Should I block it?

98%
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization

Relationships

Parent process
Child process
Related files

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegCloseKey, RegQueryValueExA, RegFlushKey, RegSetValueExA, RegCreateKeyExA, RegDeleteValueA, RegDeleteKeyA, RegQueryInfoKeyA, RegEnumKeyExA, RegNotifyChangeKeyValue, RegOpenKeyExA
kernel32.dll
GetModuleFileNameA, lstrlenW, OpenMutexA, GetStartupInfoA, ExitProcess, GetCommandLineA, GetModuleHandleA, InitializeCriticalSection, DeleteCriticalSection, DebugBreak, HeapAlloc, GetProcessHeap, HeapReAlloc, HeapFree, LeaveCriticalSection, EnterCriticalSection, LocalFree, GetProcAddress, lstrcpynA, GetVersionExA, GetFileAttributesA, LoadLibraryExA, CreateProcessA, FreeLibrary, ResetEvent, GetLastError, CreateEventA, SetLastError, GetSystemDirectoryA, CompareFileTime, GetSystemTimeAsFileTime, GetTickCount, SystemTimeToFileTime, GetSystemTime, lstrcmpiA, Sleep, CreateFileMappingA, DuplicateHandle, GetCurrentProcess, OpenFileMappingA, MapViewOfFile, UnmapViewOfFile, FindResourceA, LoadResource, LockResource, lstrlenA, lstrcpyA, lstrcatA, CreateMutexA, WaitForSingleObject, ReleaseMutex, CloseHandle, GetDriveTypeA, GetLocalTime
ole32.dll
CLSIDFromString
user32.dll
SetWindowsHookExA, MsgWaitForMultipleObjects, PeekMessageA, TranslateMessage, DispatchMessageA, UnhookWindowsHookEx, GetKeyboardType, CharNextA, wsprintfA
version.dll
GetFileVersionInfoSizeA, VerQueryValueA, GetFileVersionInfoA

2psrchmn.exe

MindSpark Toolbar Platform SearchScope Monitor by Mindspark Interactive Network (Signed)

Remove 2psrchmn.exe
Version:   1, 0, 0, 12
MD5:   cca818a157a991cfd0b0d17c0c6d4ecd
SHA1:   585a73eb1dfa6b0b5c5ff5d76212fd8d0cef4df4
SHA256:   886e8ba792af1250b359c8ccd8834f4d7d77badc3e8deae9cb6d8e8577842df7
Warning 5 antivirus scanners has detected malware.

What is 2psrchmn.exe?

The Coupon Alert Toolbar installs into your Internet browser and allows you to search the Internet with MyWebSearch, a known adware type program that changes and redircts all of your search results as well as DNS errors, and modifies your home page to mywebsearch.com or some other webpage. MyWebSearch automatically becomes your default search service which hijacks all your search requests as well as tracks your Internet surfing behavior to send you targeted advertising.

About 2psrchmn.exe (from Mindspark Interactive Network)

“The Coupon Toolbar gives you the fastest access to the hottest deals on the Web. You’ll be able to find bargains on a host of products and services from the nation’s top retailers. The Coupon Toolbar ”

DetailsDetails

File name:2psrchmn.exe
Publisher:MindSpark
Product name:MindSpark Toolbar Platform SearchScope Monitor
Typical file path:C:\Program Files\couponalert_2p\bar\1.bin\2psrchmn.exe
Original name:t8SrchMn.exe
File version:1, 0, 0, 12
Product version:2, 3, 0, 0
Size:41.54 KB (42,536 bytes)
Certificate
Issued to:Mindspark Interactive Network
Digital DNA
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'Astrology Search Scope Monitor' → "C:\Program Files2\ASTROL~2\bar\1.bin\4asrchmn.exe" /m=2 /w /h
  • 'PopularScreensavers Search Scope Monitor' → "C:\Program Files2\POPULA~2\bar\1.bin\7isrchmn.exe" /m=2 /w /h
  • 'FromDocToPDF Search Scope Monitor' → "C:\Program Files1\FROMDO~2\bar\1.bin\65srchmn.exe" /m=2 /w /h
  • 'CursorMania Search Scope Monitor' → "C:\Program Files1\CURSOR~2\bar\1.bin\7lsrchmn.exe" /m=2 /w /h
  • 'HeadlineAlley Search Scope Monitor' → "C:\Program Files2\HEADLI~2\bar\1.bin\29srchmn.exe" /m=2 /w /h
  • 'MyFunCards Search Scope Monitor' → "C:\Program Files1\MYFUNC~2\bar\1.bin\5msrchmn.exe" /m=2 /w /h
  • 'MapsGalaxy Search Scope Monitor' → "C:\Program Files1\MAPSGA~2\bar\1.bin\39srchmn.exe" /m=2 /w /h
  • 'TranslationBuddy Search Scope Monitor' → "C:\Program Files1\TRANSL~2\bar\1.bin\5esrchmn.exe" /m=2 /w /h
  • 'InboxAce Search Scope Monitor' → "C:\Program Files1\INBOXA~2\bar\1.bin\1gsrchmn.exe" /m=2 /w /h
  • 'Utility Chest Search Scope Monitor' → "C:\Program Files2\UTILIT~2\bar\1.bin\49srchmn.exe" /m=2 /w /h
  • 'Recipe Hub Search Scope Monitor' → "C:\Program Files2\RECIPE~2\bar\1.bin\2jsrchmn.exe" /m=2 /w /h
  • 'SoccerInferno Search Scope Monitor' → "C:\Program Files1\SOCCER~2\bar\1.bin\j2srchmn.exe" /m=2 /w /h
  • 'DotSpot Search Scope Monitor' → "C:\Program Files2\DOTSPO~2\bar\1.bin\2ksrchmn.exe" /m=2 /w /h
  • 'MyOwnSuperhero Search Scope Monitor' → "C:\Program Files1\MYOWNS~2\bar\1.bin\v3srchmn.exe" /m=2 /w /h
  • 'WeatherBlink Search Scope Monitor' → "C:\Program Files1\WEATHE~2\bar\1.bin\gcsrchmn.exe" /m=2 /w /h
  • 'GamingWonderland Search Scope Monitor' → "C:\Program Files1\GAMING~2\bar\1.bin\gtsrchmn.exe" /m=2 /w /h
  • 'ReferenceBoss Search Scope Monitor' → "C:\Program Files1\REFERE~3\bar\1.bin\1psrchmn.exe" /m=2 /w /h
  • 'Gaming Assassin Search Scope Monitor' → "C:\Program Files2\GAMING~2\bar\1.bin\4ssrchmn.exe" /m=2 /w /h
  • 'RadioRage Search Scope Monitor' → "C:\Program Files2\RADIOR~2\bar\1.bin\4jsrchmn.exe" /m=2 /w /h
  • 'TelevisionFanatic Search Scope Monitor' → "C:\Program Files2\TELEVI~2\bar\1.bin\64srchmn.exe" /m=2 /w /h
  • 'QuotationCafe Search Scope Monitor' → "C:\Program Files2\QUOTAT~2\bar\1.bin\45srchmn.exe" /m=2 /w /h
  • 'TotalRecipeSearch Search Scope Monitor' → "C:\Program Files2\TOTALR~2\bar\1.bin\14srchmn.exe" /m=2 /w /h

