crextp4z.exe

By Mindspark Interactive Network (Signed)

Remove crextp4z.exe
Version:   1.0.6.50
MD5:   a39fd864f89f77a3da2679f135ab7a67
SHA1:   ff9f058b12b6c4d9b6256304fa9078e391c7f32c
SHA256:   26d571099e86388d8ca1b102f7c97d989426aaf450641afed203b8c6153c8ba0
Warning 4 antivirus scanners has detected malware.

Overview

crextp4z.exe is malware that executes as a process with the local user's privileges. It is installed with a couple of know programs including CouponXplorer Internet Explorer Toolbar published by Mindspark Interactive Network, WeatherBlink Internet Explorer Toolbar from Mindspark Interactive Network and WeatherBlink Internet Explorer Toolbar by Mindspark Interactive Network. The file is digitally signed by Mindspark Interactive Network which was issued by the VeriSign certificate authority (CA). This particular version is usually found on Windows 7 Professional (6.1.7601.65536).

DetailsDetails

File name:crextp4z.exe
Typical file path:C:\Program Files\videodownloadconverter_4z\bar\1.bin\crextp4z.exe
Original name:CrExtProc.exe
File version:1.0.6.50
Size:1.31 MB (1,370,184 bytes)
Build date:4/16/2013 2:44 AM
Certificate
Issued to:Mindspark Interactive Network
Authority (CA):VeriSign
Effective date:Tuesday, April 10, 2012
Expiration date:Thursday, May 7, 2015
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Mindspark Interactive Network
  61% remove
Installs an Ask.com toolbar in Internet Explorer as a Browser Helper Object. According to the EULA (see below) as well as the behavior of the software, this toolbar will install search functionality in IE by modifying the default search, address bar and redirect queries. In addition it will change the user's home page and new tabs page to home.tb.ask.com. The toolbar uses the Price Finder application from Pronto, LLC. From the Privac...
Mindspark Interactive Network
  61% remove
WeatherBlink Internet Explorer Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers. In order to provide search advertising revenue, the software is designed not only to modify the search provider but to protect it so that it remains the default browser search engine. It is typically installed via a bundled offer within a third-party software distribution. As for distribution, the toolb...
Mindspark Interactive Network
  67% remove
SafePCRepair Internet Explorer Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers. In order to provide search advertising revenue, the software is designed not only to modify the search provider but to protect it so that it remains the default browser search engine. It is typically installed via a bundled offer within a third-party software distribution. As for distribution, the toolb...
Mindspark Interactive Network
  68% remove
Functionality of the toolbar includes: - Changing the web browser's default home page to MyWebSearch.com. - Changing the browser's search provider, built-in search box to MyWebSearch.com. - Ability to modify the 'new tab' functionality to launch the modified search portal page. - Adds an alternative error page, DNS error and 'page not' found functionality. - Adds additional functionality that is designed to protect the search and h...
Mindspark Interactive Network
  64% remove
Functionality of the toolbar includes: - Changing the web browser's default home page to MyWebSearch.com. - Changing the browser's search provider, built-in search box to MyWebSearch.com. - Ability to modify the 'new tab' functionality to launch the modified search portal page. - Adds an alternative error page, DNS error and 'page not' found functionality. - Adds additional functionality that is designed to protect the search and h...
Mindspark Interactive Network
  61% remove
FromDocToPDF Firefox Toolbar is a web browser toolbar and extension that modifies the browsers search and home pages as well as delivers contextual based advertising. In order to provide search advertising revenue, the software is designed not only to modify the search provider but to protect it so that it remains the default browser search engine. It is typically installed via a co-bundled offer within a third-party software distribut...
Mindspark Interactive Network
  62% remove
FromDocToPDF Internet Explorer Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers. In order to provide search advertising revenue, the software is designed not only to modify the search provider but to protect it so that it remains the default browser search engine. It is typically installed via a bundled offer within a third-party software distribution. As for distribution, the toolb...
Mindspark Interactive Network
  74% remove
MapsGalaxy Firefox Toolbar installs is a web browser extension and allows provides users the means to search the Internet with MyWebSearch, a potentially unwanted program that changes and redircts all of your search results as well as DNS errors, and modifies your home page to mywebsearch.com or some other webpage. MyWebSearch automatically becomes your default search service which hijacks all your search requests as well as tracks your...
Mindspark Interactive Network
  75% remove
MapsGalaxy Internet Explorer Toolbar installs is a web browser extension and allows provides users the means to search the Internet with MyWebSearch, a potentially unwanted program that changes and redircts all of your search results as well as DNS errors, and modifies your home page to mywebsearch.com or some other webpage. MyWebSearch automatically becomes your default search service which hijacks all your search requests as well as t...
Mindspark Interactive Network
  79% remove
Installs a Mindspark toolbar in your Web browser that collects and stores information about your web browsing habits and sends this information to Mindspark so they can suggest services or provide ads via the toolbar.
Mindspark Interactive Network
  77% remove
Installs a Mindspark toolbar in your Web browser that collects and stores information about your web browsing habits and sends this information to Mindspark so they can suggest services or provide ads via the toolbar.
Mindspark Interactive Network
  78% remove
Installs a Mindspark toolbar in your Web browser that collects and stores information about your web browsing habits and sends this information to Mindspark so they can suggest services or provide ads via the toolbar.
Mindspark Interactive Network
  70% remove
FilmFanatic Firefox Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers. In order to provide search advertising revenue, the software is designed not only to modify the search provider but to protect it so that it remains the default browser search engine. It is typically installed via a bundled offer within a third-party software distribution. As for distribution, the toolbar is typic...
Mindspark Interactive Network
  75% remove
TelevisionFanatic Internet Explorer Toolbar installs is a web browser extension and allows provides users the means to search the Internet with MyWebSearch, a potentially unwanted program that changes and redircts all of your search results as well as DNS errors, and modifies your home page to mywebsearch.com or some other webpage. MyWebSearch automatically becomes your default search service which hijacks all your search requests as we...
Mindspark Interactive Network
  63% remove
ReadingFanatic Internet Explorer Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers. In order to provide search advertising revenue, the software is designed not only to modify the search provider but to protect it so that it remains the default browser search engine. It is typically installed via a bundled offer within a third-party software distribution. As for distribution, the too...
Mindspark Interactive Network
  62% remove
ReadingFanatic Firefox Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers. In order to provide search advertising revenue, the software is designed not only to modify the search provider but to protect it so that it remains the default browser search engine. It is typically installed via a bundled offer within a third-party software distribution. As for distribution, the toolbar is ty...
Mindspark Interactive Network
  63% remove
This toolbar/web browser extension is ad/search-supported that is typically installed as an optional offer, users generally have this bundled with 3rd party software. During setup, this toolbar will modify the home page and new tab pages to an affiliate search portal using a primary search engine in order to collect shared search revenue. It will also modify the default search provider as well.
Mindspark Interactive Network
  66% remove
Functionality of the toolbar includes: - Changing the web browser's default home page to MyWebSearch.com. - Changing the browser's search provider, built-in search box to MyWebSearch.com. - Ability to modify the 'new tab' functionality to launch the modified search portal page. - Adds an alternative error page, DNS error and 'page not' found functionality. - Adds additional functionality that is designed to protect the search and h...
Mindspark Interactive Network
  61% remove
RadioRage Firefox Toolbar installs is a web browser extension and allows provides users the means to search the Internet with MyWebSearch, a potentially unwanted program that changes and redircts all of your search results as well as DNS errors, and modifies your home page to mywebsearch.com or some other webpage. MyWebSearch automatically becomes your default search service which hijacks all your search requests as well as tracks your ...
Mindspark Interactive Network
  62% remove
RadioRage Internet Explorer Toolbar is a web browser extension that changes the browsers search and home pages as well as delivers. In order to provide search advertising revenue, the software is designed not only to modify the search provider but to protect it so that it remains the default browser search engine. It is typically installed via a bundled offer within a third-party software distribution. As for distribution, the toolbar ...

