CursorMania Toolbar

CursorMania Toolbar

Known Toolbar

by Mindspark Interactive Network

What is CursorMania Toolbar?

CursorMania Toolbar is software application developed by Mindspark Interactive Network. It is most commonly found on computers running Windows 7 with nearly 65.71% of installations running this operating system. CursorMania Toolbar's installer is typically 10.00 MB in size and installs around 41 files.

CursorMania Toolbar is most popular in the United States with 48.51% of installations residing in this country.

CursorMania Toolbar adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About CursorMania Toolbar?

The toolbar offers several key functionalities, including the ability to customize the web browser's default home page to MyWebSearch.com and change the built-in search box to MyWebSearch.com. Additionally, it allows users to modify the 'new tab' functionality to launch the modified search portal page and adds alternative error page and DNS error functionality. Furthermore, the toolbar includes additional features aimed at protecting the search and home page settings.

Multiple virus scanners have detected malware in CursorMania Toolbar.

AppIntegrator64.exe (MD5: 41ddfb8d89acedc3bce9d0c779a5bf09) has been flagged by 10 scanners:
Scanner Software Result
avast! Win32:Mindspark-A [PUP]
AVG Zango
ESET-NOD32 a variant of Win64/Toolbar.MyWebSearch.A
K7 AntiVirus Trojan ( 004703fc1 )
TrendMicro-HouseCall TROJ_GEN.F47V1208
VIPRE Antivirus MyWebSearch.J (v) (not malicious)
Kingsoft AntiVirus Win32.Troj.Undef.(kcloud)
NANO AntiVirus Trojan.Win32..csafum
AhnLab-V3 Trojan/Win32.Buzus
Bkav FE W32.Clod4e1.Trojan.028c
7lbrmon64.exe (MD5: 565575c26d63ffad0b81bc4eec13a145) has been flagged by 5 scanners:
Scanner Software Result
avast! Win32:Mindspark-A [PUP]
AVG Zango
Bkav FE W32.Cloda25.Trojan.51df
TrendMicro-HouseCall TROJ_GEN.F47V1206
VIPRE Antivirus MyWebSearch.J (v) (not malicious)
7lbrmon.exe (MD5: 4c6bae7dbb9c97a51c65f2cb55069526) has been flagged by 5 scanners:
Scanner Software Result
avast! Win32:Mindspark-A [PUP]
AVG Zango
Bkav FE W32.Clodad1.Trojan.d408
TrendMicro-HouseCall TROJ_GEN.F47V1206
VIPRE Antivirus MyWebSearch.J (v) (not malicious)
7lbarsvc.exe (MD5: 42b9d6e7b18f7ad09cf47323e592d421) has been flagged by 5 scanners:
Scanner Software Result
avast! Win32:Mindspark-A [PUP]
AVG Zango
Bkav FE W32.Clod4e1.Trojan.028c
TrendMicro-HouseCall TROJ_GEN.F47V1206
VIPRE Antivirus MyWebSearch.J (v) (not malicious)
7lmedint.exe (MD5: 59b38ccfd561682a7ee32d97656fa8fb) has been flagged by 8 scanners:
Scanner Software Result
avast! Win32:Mindspark-A [PUP]
AVG Zango
Kingsoft AntiVirus Win32.Troj.Undef.(kcloud)
NANO AntiVirus Trojan.Win32..csafum
TrendMicro-HouseCall TROJ_GEN.F47V1208
VIPRE Antivirus MyWebSearch.J (v) (not malicious)
AhnLab-V3 Trojan/Win32.Buzus
Bkav FE W32.Clod4e1.Trojan.028c

Software Behaviors

Services:
  • 7lbarsvc.exe runs as a service named 'QuotationCafeService' (QuotationCafe_45Service).
Scheduled tasks:
  • AppIntegrator64.exe is scheduled as a task named 'MySearchDial' (runs daily at 6:21 PM).

Startup Entries

Registry entries:
  • 7lmedint.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'MapsGalaxy EPM Support' and executes as "C:\Program Files2\MAPSGA~2\bar\1.bin\39medint.exe" T8EPMSUP.DLL,S.
  • 7lbrmon64.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'MapsGalaxy_39 Browser Plugin Loader 64' and executes as C:\Program Files\MapsGalaxy_39\bar\1.bin\39brmon64.exe.
  • 7lSrchMn.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Hoolapp Android' and executes as "C:\users\user\appdata\Roaming\HOOLAP~1\Hoolapp.exe" /Minimized.

Software Details

URL:
https://search.mywebsearch.com/mywebsearch/default.jhtml
Support:
Installation path:
C:\Program Files\CursorMania_7l\bar\3.bin
Uninstaller:
rundll32 C:\Program Files2\CURSOR~2\bar\1.bin\7lBar.dll,O mindsparktoolbarkey="CursorMania_7l"
Size:
10.00 MB
Language:
English

CursorMania Toolbar Executable Details

Primary executable:
7lbar.dll
Name:
CursorMania Toolbar
Path:
C:\Program Files\CursorMania_7l\bar\3.bin\7lbar.dll
MD5:
3f7583821989e49412f4a3531f04744b
SHA-1:
SHA-256:
Files installed by CursorMania Toolbar
File Type Filename MD5
EXE
42b9d6e7b18f7ad09cf47323e592d421
DLL
cf0646bb879911192c833e314e0afc57
EXE
59b38ccfd561682a7ee32d97656fa8fb
EXE
4f3ec39ced1d1db84bf453f87364f4ce
DLL
b14c33722ed1771c2850a30a79385905
DLL
bb0df7b4026591f5b6e309dd753ec4f6
DLL
86bd767619f57ea790cb17345c404eb8
DLL
8de932b27bbb075b0f7a22cd0575a58c
DLL
340187c806086411fdedda665cb8cdf6
DLL
be63e4a3479225b2afd9714dfdc23555