p5ScrCtr.dll

Popular Screensavers by Mindspark Interactive Network (Signed)

Remove p5ScrCtr.dll

Version:	2,0,0,0
MD5:	da4d621f7913a241945e046d3ae35326
SHA1:	f9cfc856ee6ae11eed88ce6998b1a576dc23e1ef
SHA256:	b00719625a513504d355e6ff61d2c668c827fb5385419c8ddfc03dca7bca97d5

Warning 6 antivirus scanners has detected malware.

Overview

p5scrctr.dll is malware that is loaded as dynamic link library that runs in the context of a process. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). It is installed with a couple of know programs including Popular Screensavers published by Mindspark Interactive Network and PopularScreensavers published by Mindspark Interactive Network. The file is digitally signed by Mindspark Interactive Network which was issued by the VeriSign certificate authority (CA).

Details

File name:	p5scrctr.dll
Publisher:	FunWebProducts.com
Product name:	Popular Screensavers
Description:	Popular Screensavers Tools
Typical file path:	C:\Program Files\popularscreensavers\p5scrctr.dll
File version:	2,0,0,0
Size:	314.55 KB (322,096 bytes)
Certificate
Issued to:	Mindspark Interactive Network
Authority (CA):	VeriSign
Effective date:	Monday, April 9, 2012
Expiration date:	Wednesday, May 6, 2015
Digital DNA
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

Popular Screensavers

Mindspark Interactive Network

69% remove

This is a web browser extension/toolbar that will modify the user's home page and search provider to Ask.com.

PopularScreensavers

Mindspark Interactive Network

65% remove

Installs a potentailly unwanted Ask.com powered toolbr - "As part of the download process for the Toolbar, you may be given the option to reset your homepage and/or reset your new tab page to an Ask® home page and new tab product. This provides relevant links and results when you make a search request in your browser address bar or if your browser address (DNS) request is invalid, misspelled or incorrectly formatted. This is a search bo...

Behaviors

Startup files (user) run

Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'p5PopularScreensaversWallpaper' → rundll32 C:\Program Files2\POPULA~1\p5ScrCtr.dll,LES

Malware detections

Based on 40+ industry antivirus scanners, 6 of them detected the following malware.

Antivirus engine	Engine version	Detection
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	13.0.0.3169	Zango
Clam AntiVirus	0.97.3	Adware.Mywebsearch-6
ESET NOD32	7.9190	a variant of Win32/Toolbar.MyWebSearch.P
Trend Micro HouseCall	9.700.0.1001	TROJ_GEN.F47V0414
VIPRE Antivirus	24740	MyWebSearch.J (v) (not malicious)