Home Malware Programs Potentially Unwanted Programs (PUPs) FindMeFreebies Toolbar

FindMeFreebies Toolbar

Posted: August 20, 2015

Threat Metric

Ranking: 4,469
Threat Level: 1/10
Infected PCs: 26,028
First Seen: August 12, 2015
Last Seen: October 16, 2023
OS(es) Affected: Windows

The FindMeFreebies Toolbar is an example of an add-on component from Mindspark Interactive Network that is deemed a potentially unwanted program (PUP). While FindMeFreebies Toolbar doesn’t display advertisements, it is promoted on its associated website and can be downloaded installed primarily from that site. Use of the FindMeFreebies Toolbar is promoted as being a method of finding various freebies on the internet, in addition to random coupon deals and price discounts. Some computer users may find FindMeFreebies Toolbar to be unnecessary, which is one of the few reasons that it is considered to be a potentially unwanted program. Removing the FindMeFreebies Toolbar is not mandatory, but if you are not happy with the service it provides, then you may want to uninstall it via the Internet Explorer Control Panel or by using your web browser's settings.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files\FindMeFreebies_9e\bar\1.bin\9eBar.dll File name: C:\Program Files\FindMeFreebies_9e\bar\1.bin\9eBar.dll
MD5: 55bb146847cf8fc07253de6ab20041a9
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9ebar.dll File name: 9ebar.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9ehighin.exe File name: 9ehighin.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
9emedint.exe File name: 9emedint.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
9eregfft.dll File name: 9eregfft.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9eregiet.dll File name: 9eregiet.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9ehkstub.dll File name: 9ehkstub.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9ereghk.dll File name: 9ereghk.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9eSrcAs.dll File name: 9eSrcAs.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9eSrchMn.exe File name: 9eSrchMn.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
NP9eStub.dll File name: NP9eStub.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
T8HTML.DLL File name: T8HTML.DLL
File type: Dynamic link library
Mime Type: unknown/DLL
Group: Malware file
9ePlugin.dll File name: 9ePlugin.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9eauxstb.dll File name: 9eauxstb.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9ebprtct.dll File name: 9ebprtct.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9edlghk.dll File name: 9edlghk.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9eradio.dll File name: 9eradio.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9eieovr.dll File name: 9eieovr.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
T8TICKER.DLL File name: T8TICKER.DLL
File type: Dynamic link library
Mime Type: unknown/DLL
Group: Malware file
9esknlcr.dll File name: 9esknlcr.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9eimpipe.exe File name: 9eimpipe.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
9emsg.dll File name: 9emsg.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9etpinst.dll File name: 9etpinst.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
T8EXTEX.DLL File name: T8EXTEX.DLL
File type: Dynamic link library
Mime Type: unknown/DLL
Group: Malware file
T8EXTPEX.DLL File name: T8EXTPEX.DLL
File type: Dynamic link library
Mime Type: unknown/DLL
Group: Malware file
T8RES.DLL File name: T8RES.DLL
File type: Dynamic link library
Mime Type: unknown/DLL
Group: Malware file
9ebarsvc.exe File name: 9ebarsvc.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
9ebrmon.exe File name: 9ebrmon.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
9ebrstub.dll File name: 9ebrstub.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9edyn.dll File name: 9edyn.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9efeedmg.dll File name: 9efeedmg.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9ehtmlmu.dll File name: 9ehtmlmu.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9emlbtn.dll File name: 9emlbtn.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9escript.dll File name: 9escript.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9eskin.dll File name: 9eskin.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9edatact.dll File name: 9edatact.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9ehttpct.dll File name: 9ehttpct.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9eidle.dll File name: 9eidle.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
9eskplay.exe File name: 9eskplay.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
9euabtn.dll File name: 9euabtn.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
AppIntegrator64.exe File name: AppIntegrator64.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
AppIntegratorStub64.dll File name: AppIntegratorStub64.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
CREXT.DLL File name: CREXT.DLL
File type: Dynamic link library
Mime Type: unknown/DLL
Group: Malware file
CrExtP9e.exe File name: CrExtP9e.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
DPNMNGR.DLL File name: DPNMNGR.DLL
File type: Dynamic link library
Mime Type: unknown/DLL
Group: Malware file
EXEMANAGER.DLL File name: EXEMANAGER.DLL
File type: Dynamic link library
Mime Type: unknown/DLL
Group: Malware file
Hpg64.dll File name: Hpg64.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
VERIFY.DLL File name: VERIFY.DLL
File type: Dynamic link library
Mime Type: unknown/DLL
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