MalwareMalware detections

Based on 40+ industry antivirus scanners, 5 of them detected the following malware.
Antivirus engineEngine versionDetection
avast! 6.0.1289.0 Win32:FunWeb-K [PUP]
AVG 2014.0.3629 AdInstaller.FunWeb
Comodo Internet Security 15691 ApplicUnwnt.Win32.MyWebSearch.~AAB
Kingsoft 2013.1.8.219 Win32.Troj.Generic.a.(kcloud)
VIPRE Antivirus 16282 MyWebSearch.J (v) (not malicious)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00191288%
0.028634%
Kernel CPU:0.00153785%
0.013761%
User CPU:0.00037503%
0.014873%
Kernel CPU time:63 ms/min
100,923,805ms/min
CPU cycles:13,642/sec
17,470,203/sec
Context switches:5/sec
284/sec
Memory
Private memory:946.86 KB
21.59 MB
Private (maximum):2.05 MB
Private (minimum):1.15 MB
Non-paged memory:946.86 KB
21.59 MB
Virtual memory:39.01 MB
140.96 MB
Virtual memory (peak):50.76 MB
169.69 MB
Working set:1.19 MB
18.61 MB
Working set (peak):3.63 MB
37.95 MB
Page faults:2,781/min
2,039/min
I/O
I/O read transfer:5 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:4 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:35 Bytes/sec
448.09 KB/min
I/O other operations:3/sec
1,671/min
Resource allocations
Threads:2
12
Handles:71
600
GUI GDI count:4
103
GUI GDI peak:4
142
GUI USER count:2
49
GUI USER peak:2
71

BehaviorsProcess properties

Integrety level:Medium
Platform:32-bit
Command lines:
  • "C:\Program Files\videodownloadconverter_4z\bar\1.bin\4zsrchmn.exe" /m=2 /w /h
  • "C:\progra~1\televi~2\bar\1.bin\64srchmn.exe" /m=2 /w /h
  • "C:\Program Files\mapsgalaxy_39\bar\1.bin\39srchmn.exe" /m=2 /w /h
  • "C:\Program Files\filmfanatic\bar\1.bin\pasrchmn.exe" /m=2 /w /h
  • "C:\Program Files\dictionaryboss\bar\1.bin\v4srchmn.exe" /m=2 /w /h
  • "C:\Program Files\televisionfanatic\bar\1.bin\64srchmn.exe" /m=2 /w /h
  • "C:\progra~1\videod~2\bar\1.bin\4zsrchmn.exe" /m=2 /w /h
  • (12 more)
Owner:User
Parent process:Explorer.EXE (Windows Explorer by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Home Premium 25.17%
Windows 7 Ultimate N 18.88%
Windows 7 Ultimate 15.38%
Microsoft Windows XP 13.99%
Windows 7 Professional 4.90%
Windows Vista Home Premium 4.20%
Windows 8 3.50%
Windows 8 Pro 3.50%
Windows Vista Home Basic 3.50%
Windows 7 Enterprise 3.50%
Windows 7 Home Basic 2.80%
Windows 8 Pro with Media Center 0.70%

Distribution by countryDistribution by country

United States installs about 49.63% of MindSpark Toolbar Platform SearchScope Monitor.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Dell 34.62%
Acer 15.38%
Samsung 11.54%
GIGABYTE 9.62%
Intel 7.69%
Toshiba 7.69%
Hewlett-Packard 3.85%
ASUS 3.85%
Sony 3.85%
American Megatrends 1.92%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE