iPumper Toolbar

iPumper Toolbar Description

iPumper Toolbar is an unwanted toolbar/adware, which may access the compromised PC packaged with other freeware and shareware programs. iPumper Toolbar may also operate as a browser hijacker and forcibly reroute computer users to tricky websites. iPumper Toolbar may also make target Internet users visit other websites that are not connected with their search queries. iPumper Toolbar can be downloaded manually. However, it can also enter the affected computer system packed with other applications, such as freeware and shareware programs that come from suspicious sources. While being installed on the compromised PC, iPumper Toolbar may make changes to Windows HOSTS file and hacks all web browsers in an effort to emerge on them as a toolbar. iPumper Toolbar may starts interrupting the PC user's search sessions and reroute him to dubious websites. iPumper Toolbar may trace the target PC user's surfing activities and show commercial pop-up advertisements.

Technical Information

File System Details

iPumper Toolbar creates the following file(s):
# File Name Size MD5 Detection Count
1 %APPDATA%\iPumper\Updater.exe 9,728 290777126676f78107e6b93f54d06c1a 32
2 %APPDATA%\iPumper\ipumperinst.exe 4,886,472 68961d9b50cb63207837cbfa546e7a4c 11
3 E:\Setups\iPumper.exe 581,864 4dcb97c728ee20688b75d183acdb4fe4 3
More files

Registry Details

iPumper Toolbar creates the following registry entry or registry entries:
Regexp file mask
%windir%\system32\tasks\escolade
File name without path
iPumper.lnk
PileFile.lnk
Uninstaller
{A0099012-E037-4DEF-A539-2E02F0DC7446}_is1
{E2AF26F0-6DCC-410c-A24D-ED093DDE1638}
Directory
%AllUsersProfile%\Microsoft\Windows\Start Menu\Programs\UniKeeper
%APPDATA%\iPumper
%APPDATA%\Microsoft\Windows\Start Menu\Programs\UniKeeper
%APPDATA%\UniKeeper
%PROGRAMFILES%\iPumper
%PROGRAMFILES%\UniKeeper
%PROGRAMFILES(x86)%\iPumper
%PROGRAMFILES(x86)%\UniKeeper
%Temp%\CT3282330
Registry key
Software\Informer Technologies, Inc.\UniKeeper
SOFTWARE\Mozilla\Firefox\Extensions\ntfdsaftsfdfdxx@mozilla.org
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\ntfdsaftsfdfdxx@mozilla.org

Site Disclaimer

Enigmasoftware.com is not associated, affiliated, sponsored or owned by the malware creators or distributors mentioned on this article. This article should NOT be mistaken or confused in being associated in any way with the promotion or endorsement of malware. Our intent is to provide information that will educate computer users on how to detect, and ultimately remove, malware from their computer with the help of SpyHunter and/or manual removal instructions provided on this article.

This article is provided "as is" and to be used for educational information purposes only. By following any instructions on this article, you agree to be bound by the disclaimer. We make no guarantees that this article will help you completely remove the malware threats on your computer. Spyware changes regularly; therefore, it is difficult to fully clean an infected machine through manual means.

Leave a Reply

Please DO NOT use this comment system for support or billing questions. For SpyHunter technical support requests, please contact our technical support team directly by opening a customer support ticket via your SpyHunter. For billing issues, please refer to our "Billing Questions or Problems?" page. For general inquiries (complaints, legal, press, marketing, copyright), visit our "Inquiries and Feedback" page.


HTML is not allowed.