CLSID{1220E113-6706-4C80-80BF-F1391B01D397}{13137209-3D8E-4606-8AD2-1CDDD110DC83}{1e16350b-b12e-416c-aaa6-97106cad194e}{1ECAF215-0057-4694-82A6-F057A7DC9807}{289FA1E1-F1EE-4046-8CEA-A90A38030CF9}{31535FA0-7350-41F9-8310-1DB4863A0AE4}{3F29C5BB-8830-4789-A59C-E731EB2ED103}{4068D721-9805-4AEA-A6E7-A2CCC98812FA}{457AF523-6A88-4795-B47C-5D484A6E2D4A}{4b4490a0-175c-40f2-8eea-ab47181101d8}{4f7c3bc0-e78f-47bc-8291-4345d11d563d}{6a19a909-6cb7-4a7f-808b-6b4078b93d0a}{6AB0C02B-4DD8-466C-B4E7-4A678854F490}{6D574AB4-4F00-459B-A823-0C6607956F32}{6E6D8EE4-EDF2-4773-B5A9-95C92C778E43}{6F940E92-6857-40EF-85A8-21C43C265071}{73FA236D-0DEE-47FF-99F0-7623D2BF4BFE}{78e686e1-42d1-46a3-a722-8d7c7f824bcd}{7BA955B3-AAB6-478F-A5D9-5BC3F6C02C43}{8516C10A-655B-4EBD-AEB0-ABA343C4B6E8}{8CB94FBB-547D-4114-B19A-7A0A01E7E2AF}{8DD12A59-21FC-4828-903A-165A6F58CAE9}{a1623184-a0fb-4e73-962a-5c0c7f2707e3}{a1abaf97-24b6-431c-80e9-63b9017637aa}{A356085A-EA27-4367-9322-148EE31B0BBA}{a38cbe39-f560-46e1-a778-d0f373a272b1}{A514AF92-775B-40AF-9FF7-A57F0412ECF6}{AE5A2116-E1D3-4CD9-B1B0-E7BF1975E139}{B5D61767-0A1A-4D0F-87DB-593535016C0D}{B9DE04DE-67F1-4AA6-BCF3-289AE3D5B3A0}{BAE1FD0A-B60A-4B93-BADB-680B5F365AE4}{BCE407B2-CD13-49AE-BCDD-44110F1DC335}{C090350A-8062-45FC-8612-29B8651C6A70}{c49c05de-8a8d-4024-81d6-ed6078ccf79d}{C58015C3-397F-4B57-9BF3-C1F5C0F5F07C}{C878CEED-F15C-4993-84B0-13656EF36A69}{c93d5448-7bd7-4b9d-aba2-be3fd64a5ca7}{CBA408D3-6AFE-4AED-A7DC-5EE9D60D74A2}{D30B4991-5636-4512-9A5F-23510598716D}{D41B795B-2A71-4714-A957-BAD254246ECC}{D5C49071-F902-4C67-897F-E405BA25B039}{d89e466a-78a1-43ca-bc11-4ce87c58d3eb}{E72E7391-18A5-4A16-8F9F-323CB0F7AD79}{ec2d1d0e-66ee-43c3-9096-b89dd7f72344}{EF6E0CE5-E93A-488F-8A9C-469111A444F5}{F1955485-E7C9-473E-8519-9AA4451342ED}{f46ec49f-b9f5-4f0a-afc1-07043d43e5ee}{FA5D82C5-8FC0-4F0C-91B4-325178B9E86F}{ff493240-047f-453c-831e-d38cc67e71be}File name without pathfindmefreebies.dl.tb.ask[1].xmlhttp_findmefreebies.dl.myway.com_0.localstoragehttp_findmefreebies.dl.myway.com_0.localstorage-journalhttp_findmefreebies.dl.tb.ask.com_0.localstoragehttp_findmefreebies.dl.tb.ask.com_0.localstorage-journalHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\FindMeFreebies_9eSoftware\FindMeFreebiesSOFTWARE\FindMeFreebies_9eSoftware\Microsoft\Internet Explorer\Approved Extensions\{158016B8-9589-42D6-8376-85AF1CA86781}Software\Microsoft\Internet Explorer\Approved Extensions\{A1ABAF97-24B6-431C-80E9-63B9017637AA}Software\Microsoft\Internet Explorer\Approved Extensions\{CBBD60C5-3348-4ABC-BAD7-CD729CD396FF}Software\Microsoft\Internet Explorer\DOMStorage\findmefreebies.dl.tb.ask.comSoftware\Microsoft\Internet Explorer\LowRegistry\DOMStorage\findmefreebies.dl.myway.comSOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\findmefreebies.dl.tb.ask.comSOFTWARE\Wow6432Node\FindMeFreebies_9eHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}FindMeFreebiesTooltab Uninstall Internet Explorer

Additional Information

The following directories were created:
%LOCALAPPDATA%\FindMeFreebiesTooltab%LOCALAPPDATA%\FindMeFreebies_9e%PROGRAMFILES%\FindMeFreebies_9e%PROGRAMFILES(x86)%\FindMeFreebies_9e%USERPROFILE%\AppData\LocalLow\FindMeFreebies_9e
Loading...