home

4jbrmon64.exe

VER_PRODUCT_NAME

Mindspark Interactive Network

This is the startup monitor for the Mindspark/MyWebSearch toolbar and will monitor the toolbar within the browser to make sure it loads and updates. The application 4jbrmon64.exe by Mindspark Interactive Network has been detected as a potentially unwanted program by 4 anti-malware scanners. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘RadioRage_4j Browser Plugin Loader 64’. Additionally, the file is typically installed by a number of programs including MapsGalaxy Internet Explorer Toolbar by Mindspark Interactive Network and FromDocToPDF Internet Explorer Toolbar by Mindspark Interactive Network, both potentially unwanted software. This version of the file will bundle a Mindspark/MyWebSearch Toolbar, a potentially unwanted web browser extension.
Publisher:
VER_COMPANY_NAME  (signed by Mindspark Interactive Network)

Product:
VER_PRODUCT_NAME

Description:
VER_DESCRIPTION

Version:
1,0,2,0

MD5:
49febd5855c7102dff77c01c7527e240

SHA-1:
6bd6e423590c2f60dedf91d42713a7f9148178d4

SHA-256:
e63402c9cf35679ba2137fdf92ccfb6e0511cdcaef0e52c6fb7a6159c34c2595

Scanner detections:
4 / 68

Status:
Potentially unwanted

Analysis date:
4/26/2024 9:32:04 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Mindspark-A [PUP]
2014.9-140420

AVG
Zango
2015.0.3498

Reason Heuristics
PUP.Startup.MindsparkInteractiveNetwork.J
14.8.8.1

VIPRE Antivirus
MyWebSearch.J
25668

File size:
69.6 KB (71,240 bytes)

Product version:
2,3,0,0

Copyright:
VER_COPYRIGHT

Original file name:
VER_EXE_FILENAME.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\radiorage_4j\bar\2.bin\4jbrmon64.exe

Digital Signature
Signed by:
Mindspark Interactive Network

Authority:
VeriSign, Inc.

Valid from:
4/9/2012 8:00:00 PM

Valid to:
5/6/2015 7:59:59 PM

Subject:
CN=Mindspark Interactive Network, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Mindspark Interactive Network, L=White Plains, S=NewYork, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
098417F7EA6406EC7B320590E17A65B7

File PE Metadata
Compilation timestamp:
11/1/2013 7:58:29 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
768:RhjQA3fRpuZJQDltS/TmGMUM3ZaNjv+z08fNpghePaEyOHyZhkDaXrcxwniBG9E4:Ldm/T+3Cu1f3a+aEyOyZlrcW9JALeOc

Entry address:
0x2794

Entry point:
48, 83, EC, 28, E8, 3F, 1E, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, 48, 85, C9, 74, 37, 53, 48, 83, EC, 20, 4C, 8B, C1, 48, 8B, 0D, 0C, E5, 00, 00, 33, D2, FF, 15, 54, 79, 00, 00, 85, C0, 75, 17, E8, 6F, 0B, 00, 00, 48, 8B, D8, FF, 15, 72, 78, 00, 00, 8B, C8, E8, 17, 0B, 00, 00, 89, 03, 48, 83, C4, 20, 5B, C3, CC, CC, CC, 48, 89, 4C, 24, 08, 48, 81, EC, 88, 00, 00, 00, 48, 8D, 0D, 45, D8, 00, 00, FF, 15, 57, 79, 00, 00, 48, 8B, 05, 30, D9, 00, 00, 48, 89, 44, 24, 58, 45, 33, C0, 48, 8D, 54, 24...
 
[+]

Entropy:
6.0441

Code size:
34 KB (34,816 bytes)

2 Startup Files (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
RadioRage_4j Browser Plugin Loader 64

Command:
C:\Program Files\radiorage_4j\bar\2.bin\4jbrmon64.exe

Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
TotalRecipeSearch_14 Browser Plugin Loader 64

Command:
C:\Program Files\totalrecipesearch_14\bar\1.bin\14brmon64.exe


The file 4jbrmon64.exe has been discovered within the following programs.

DailyBibleGuide Internet Explorer Toolbar  by Mindspark Interactive Network
DailyBibleGuide is a Mindspark web browser toolbar that is designed to modify the users search and home pages to Ask.com (or MyWebSearch).
support.mindspark.com
68% remove it
FromDocToPDF Internet Explorer Toolbar  by Mindspark Interactive Network
FromDocToPDF Internet Explorer Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers.
62% remove it
HowToSimplified Internet Explorer Toolbar  by Mindspark Interactive Network
Installs a potentailly unwanted Ask.com powered toolbr - "As part of the download process for the Toolbar, you may be given the option to reset your homepage and/or reset your new tab page to an Ask® home page and new tab product.
74% remove it
InboxAce Internet Explorer Toolbar  by Mindspark Interactive Network
This is a web browser extension/toolbar that will modify the user's home page and search provider to Ask.com.
70% remove it
MapsGalaxy Internet Explorer Toolbar  by Mindspark Interactive Network
MapsGalaxy Internet Explorer Toolbar installs is a web browser extension and allows provides users the means to search the Internet with MyWebSearch, a potentially unwanted program that changes and redircts all of your search results as well as DNS errors, and modifies your home page to mywebsearch.
75% remove it
RadioRage Internet Explorer Toolbar  by Mindspark Interactive Network
RadioRage Internet Explorer Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers.
62% remove it
TelevisionFanatic Internet Explorer Toolbar  by Mindspark Interactive Network
TelevisionFanatic Internet Explorer Toolbar installs is a web browser extension and allows provides users the means to search the Internet with MyWebSearch, a potentially unwanted program that changes and redircts all of your search results as well as DNS errors, and modifies your home page to mywebsearch.
75% remove it
TotalRecipeSearch Internet Explorer Toolbar  by Mindspark Interactive Network
Functionality of the toolbar includes: - Changing the web browser's default home page to MyWebSearch.com. - Changing the browser's search provider, built-in search box to MyWebSearch.com. - Ability to modify the 'new tab' functionality to launch the modified search portal page.
70% remove it
 
Powered by Should I Remove It?

Remove 4jbrmon64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.