77,019,263 programs installed

Should I remove Astrology Internet Explorer Toolbar?

What percent of users and experts removed it?
62% remove it38% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Reach 0.0006%
Lifespan of installation (until removal)
< 23.23 days
685.38 days >
Average installed length: 360.12 days

Other programs by Mindspark Interactive Network

Astrology Internet Explorer Toolbar

What is Astrology Internet Explorer Toolbar?

This Mindspark toolbar for IE may modify the web browser's homepage and search provider to ask.com as well as change a number of the security settings of the browser. These changes will allow it to perform additional ad-supported functions in the browser. Typically it comes bundled with free applications from the Internet through a bundles offer for free software.

Overview

During setup, the program creates a startup registration point in Windows in order to automatically start when any user boots the PC. Upon being installed, the software adds a Windows Service which is designed to run continuously in the background. Manually stopping the service has been seen to cause the program to stop functing properly. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. The program adds a toolbar to Microsoft Internet Explorer. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The primary executable is named 4aBar.dll. Many users end up uninstalling this after less than a month of it being installed. The setup package generally installs about 55 files and is usually about 11.83 MB (12,409,095 bytes).
  • Malware detected in the program
  • Automatically starts with Windows
  • Integrates into the web browser
  • Installs a Windows Service
  • The wisdom of the experts agree, if you don't use it you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Astrology Internet Explorer Toolbar.
4aBar.dll (96a060cf33a2c42617cf13224a47db07) has been flagged by the following 8 scanners:
Anti-Virus softwareVersionDetection
avast! 2014.9-140423 Win32:Mindspark-A [PUP]
AVG 2015.0.3496 Zango
Baidu-International 4.0.3.14530 Adware.Win32.Mindspark.81
Kingsoft AntiVirus 331020.49267 Win32.Troj.Undef.(kcloud)
Panda Antivirus 14.05.30.12 Adware/WebSearch
Tencent 1.0.0.1 Win32.Trojan.Falsesign.Hupc
TrendMicro-HouseCall 7.2.150 TROJ_GEN.F47V0404
VIPRE Antivirus 29700 MyWebSearch.J (v) (not malicious)
4aSrcAs.dll (779662595f6b51bb86f96eccc230f13c) has been flagged by the following 18 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2014.10.18.00 PUP/Win32.MyWebSearch
Antiy-AVL 1.0.0.1 RiskWare[WebToolbar:not-a-virus]/Win32.MyWebSearch
avast! 8.0.1489.320 Win32:Mindspark-A [PUP]
AVG 14.0.0.4040 MyWebSearch
AVware 1.5.0.21 MyWebSearch.J (v)
Baidu-International 3.5.1.41473 Adware.Win32.MyWebSearch.aRmS
ESET-NOD32 10579 a variant of Win32/Toolbar.MyWebSearch.AC
Fortinet FortiGate 5.1.152.0 Riskware/MyWebSearch
G Data 24 Win32.Adware.Mindspark.C
Kaspersky 12.0.0.1225 not-a-virus:WebToolbar.Win32.MyWebSearch.si
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.MyWebSearch.si.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.MindSpark
NANO AntiVirus 0.28.2.62671 Riskware.Win32.Toolbar.dfqike
Qihoo-360 1.0.0.1015 Win32/Virus.WebToolbar.30b
Tencent 1.0.0.1 Win32.Trojan.Falsesign.Aisc
TrendMicro-HouseCall 9.700.0.1001 Suspicious_GEN.F47V0812
VIPRE Antivirus 34006 MyWebSearch.J (v) (not malicious)
Zillya 2.0.0.1958 Adware.MyWebSearch.Win32.902
4abarsvc.exe (b3dae11b5316528e6853a94d39e141e3) has been flagged by the following 18 scanners:
Anti-Virus softwareSoftware versionDetection
Agnitum Outpost 5.5.1.3 PUA.Toolbar.MyWebSearch!
AhnLab-V3 2014.11.14.00 PUP/Win32.MyWebSearch
Antiy-AVL 1.0.0.1 RiskWare[WebToolbar:not-a-virus]/Win32.MyWebSearch
avast! 8.0.1489.320 Win32:Mindspark-A [PUP]
AVG 15.0.0.4189 MyWebSearch
AVware 1.5.0.21 MyWebSearch.J (v)
Baidu-International 3.5.1.41473 Adware.Win32.MyWebSearch.aI
ESET-NOD32 10722 a variant of Win32/Toolbar.MyWebSearch.AE
Fortinet FortiGate 5.0.999.0 Riskware/MyWebSearch
