» 39bar.dll
Overview
Analysis
File Details
Behaviors (4)
Programs (10)

39bar.dll

Mindspark Toolbar Platform for Internet Explorer

Mindspark Interactive Network

This is installed with the Mindspark web browser extension for Internet Explorer and is the toolbar addon that is displayed in IE's interface as well as the BHO. The Mindspark toolbar provides various functions as well as a search box which is used as the Ask.com search provider (the toolbar will reset the home/search pages to this provider). The module 39bar.dll, “Mindspark Toolbar Platform” by Mindspark Interactive Network has been detected as a potentially unwanted program by 8 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘Toolbar BHO’. Additionally, the file is typically installed by a number of programs including PuzzleGamesDaily Internet Explorer Toolbar by Mindspark Interactive Network and MyNewsGuide Internet Explorer Toolbar by Mindspark Interactive Network, both potentially unwanted software.

File name:

39bar.dll

Publisher:

Mindspark (signed by Mindspark Interactive Network)

Product:

Mindspark Toolbar Platform for Internet Explorer

Description:

Mindspark Toolbar Platform

Version:

2.5.15.19

MD5:

e9c571293c3249d5a133e2e60b9f1db6

SHA-1:

0e31e57e91102bc37d9258f7f2f534e9aaa8fcf4

SHA-256:

7336dabb5c74887485a1e2fdfaf62ec262372b5d097a40d7867586905ed5edb4

Scanner detections:

8 / 68

Status:

Potentially unwanted

Explanation:

Part of the MyWebSearch/Mindspark/Ask web browser extension and toolbar.

Analysis date:

5/20/2024 3:18:42 PM UTC (today)

Scan engine

Detection

Engine version

avast!

Win32:Mindspark-A [PUP]

2014.9-150628

Bkav FE

W32.HfsAdware

1.3.0.6979

Dr.Web

Adware.MyWebSearch.106

9.0.1.0179

ESET NOD32

Win32/Toolbar.MyWebSearch.AS potentially unwanted (variant)

9.11849

F-Prot

W32/Mywebsearch.K.gen

v6.4.7.1.166

Malwarebytes

PUP.Optional.Mindspark.A

v2015.06.28.05

Reason Heuristics

Plugin.MyWebSearch.Mindspark.Toolbar (M)

15.6.28.5

VIPRE Antivirus

MyWebSearch.J

41472

File size:

1016.5 KB (1,040,920 bytes)

Product version:

2.5.15.19

Original file name:

t8Bar.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\mapsgalaxy_39\bar\1.bin\39bar.dll

Digital Signature

Signed by:

Mindspark Interactive Network

Authority:

VeriSign, Inc.

Valid from:

4/19/2015 5:00:00 PM

Valid to:

6/18/2018 4:59:59 PM

Subject:

CN=Mindspark Interactive Network, O=Mindspark Interactive Network, L=Yonkers, S=New York, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

438D4291E43C2DFFEEAAAEE5B6C070B5

Registration

CLSIDs:

{1e91a655-bb4b-4693-a05e-2edebc4c9d89}, {364ea597-e728-4ce4-bb4a-ed846ef47970}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

6/17/2015 7:46:23 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

12288:DhL5JrxYQ+Q/pKDe9YaHZoqQv7zk78645W8o8welio:FF1xYQ+QBKDe9TKqmPd64M8o8w+

Entry address:

0x680D7

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 65, 5E, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 08, 57, 85, F6, 74, 07, 8B, 7D, 0C, 85, FF, 75, 15, E8, A2, F3, FF, FF, 6A, 16, 5E, 89, 30, E8, DB, 23, 00, 00, 8B, C6, 5F, 5E, 5D, C3, 8B, 45, 10, 85, C0, 75, 05, 66, 89, 06, EB, DF, 8B, D6, 2B, D0, 0F, B7, 08, 66, 89, 0C, 02, 83, C0, 02, 66, 85, C9, 74, 03, 4F, 75, EE, 33, C0, 85, FF, 75, D4, 66, 89, 06, E8, 62, F3, FF, FF, 6A, 22, 59... 
[+]

Entropy:

6.3763

Code size:

511 KB (523,264 bytes)

2 Internet Explorer BHOs

CLSID:

{1e91a655-bb4b-4693-a05e-2edebc4c9d89}

CLSID name:

Toolbar BHO

CLSID:

{61673209-76a0-4a62-ab12-014ce1a1b00e}

CLSID name:

Toolbar BHO

Internet Explorer Toolbar

CLSID:

{e0c22e6b-a7bd-43f6-b5cc-020e06d11a45}

CLSID name:

HowToSimplified

Internet Explorer Web Browser

Name:

{E0C22E6B-A7BD-43F6-B5CC-020E06D11A45}

The file 39bar.dll has been discovered within the following programs.

Action Classic Games Internet Explorer Toolbar by Mindspark Interactive Network

support.mindspark.com

69% remove it

CouponXplorer Firefox Toolbar by Mindspark Interactive Network

Installs a potentailly unwanted Ask.com powered toolbr - "As part of the download process for the Toolbar, you may be given the option to reset your homepage and/or reset your new tab page to an Ask® home page and new tab product.

70% remove it

DictionaryBoss Internet Explorer Toolbar by Mindspark Interactive Network

Publisher's description - “The My Web Search Toolbar sends a configuration request when you start your browser.”

71% remove it

DownSpeedTest Internet Explorer Toolbar by Mindspark Interactive Network

64% remove it

EasyPDFCombine Internet Explorer Toolbar by Mindspark Interactive Network

Publisher's description - “When you installed one of our applications you were presented with the option to change your homepage and search settings to Ask.com. ”

63% remove it

Elite Unzip Internet Explorer Toolbar by Mindspark Interactive Network

Publisher's description - “The Toolbar, in the course of processing a given search query, sends a request to our servers.”

64% remove it

FilmFanatic Internet Explorer Toolbar by Mindspark Interactive Network

73% remove it

HeadlineAlley Internet Explorer Toolbar by Mindspark Interactive Network

HeadlineAlley is a Mindspark web browser toolbar that is designed to modify the users search and home pages to Ask.com (or MyWebSearch).

63% remove it

HowToSimplified Internet Explorer Toolbar by Mindspark Interactive Network

Publisher's description - “The My Web Search Toolbar, in the course of processing a given search query, sends a request to our servers.”

74% remove it

InboxAce Internet Explorer Toolbar by Mindspark Interactive Network

This is a web browser extension/toolbar that will modify the user's home page and search provider to Ask.com.

70% remove it

Latest 20 of 20 programs

Remove 39bar.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.