» e5plugin.dll
Overview
Analysis
File Details
Programs (1)

e5plugin.dll

Mindspark Toolbar Platform for Internet Explorer

Mindspark Interactive Network

This library is part of the Mindspark toolbar which uses the Ask.com search property to install a web browser extension and modify the browser's search, home and new tab features in order to redirect web searches to the IAC property. The module e5plugin.dll, “Mindspark Toolbar Platform” by Mindspark Interactive Network has been detected as a potentially unwanted program by 12 anti-malware scanners. This file is typically installed with the program ProductivityBoss Internet Explorer Toolbar by Mindspark Interactive Network which is a potentially unwanted software program.

File name:

e5plugin.dll

Publisher:

Mindspark (signed by Mindspark Interactive Network)

Product:

Mindspark Toolbar Platform for Internet Explorer

Description:

Mindspark Toolbar Platform

Version:

1.0.7.247

MD5:

6681f64c2216332c9d8b4db3c1f5651b

SHA-1:

2d7f00e97cd6337557131673be7c416924646631

SHA-256:

3427c1016782906be93b3541d3a046cb8648251c4aa718fd92c5cfff9da1bbbd

Scanner detections:

12 / 68

Status:

Potentially unwanted

Explanation:

Part of the MyWebSearch/Mindspark/Ask web browser extension and toolbar.

Analysis date:

5/13/2024 12:41:56 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

PUA.Toolbar.MyWebSearch

7.1.1

avast!

Win32:Mindspark-A [PUP]

2014.9-150819

Bkav FE

W32.HfsAdware

1.3.0.6979

Dr.Web

Adware.MyWebSearch.103

9.0.1.0231

ESET NOD32

Win32/Toolbar.MyWebSearch.AJ potentially unwanted (variant)

9.11917

F-Prot

W32/Mywebsearch.K.gen

v6.4.7.1.166

herdProtect (fuzzy)

variant of 65plugin.dll (Adware)

2015.10.6.8

Malwarebytes

PUP.Optional.Mindspark.A

v2015.08.19.01

Reason Heuristics

PUP.Mindspark.MindsparkInteractiveNetwork.Toolbar (M)

15.8.19.13

SUPERAntiSpyware

Adware.MindSpark/Variant

9682

VIPRE Antivirus

MyWebSearch.J

41862

Zillya! Antivirus

Adware.MyWebSearch.Win32.3510

2.0.0.2277

File size:

79.8 KB (81,752 bytes)

Product version:

2.5.15.19

Original file name:

t8Plugin.dll

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\productivityboss_e5\bar\1.bin\e5plugin.dll

Digital Signature

Signed by:

Mindspark Interactive Network

Authority:

VeriSign, Inc.

Valid from:

4/20/2015 2:00:00 AM

Valid to:

6/19/2018 1:59:59 AM

Subject:

CN=Mindspark Interactive Network, O=Mindspark Interactive Network, L=Yonkers, S=New York, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

438D4291E43C2DFFEEAAAEE5B6C070B5

File PE Metadata

Compilation timestamp:

6/17/2015 4:45:59 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

768:OW/9vpNxktwTSG1MmuRLV5E1HESkW5qMC9dkpQhm2/lhyxtn2SEDj3m9u8PCVvlf:XxktdwuH2mw5ik+Rl0PU3jVvlvnBR

Entry address:

0x52C8

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, A0, 2D, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, CC, CC, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00... 
[+]

Code size:

45 KB (46,080 bytes)

The file e5plugin.dll has been discovered within the following program.

ProductivityBoss Internet Explorer Toolbar by Mindspark Interactive Network

Publisher's description - “If you are still seeing Ask.com (or mywebsearch.com) after uninstalling our toolbar, it is likely that your browser's homepage has not yet been reset back to its previous setting.”

support.mindspark.com

65% remove it

Remove e5plugin.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.