SOSVirus » news » PUP.Optional.MergeDocsOnline

PUP.Optional.MergeDocsOnline

MergeDocsOnline is a software that usually installs without your knowledge with free software downloads. Identified the 08/14/2015.

Features:

– It belongs to a family of PUP (Potentially Unwanted Program).
– Vendor : PUP.Optional

Main actions :

– It installs a plugin of the browser Mozilla Firefox (P2)
– It is installed as a BHO (Browser Helper Object) of internet browser (O2),
– It installs as a process launched at startup of the system (RP),
– It settled in the Base of registers to be launched each time the system (O4).
– It installs as a service to be launched each time the system (O23),(SS/SR).
– It starts a task planned in automatic (O39),
– It installs as a program (O42),
– It creates to many registry keys ‘Software’
– It creates additional folders (O43),
– It moved to the Windows prefetcher folder (O45).
– It creates multiple files users (O61),
– It changes the Internet research provider (O69),

ZHPDiag report:

– (.Mindspark – Mindspark Toolbar Platform.) — C:Program FilesMergeDocsOnline_ewbar1.binewbarsvc.exe
– (.Mindspark – Mindspark Toolbar Platform.) — C:Program FilesMergeDocsOnline_ewbar1.binAppIntegrator.exe
P2 – EXT: (.Mindspark – MergeDocsOnline.) — C:UsersCoolmanAppDataRoamingMozillaFirefoxProfilesw4lnh3vs.default-1436259410500extensionsewffxtbr@free.mergedocsonline.com
O2 – BHO: Search Assistant BHO – {00e2c623-e999-4b80-8ae1-f64f299f564c} . (.Mindspark – Mindspark Toolbar Platform.) — C:Program FilesMergeDocsOnline_ewbar1.binewSrcAs.dll
O2 – BHO: Toolbar BHO – {7954f122-e29b-41f3-b5c0-3c40a553cc37} . (.Mindspark – Mindspark Toolbar Platform.) — C:Program FilesMergeDocsOnline_ewbar1.binewbar.dll
O3 – Toolbar: 0xDBE7528AB487414A8BBA3D7459A92D3D – {8A52E7DB-87B4-4A41-8BBA-3D7459A92D3D} . (.Mindspark – Mindspark Toolbar Platform.) — C:Program FilesMergeDocsOnline_ewbar1.binewbar.dll
O4 – HKLM..Run: . (.Mindspark – Mindspark Toolbar Platform.) — C:Program FilesMergeDocsOnline_ewbar1.binewmedint.exe
O23 – Service: MergeDocsOnlineService (MergeDocsOnline_ewService) . (.Mindspark – Mindspark Toolbar Platform.) – C:Program FilesMergeDocsOnline_ewbar1.binewbarsvc.exe
O42 – Logiciel: MergeDocsOnline Internet Explorer Toolbar – (.Mindspark Interactive Network.) — MergeDocsOnline_ewbar Uninstall Internet Explorer
O43 – CFD: 2015/08/18 17:22:39 – [] D — C:Program FilesMergeDocsOnline_ew
O43 – CFD: 2015/08/18 17:22:03 – [] D — C:UsersCoolmanAppDataLocalMergeDocsOnline_ew
O61 – LFC: 2015/08/18 17:17:07 A . (..) — C:UsersCoolmanAppDataRoamingMozillaFirefoxProfilesw4lnh3vs.default-1436259410500extensionsewffxtbr@free.mergedocsonline.compluginsNativeMessagingDispatcher.dll
O69 – SBI: prefs.js user_pref(« extensions.toolbar.mindspark._ewMembers_.successUrl », « http://www.mergedocsonline.com/installComplete.jhtml »);
SR – Auto MergeDocsOnlineService (MergeDocsOnline_ewService) . (.Mindspark.) – C:Program FilesMergeDocsOnline_ewbar1.binewbarsvc.exe
HKLMSoftwareMicrosoftWindowsCurrentVersionExplorerBrowser Helper Objects{00e2c623-e999-4b80-8ae1-f64f299f564c}
HKLMSoftwareClassesCLSID{00e2c623-e999-4b80-8ae1-f64f299f564c}
HKCUSoftwareMicrosoftWindowsCurrentVersionExtStats{00e2c623-e999-4b80-8ae1-f64f299f564c}
HKCUSoftwareMicrosoftWindowsCurrentVersionExtSettings{00e2c623-e999-4b80-8ae1-f64f299f564c}
HKLM64SOFTWAREMicrosoftWindowsCurrentVersionUninstallMergeDocsOnline_ewbar Uninstall Internet Explorer
HKLMSYSTEMCurrentControlSetServicesMergeDocsOnline_ewService
HKLMSOFTWAREMergeDocsOnline_ew
HKCUSOFTWAREAppDataLowSoftwareMergeDocsOnline_ew

Alias:

PUP.Optional.Mindspark.A
Win32:Mindspark-A

Remove:

– Remove software in Windows Configuration Panel,
Remove with ZHPcleaner

Diagnose with ZHPDiag

1 Vote2 Votes3 Votes4 Votes5 Votes (No Ratings Yet)
SOSVirusLoading...

Leave a Comment