exe is scheduled as a task with the class '{CEC2F177-6434-48CF-AEA5-AB1F3AD5E60A}' (runs on registration).
- 20SrchMn.exe is scheduled as a task named 'MetaCrawler' (runs daily at 15:24).
Startup Entries
- Startup tasks:
-
- AppIntegrator64.exe is automatically launched at startup through a scheduled task named 7.
- 20SrchMn.exe is automatically launched at startup through a scheduled task named 3.
- 20medint.exe is automatically launched at startup through a scheduled task named 2.
- 20brmon.exe is automatically launched at startup through a scheduled task named 4.
- APPINTEGRATOR.EXE is automatically launched at startup through a scheduled task named OnlineMapFinder AppIntegrator 32-bit_Reg_HKLMWow6432Run.
- Registry entries:
-
- 20medint.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'MapsGalaxy EPM Support' and executes as "C:\Program Files2\MAPSGA~2\bar\1.bin\39medint.exe" T8EPMSUP.DLL,S.
- APPINTEGRATOR.EXE is loaded in the current user (HKCU) registry as an auto-starting executable named 'PowerSuite' and executes as "C:\Program Files1\Uniblue\POWERS~1\launcher.exe" delay 20000 -m.
- AppIntegrator64.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Hoolapp Android' and executes as "C:\users\user\appdata\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized.
- 20brmon.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ctfmon.exe' and executes as C:\Program Files3\rundll32.exe C:\Program Files3\lni28.dat,FG00.
- 20SrchMn.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Hoolapp Android' and executes as "C:\users\user\appdata\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized.
Software Details
- URL:
- https://support.mindspark.com
- Support:
- –
- Installation path:
- C:\Program Files\yourlocallotto1_20\bar\1.bin
- Uninstaller:
- rundll32 "C:\Program Files\yourlocallotto1_20\bar\1.bin\20Bar.dll",O mindsparktoolbarkey="yourlocallotto1_20" uninstalltype=IE
- Size:
- 10.00 MB
- Language:
- English
YourLocalLotto Toolbar Internet Explorer Toolbar Executable Details
- Primary executable:
- 20bar.dll
- Name:
- YourLocalLotto Toolbar Internet Explorer Toolbar
- Path:
- C:\Program Files\yourlocallotto1_20\bar\1.bin\20bar.dll
- MD5:
- 3f7583821989e49412f4a3531f04744b
- SHA-1:
- –
- SHA-256:
- –
| File Type | Filename | MD5 |
|---|---|---|
|
DLL
|
48ba5a2c3996d3f9243313a403ea6e85 | |
|
EXE
|
20brmon.exe
Malware
|
35d6caaa9e4d82974a74dbdb53801f98 |
|
DLL
|
b14c33722ed1771c2850a30a79385905 | |
|
DLL
|
bb0df7b4026591f5b6e309dd753ec4f6 | |
|
DLL
|
be63e4a3479225b2afd9714dfdc23555 | |
|
DLL
|
2e17faf6a07fda5ec2a3583496d6987f | |
|
DLL
|
NP20Stub.dll
Malware
|
b3d3fb8fdb03067eee22e372e9067e80 |
|
EXE
|
1983adbec36385d0cedbb89881098684 | |
|
DLL
|
29e27800a11bbaa06e857da4bde64eec | |
|
EXE
|
20SrchMn.exe
Malware
|
3c93215de9cc97c60b1892ad8dbe4411 |