MalwareMalware detections

Based on 40+ industry antivirus scanners, 4 of them detected the following malware.
Antivirus engineEngine versionDetection
avast! 8.0.1489.320 Win32:Mindspark-A [PUP]
AVG 13.0.0.3169 Zango
Kingsoft 2013.4.9.267 Win32.Troj.Undef.(kcloud)
VIPRE Antivirus 22166 MyWebSearch.J (v) (not malicious)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00366027%
0.028634%
Kernel CPU:0.00194803%
0.013761%
User CPU:0.00171224%
0.014873%
Kernel CPU time:484 ms/min
100,923,805ms/min
CPU cycles:273,247/sec
17,470,203/sec
Memory
Private memory:7.6 MB
21.59 MB
Private (maximum):5.18 MB
Private (minimum):736 KB
Non-paged memory:7.6 MB
21.59 MB
Virtual memory:138.37 MB
140.96 MB
Virtual memory (peak):143.87 MB
169.69 MB
Working set:884 KB
18.61 MB
Working set (peak):19.65 MB
37.95 MB
Page faults:8,831/min
2,039/min
I/O
I/O read transfer:146 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:0 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:3 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:14
12
Handles:240
600
GUI GDI count:12
103
GUI GDI peak:13
142
GUI USER count:24
49
GUI USER peak:30
71

BehaviorsProcess properties

Integrety level:Low
Platform:64-bit
Command lines:
  • "C:\Program Files\videodownloadconverter_4z\bar\1.bin\crextp4z.exe" /context="e8e51cf8e9a74a5775f9215cdd6feb6bdd7c6d3c¿videodownloadconverter_4z¿00000028400001000" /extensionversionstr="1.0.4" /browserversion="10.0.9200.16660" /browserversionstr="10.0.9200.16660"
  • "C:\Program Files\videodownloadconverter_4z\bar\1.bin\crextp4z.exe" /context="8cead9d407922acada7f934a8ad7f3542b12c351¿videodownloadconverter_4z¿00000028400001000" /extensionversionstr="1.0.4" /browserversion="10.0.9200.16660" /browserversionstr="10.0.9200.16660"
  • "C:\Program Files\videodownloadconverter_4z\bar\1.bin\crextp4z.exe" /context="eff2a3cad544aefc4391d367b416f7af18b29c6b¿videodownloadconverter_4z¿00000028400001000" /extensionversionstr="1.0.4" /browserversion="10.0.9200.16660" /browserversionstr="10.0.9200.16660"
Owner:User

ResourcesThreads

Averages
 
CrExtP4z.exe (main module)
Total CPU:0.00268789%
0.272967%
Kernel CPU:0.00140765%
0.107585%
User CPU:0.00128024%
0.165382%
CPU cycles:364,584/sec
5,741,424/sec
Memory:1.32 MB
1.16 MB
ntdll.dll
Total CPU:0.00006414%
Kernel CPU:0.00006414%
User CPU:0.00000000%
CPU cycles:121/sec
Memory:1.66 MB

Common loaded modules

These are modules that are typiclaly loaded within the context of this process.

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Professional 100.00%

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Hewlett-Packard 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE