TranslationBuddy, Advertising Software (Adware).
TranslationBuddy is software from MindSpark. It is more precisely a browser toolbar (Toolbar).
It usually installs as a program or as a browser extension. It can modify browser search and start pages. Some security solutions may classify this software as Potentially Unwanted Optional Software (LPI, PUP).
This program is classified as Potentially Unnecessary Software (LPS). It installs as a program and/or as a browser extension. It can start automatically from the Registry via a "Run" key, a service or a scheduled task. It may launch when you start your browser after changing its settings. Sometimes the launch is done silently, that is to say it works in the background. The virus analysis of this software does not show any malware detection.
These are mostly legitimate programs that may not be necessary for your system to function properly. The multiplication of programs launched at system startup can cause delays in the execution of ordinary system tasks but also when browsing the Internet. Note that some programs come from downloads with repackaging, a technique which consists of offering other software during installation. These additional programs are obviously superfluous, they can even be installed without your knowledge. It is recommended to read the EULA before installing packaged software. Before clicking, check the relevance of the pre-checked boxes offered to you.
[catlist name=”MindSpark” date=yes category_description=’yes’ pagination=yes link_target=_blank]
TECHNICAL ELEMENTS
Features
– It modifies the start page of the Opera browser (B0),
– It replaces the start page of the Mozilla Firefox (M0) browser,
– It replaces the start page of the Google Chrome (G0) browser,
– It modifies the start page of the Internet Explorer browser (R0),
- It installs an extension program for the Google Chrome (G2) browser,
- It installs an extension program for the Mozilla Firefox (M2) browser,
- It installs a Mozilla Firefox (P2) browser plugin,
- It is installed as Browser Helper Object (BHO) of Internet Browser (O2),
- It is installed as an Internet browser toolbar (O3),
- It installs as a program (O42)
– It creates multiple “Software” registry keys,
- Adds additional folders (O43),
- It modifies the Internet search provider (O69),
Preview in reports
P2 – FPN: [HKLM] [@TranslationBuddy_5e.com/Plugin] – (.MindSpark – MindSpark Toolbar Platform Plugin Stub for 32-bit Windows.) — C:\Program Files\TranslationBuddy_5e\bar\5.bin\NP5eStub.dll
O2 – BHO: Search Assistant BHO – {8d28b450-b378-448a-a02f-c893bc7ed416}. (.MindSpark – MindSpark Search Assistant.) — C:\Program Files\TranslationBuddy_5e\bar\5.bin\5eSrcAs.dll
O2 – BHO: Toolbar BHO – {dafcc24f-ff8f-4df8-a6d8-c4f8111181df} . (.MindSpark – MindSpark Toolbar Platform.) — C:\Program Files\TranslationBuddy_5e\bar\5.bin\5ebar.dll
O3 – Toolbar: TranslationBuddy – [HKLM]{a3c5f699-f046-47e7-8011-06269bc6ed24}. (.MindSpark – MindSpark Toolbar Platform.) — C:\Program Files\TranslationBuddy_5e\bar\5.bin\5ebar.dll
O4 – HKLM\..\Run: [TranslationBuddy Search Scope Monitor] C:\Program Files\Program Files\TranslationBuddy_5e\5.bin\5esrchmn.exe
O42 – Software: TranslationBuddy Internet Explorer Toolbar – (.Mindspark Interactive Network.) [HKLM] — TranslationBuddy_5ebar Uninstall Internet Explorer
[HKCU\Software\TranslationBuddy_5e]
[HKLM\Software\TranslationBuddy_5e]
O43 – CFD: 29/11/2013 – 22:47:46 – [12,504] —-D C:\Program Files\TranslationBuddy_5e
O43 – CFD: 23/01/2014 – 19:18:13 PM – [0,966] —-D C:\Documents and Settings\Coolman\Application Data\TranslationBuddy_5e
[HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{dafcc24f-ff8f-4df8-a6d8-c4f8111181df}]
[HKLM\Software\Classes\CLSID\{dafcc24f-ff8f-4df8-a6d8-c4f8111181df}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{dafcc24f-ff8f-4df8-a6d8-c4f8111181df}]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{dafcc24f-ff8f-4df8-a6d8-c4f8111181df}]
[HKLM\Software\Microsoft\Internet Explorer\Toolbar]:{A3C5F699-F046-47E7-8011-06269BC6ED24}
[HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser]:{A3C5F699-F046-47E7-8011-06269BC6ED24}
[HKCU\Software\TranslationBuddy_5e]
[HKLM\Software\TranslationBuddy_5e]
C:\Program Files\TranslationBuddy_5e
C:\Program Files\TranslationBuddy_5e\bar\5.bin\NP5eStub.dll
C:\Program Files\TranslationBuddy_5e\bar\5.bin\5eSrcAs.dll
C:\Program Files\TranslationBuddy_5e\bar\5.bin\5ebar.dll
C:\Documents and Settings\Coolman\Application Data\TranslationBuddy_5e
Alias
avast!:Win32:Mindspark-A [PUP] AVG:Zango
Malwarebytes Anti-Malware: PUP.Optional.MindSpark.A
Reason Heuristics: PUP.Service.MindsparkInteractiveNetwork.I
VIPRE Antivirus: MyWebSearch.J
How to remove TranslationBuddy?