G Data 24 Win32.Adware.Mindspark.C
Kaspersky 12.0.0.1225 not-a-virus:WebToolbar.Win32.MyWebSearch.si
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.MyWebSearch.si.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.MindSpark
NANO AntiVirus 0.28.6.63362 Riskware.Win32.Toolbar.dfqijl
Qihoo-360 1.0.0.1015 Win32/Virus.WebToolbar.30b
Tencent 1.0.0.1 Win32.Trojan.Falsesign.Pgms
VIPRE Antivirus 34774 MyWebSearch.J (v) (not malicious)
Zillya 2.0.0.1982 Adware.MyWebSearch.Win32.1228
4aSrchMn.exe (3c93215de9cc97c60b1892ad8dbe4411) has been flagged by the following 16 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2014.11.14.00 Trojan/Win32.Buzus
Antiy-AVL 1.0.0.1 RiskWare[WebToolbar:not-a-virus]/Win32.MyWebSearch
avast! 8.0.1489.320 Win32:Mindspark-A [PUP]
AVG 15.0.0.4189 MyWebSearch
AVware 1.5.0.21 MyWebSearch.J (v)
Baidu-International 3.5.1.41473 Adware.Win32.MyWebSearch.abZ
ESET-NOD32 10722 a variant of Win32/Toolbar.MyWebSearch.AJ
Fortinet FortiGate 5.0.999.0 Riskware/MyWebSearch
G Data 24 Win32.Adware.Mindspark.C
Kaspersky 12.0.0.1225 not-a-virus:WebToolbar.Win32.MyWebSearch.si
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.MyWebSearch.si.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.MindSpark
Qihoo-360 1.0.0.1015 Win32/Virus.WebToolbar.30b
Tencent 1.0.0.1 Win32.Trojan.Falsesign.Lmut
VIPRE Antivirus 34774 MyWebSearch.J (v) (not malicious)
Zillya 2.0.0.1982 Adware.MyWebSearch.Win32.1351
APPINTEGRATOR.EXE (b6940fe9d6fc34ef59f1028ae6018fe1) has been flagged by the following 16 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2014.10.30.00 PUP/Win32.MyWebSearch
Antiy-AVL 1.0.0.1 RiskWare[WebToolbar:not-a-virus]/Win32.MyWebSearch
avast! 8.0.1489.320 Win32:Mindspark-A [PUP]
AVG 14.0.0.4040 MyWebSearch
AVware 1.5.0.21 MyWebSearch.J (v)
Baidu-International 3.5.1.41473 Adware.Win32.MyWebSearch.am
ESET-NOD32 10639 a variant of Win32/Toolbar.MyWebSearch.AJ
Fortinet FortiGate 5.0.999.0 Riskware/MyWebSearch
G Data 24 Win32.Adware.Mindspark.C
Kaspersky 12.0.0.1225 not-a-virus:WebToolbar.Win32.MyWebSearch.si
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.MyWebSearch.si.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.MindSpark
Qihoo-360 1.0.0.1015 Win32/Virus.WebToolbar.30b
Tencent 1.0.0.1 Win32.Trojan.Falsesign.Pgcq
TrendMicro-HouseCall 9.700.0.1001 Suspicious_GEN.F47V0812
VIPRE Antivirus 34342 MyWebSearch.J (v) (not malicious)
4amedint.exe (df5ce0e2d96d747ed9fd82d6128cd393) has been flagged by the following 14 scanners:
Anti-Virus softwareSoftware versionDetection
Agnitum Outpost 5.5.1.3 PUA.Toolbar.MyWebSearch!
AhnLab-V3 2014.11.07.02 PUP/Win32.MyWebSearch
avast! 8.0.1489.320 Win32:Mindspark-A [PUP]
AVG 15.0.0.4189 MyWebSearch
AVware 1.5.0.21 MyWebSearch.J (v)
Baidu-International 3.5.1.41473 Adware.Win32.MyWebSearch.ALb
ESET-NOD32 10683 a variant of Win32/Toolbar.MyWebSearch.AJ
Fortinet FortiGate 5.0.999.0 Riskware/MyWebSearch
G Data 24 Win32.Adware.Mindspark.C
Kaspersky 12.0.0.1225 not-a-virus:WebToolbar.Win32.MyWebSearch.si
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.MyWebSearch.si.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.MindSpark
Tencent 1.0.0.1 Win32.Trojan.Falsesign.Wtxk
VIPRE Antivirus 34578 MyWebSearch.J (v) (not malicious)
AppIntegrator64.exe (143d634f4f93155d3a4d430c2cf60d11) has been flagged by the following 12 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2014.10.09.00 PUP/Win32.MyWebSearch
Antiy-AVL 1.0.0.1 RiskWare[WebToolbar:not-a-virus]/Win32.MyWebSearch
avast! 8.0.1489.320 Win32:Mindspark-A [PUP]
AVG 14.0.0.4037 Zango
Baidu-International 3.5.1.41473 Adware.Win32.MyWebSearch.Aki
Fortinet FortiGate 5.1.152.0 Riskware/MyWebSearch
Kaspersky 12.0.0.1225 not-a-virus:WebToolbar.Win32.MyWebSearch.si
Malwarebytes 1.75.0.1 PUP.Optional.MindSpark
Panda Antivirus 10.0.4.2 Adware/WebSearch
Qihoo-360 1.0.0.1015 Win32/Virus.WebToolbar.30b
Tencent 1.0.0.1 Win32.Trojan.Falsesign.Dvqb
VIPRE Antivirus 33754 MyWebSearch.J (v) (not malicious)
       View all 102 all detections

