4zbar.dll
MindSpark Toolbar Platform for Internet Explorer and Firefox by Mindspark Interactive Network (Signed)
Warning 13 antivirus scanners has detected malware in various versions of 4zbar.dll.
Overview
There are 3 versions of 4zbar.dll in the wild, the latest version being 2, 5, 14, 33. It is integrated as a plugin to Internet Explorer as a Browser Helper Object, often without any obvious user interface, and will load for each instance of IE. The average file size is about 689.51 KB. The file is a digitally signed and issued to Mindspark Interactive Network by VeriSign. The programs FromDocToPDF Firefox Toolbar, FromDocToPDF Internet Explorer Toolbar and Coupon Alert Firefox Toolbar have been observed as installing specific variations of 4zbar.dll. The library is loaded into Internet Explorer as a BHO (browser helper object).
What is 4zbar.dll?
My Web Search by the Mindspark Interactive Network is a browser toolbar, part of the Fun Web Products suite of potentially unwanted applications such as Smiley Central, Cursor Mania, Popular Screensavers and others. The toolbar provides access to search engine results and a 404 Error Redirector among other things to your browser. The My Web Search toolbar could slow down your PC and uses cookies to track your web surfing usage and habits.
About 4zbar.dll (from Mindspark Interactive Network)
“MyWebSearch brings together the most comprehensive collection of search tools available to provide you with the information you need when you need it. MyWebSearch allows you to search the web directly”
 Details
|
| File name: | 4zbar.dll |
| Publisher: | MindSpark |
| Product name: | MindSpark Toolbar Platform for Internet Explorer and Firefox |
| Description: | MindSpark Toolbar Platform |
| Typical file path: | C:\Program Files\videodownloadconverter_4z\bar\2.bin\4zbar.dll |
| Original name: | t8Bar.dll |
| Certificate |
| Issued to: | Mindspark Interactive Network |
| Authority (CA): | VeriSign |
| Expiration date: | Thursday, July 5, 2012 |
Programs installed in
(Note, the programs listed below are for all versions of MindSpark Toolbar Platform for Internet Explorer and Firefox.)
|
Mindspark Interactive Network |
|
FromDocToPDF Firefox Toolbar is a web browser toolbar and extension that modifies the browsers search and home pages as well as delivers contextual based advertising. In order to provide search advert...
|
Mindspark Interactive Network |
|
FromDocToPDF Internet Explorer Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers. In order to provide search advertising revenue, the software is d...
|
Mindspark Interactive Network |
|
Functionality of the toolbar includes:
- Changing the web browser's default home page to MyWebSearch.com.
- Changing the browser's search provider, built-in search box to MyWebSearch.com.
- Ability...
|
Mindspark Interactive Network |
|
ReadingFanatic Firefox Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers. In order to provide search advertising revenue, the software is designed ...
|
Mindspark Interactive Network |
|
ReadingFanatic Internet Explorer Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers. In order to provide search advertising revenue, the software is...
|
Mindspark Interactive Network |
|
RadioRage Firefox Toolbar installs is a web browser extension and allows provides users the means to search the Internet with MyWebSearch, a potentially unwanted program that changes and redircts all ...
|
Mindspark Interactive Network |
|
RadioRage Internet Explorer Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers. In order to provide search advertising revenue, the software is desi...
|
Mindspark Interactive Network |
|
This is a web browser extension/toolbar that will modify the user's home page and search provider to Ask.com.
|
Mindspark Interactive Network |
|
Installs a Mindspark toolbar in your Web browser that collects and stores information about your web browsing habits and sends this information to Mindspark so they can suggest services or provide ads...
|
Mindspark Interactive Network |
|
TelevisionFanatic Internet Explorer Toolbar installs is a web browser extension and allows provides users the means to search the Internet with MyWebSearch, a potentially unwanted program that changes...
|
Mindspark Interactive Network |
|
Installs a potentailly unwanted Ask.com powered toolbr - "As part of the download process for the Toolbar, you may be given the option to reset your homepage and/or reset your new tab page to an Ask® ...
|
Mindspark Interactive Network |
|
FindMeFreebies is a Mindspark web browser toolbar that is designed to modify the users search and home pages to Ask.com (or MyWebSearch).
|
Mindspark Interactive Network |
|
HeroicPlay is a Mindspark web browser toolbar that is designed to modify the users search and home pages to Ask.com (or MyWebSearch).
|
Mindspark Interactive Network |
|
This toolbar/web browser extension is ad/search-supported that is typically installed as an optional offer, users generally have this bundled with 3rd party software. During setup, this toolbar will m...
|
Mindspark Interactive Network |
|
Installs a Mindspark toolbar in your Web browser that collects and stores information about your web browsing habits and sends this information to Mindspark so they can suggest services or provide ads...
|
Mindspark Interactive Network |
|
Installs a Mindspark toolbar in your Web browser that collects and stores information about your web browsing habits and sends this information to Mindspark so they can suggest services or provide ads...
|
Mindspark Interactive Network |
|
Functionality of the toolbar includes:
- Changing the web browser's default home page to MyWebSearch.com.
- Changing the browser's search provider, built-in search box to MyWebSearch.com.
- Ability...
|
Mindspark Interactive Network |
|
Functionality of the toolbar includes:
- Changing the web browser's default home page to MyWebSearch.com.
- Changing the browser's search provider, built-in search box to MyWebSearch.com.
- Ability...
|
Mindspark Interactive Network |
|
Installs a potentailly unwanted Ask.com powered toolbr - "As part of the download process for the Toolbar, you may be given the option to reset your homepage and/or reset your new tab page to an Ask® ...
|
Mindspark Interactive Network |
|
DailyBibleGuide is a Mindspark web browser toolbar that is designed to modify the users search and home pages to Ask.com (or MyWebSearch).
Behaviors
(Note, the behaviors below are for all versions of 4zbar.dll, select a unique version for details.)
Internet Explorer Browser Helper Object
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects'
- BHO CLSID: {312f84fb-8970-4fd3-bddb-7012eac4afc9}
Startup files (all users) run once
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce'
- 'HowToSimplified_8ebar Uninstall' → rundll32 C:\Program Files2\8EUNIN~1.DLL,O -3 uninstalltype="FF"
- 'FilmFanaticbar Uninstall' → rundll32 C:\Program Files2\PAUNIN~1.DLL,O -3
Internet Explorer toolbars
Located in the registry at 'SOFTWARE\Microsoft\Internet Explorer\Toolbar'
- CLSID: {48586425-6bb7-4f51-8dc6-38c88e3ebb58}
Internet Explorer web browsers
Located in the registry at 'SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser'
- CLSID: {48586425-6BB7-4F51-8DC6-38C88E3EBB58}
Malware detections
Based on 40+ industry antivirus scanners, 13 of them detected the following malware.
| Antivirus engine | Engine version | Detection | File version |
| avast! |
6.0.1289.0 |
Win32:FunWeb-K [PUP] |
2, 5, 3, 20 |
| avast! |
8.0.1489.320 |
Win32:Mindspark-A [PUP] |
2, 5, 11, 14 |
| avast! |
8.0.1489.320 |
Win32:Mindspark-A [PUP] |
2, 5, 14, 33 |
| AVG |
2014.0.3629 |
AdInstaller.FunWeb |
2, 5, 3, 20 |
| AVG |
13.0.0.3169 |
Zango |
2, 5, 11, 14 |
| AVG |
13.0.0.3169 |
Zango |
2, 5, 14, 33 |
| ESET NOD32 |
7.8812 |
a variant of Win32/Toolbar.MyWebSearch.W |
2, 5, 11, 14 |
| ESET NOD32 |
7.8852 |
a variant of Win32/Toolbar.MyWebSearch.W |
2, 5, 14, 33 |
| Kingsoft |
2013.4.9.267 |
Win32.Troj.Undef.(kcloud) |
2, 5, 14, 33 |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.F47V0906 |
2, 5, 14, 33 |
| VIPRE Antivirus |
16734 |
MyWebSearch.J (v) (not malicious) |
2, 5, 3, 20 |
| VIPRE Antivirus |
21562 |
MyWebSearch.J (v) (not malicious) |
2, 5, 11, 14 |
| VIPRE Antivirus |
21888 |
MyWebSearch.J (v) (not malicious) |
2, 5, 14, 33 |
All file variations of 4zbar.dll
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
37.50% |
|
| Microsoft Windows XP |
37.50% |
|
| Windows 7 Professional |
12.50% |
|
| Windows 7 Ultimate |
12.50% |
|
Distribution by country
MU installs about 37.50% of MindSpark Toolbar Platform for Internet Explorer and Firefox.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| GIGABYTE |
37.50% |
|
| Dell |
25.00% |
|
| Hewlett-Packard |
25.00% |
|
| Acer |
12.50% |
|