Program detailsProgram details

URL: support.mindspark.com
Installation folder: C:\Program Files\Astrology_4a\bar\1.bin
Uninstaller: rundll32 "C:\Program Files\Astrology_4a\bar\1.bin\4aBar.dll",O mindsparktoolbarkey="Astrology_4a" uninstalltype=IE
Estimated size: 11.83 MB

Program filesFiles installed by Astrology Internet Explorer Toolbar

Program module:4aBar.dll (Malware detected)
Name:Mindspark Toolbar Platform for Internet Explorer and Firefox
Mindspark Toolbar Platform
Path:C:\Program Files\Astrology_4a\bar\1.bin\4aBar.dll
MD5:96a060cf33a2c42617cf13224a47db07
Additional files:
  • (Malware detected) 4abar.dll - Mindspark Toolbar Platform for Internet Explorer and Firefox (Mindspark Toolbar Platform)
  • 4aregfft.dll
  • 4aregiet.dll
  • 4ahkstub.dll - Mindspark Toolbar Platform IE Search Box Protector Stub
  • 4areghk.dll - Mindspark Toolbar Platform IE Search Box Protector
  • (Malware detected) 4abarsvc.exe - Mindspark Toolbar Platform for Internet Explorer
  • 4abprtct.dll
  • 4adatact.dll
  • 4adlghk.dll
  • 4adlghk64.dll
  • 4afeedmg.dll
  • 4ahighin.exe
  • 4ahtmlmu.dll
  • 4ahttpct.dll
  • 4aidle.dll
  • (Malware detected) 4amedint.exe
  • 4amlbtn.dll
  • 4aPlugin.dll
  • 4ascript.dll
  • 4askin.dll
  • 4askplay.exe
  • (Malware detected) 4aSrcAs.dll - Mindspark Search Assistant for Internet Explorer (Mindspark Search Assistant)
  • (Malware detected) 4aSrchMn.exe
  • 4asrchmr.dll
  • (Malware detected) APPINTEGRATOR.EXE
  • (Malware detected) AppIntegrator64.exe
  • APPINTEGRATORSTUB.DLL
  • AppIntegratorStub64.dll
  • ASSISTMONITOR.DLL
  • ASSISTMONITOR64.DLL
  • CREXT.DLL
  • CrExtP4a.exe
  • DPNMNGR.DLL
  • HKFXMGR.DLL
  • HKFXMGR64.DLL
  • HPG.DLL
  • Hpg64.dll
  • T8EPMSUP.DLL
  • T8EXTEX.DLL
  • T8EXTPEX.DLL
  • T8HTML.DLL
  • NP4aStub.dll - Mindspark Toolbar Platform Plugin Stub (Mindspark Toolbar Platform Plugin Stub for 32-bit Windows)
  • 4aauxstb.dll - Mindspark Toolbar Platform
  • 4aauxstb64.dll
  • 4aieovr.dll
  • 4aradio.dll - Mindspark Radio

Program behaviorsBehaviors exhibited

2 Internet Explorer BHOs
  • 4abar.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Toolbar BHO' with the class of {d36bfff8-a3ae-4032-a179-f29083c68ba7}.
  • 4aSrcAs.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'SoccerInferno' with the class of {73b8e1fd-331f-4c17-8613-8a3034d3b0ca}.
Internet Explorer Toolbar
  • 4abar.dll is loaded as Internet Explorer Toolbar with the name 'Daily Fitness Center' with the class of {a6547405-a964-4600-8326-e91c95218964}.
Internet Explorer URL Search Hook
  • 4aSrcAs.dll is loaded in Internet Explorer as a URL search hook using the CLSID {a24f3f59-1021-4e02-856c-99d9b4a03d83} and is used by IE to redirect the address of an unknown typed URLs.
Internet Explorer Web Browser
  • 4abar.dll installs an IE Web Browser in Internet Explorer named 'YourVideoChat' with a class of {26E01BB3-6695-41EF-B93B-E8F6C86E0311}.
2 Mozilla Plugins
  • NP4aStub.dll is loaded into Mozilla Firefox under the product name [email protected]_4a.com/Plugin' with a plugin key of [email protected]_4a.com/Plugin' for all users of the PC.
  • 4abar.dll is loaded into Mozilla Firefox under the product name 'McAfee Total Protection' with a plugin key of [email protected]/MSC,version=10' for all users of the PC.
Scheduled Task
  • AppIntegrator64.exe is scheduled as a task named 'MySearchDial' (runs daily at 6:21 PM).
Service
  • 4abarsvc.exe runs as a service named 'GardeningEnthusiastService' (GardeningEnthusiast_7jService).
Startup File (User Run)
  • 4aSrchMn.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Hoolapp Android' and executes as "C:\users\user\appdata\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized.
6 Startup Files (All Users Run)
  • 4amedint.exe is loaded in the all users (HKLM) registry as a startup file name 'HowToSimplified AppIntegrator 32-bit' which loads as C:\Program Files2\HOWTOS~2\bar\1.bin\AppIntegrator.exe.
  • AppIntegrator64.exe is loaded in the all users (HKLM) registry as a startup file name 'MapsGalaxy Search Scope Monitor' which loads as "C:\Program Files2\MAPSGA~1\bar\3.bin\39srchmn.exe" /m=2 /w /h.
  • 4abarsvc.exe is loaded in the all users (HKLM) registry as a startup file name 'Motitags AppIntegrator 64-bit' which loads as C:\Program Files2\MOTITA~2\bar\1.bin\AppIntegrator64.exe.
  • 4aSrchMn.exe is loaded in the all users (HKLM) registry as a startup file name 'Daily Fitness Center Search Scope Monitor' which loads as "C:\Program Files2\DAILYF~2\bar\1.bin\53srchmn.exe" /m=2 /w /h.
  • APPINTEGRATOR.EXE is loaded in the all users (HKLM) registry as a startup file name 'GardeningEnthusiast AppIntegrator 32-bit' which loads as C:\Program Files2\GARDEN~2\bar\1.bin\AppIntegrator.exe.
  • 4abar.dll is loaded in the all users (HKLM) registry as a startup file name 'MapsGalaxy' which loads as rundll32 C:\Program Files1\MAPSGA~2\bar\1.bin\39bar.dll,S.
Startup File (All Users Run Once)
  • 4aSrchMn.exe is loaded once in the all users (HKLM) registry as a startup file name 'YTBChrInst' which loads as C:\users\user\appdata\Local\Temp\1391325400\ChromeHelperProc.exe.

How do I remove Astrology Internet Explorer Toolbar?

Quickly and completely remove Astrology Internet Explorer Toolbar from your computer by downloading "Should I Remove It?", its 100% FREE and installs in seconds (click the button below).
Download "Should I Remove It?", it's FREE!Remove Astrology Internet Explorer ... from your computer.
Or, you can uninstall Astrology Internet Explorer Toolbar from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program Astrology Internet Explorer Toolbar, click it, and then do one of the following:
    • Windows Vista/7/8: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove Astrology Internet Explorer Toolbar.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by Astrology Internet Explorer Toolbar you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome
Scan your PC for malware
If you do not have a good anti-virus program, please consider installing one. Below are some we highly recommend.

OS VERSIONS
Win 7 (SP1) 75%
Win 8 13%
 
HOW IT STARTS
Automatically starts? Yes
(Found in the run registry)
 
USER ACTIONS
Uninstall it 62%
Keep it 38%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 75.00%
Windows Vista 12.50%
Windows 8 12.50%
Which OS releases does it run on?
Windows 7 Home Premium 50.00%
Windows 7 Professional 12.50%
Windows 7 Ultimate 12.50%
Windows 8.1 12.50%
Windows Vista Home Basic 12.50%

Distribution by countryGeography

76.47% of installs come from the United States
Which countries install it?
  United States 76.47%
  India 17.65%
  Croatia 5.88%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 62.50%
Toshiba 12.50%
Dell 12.50%
Acer 12.50%
Common models
TOSHIBA Satellite L355 12.50%
HP ProBook 4430s 12.50%
HP Pavilion g6 Notebook P... 12.50%
HP Pavilion dm1 Notebook ... 12.50%
HP 635 Notebook PC 12.50%
HP 2000 Notebook PC 12.50%

About Mindspark Interactive Network

Mindspark is a business unit of IAC that focuses on interactive products and web portals and operates IAC's interactive products and web portals such as Life123, Myway.
Publisher URL: www.mindspark.com

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.