MapsGalaxy Firefox Toolbar

MapsGalaxy Firefox Toolbar

Known Toolbar

by Mindspark Interactive Network

What is MapsGalaxy Firefox Toolbar?

MapsGalaxy Firefox Toolbar is software application developed by Mindspark Interactive Network. It is most commonly found on computers running Windows 7 with nearly 62.80% of installations running this operating system. MapsGalaxy Firefox Toolbar's installer is typically 8.00 MB in size and installs around 21 files.

MapsGalaxy Firefox Toolbar is most popular in the United States with 71.88% of installations residing in this country.

About MapsGalaxy Firefox Toolbar?

The MapsGalaxy Firefox Toolbar is a web browser extension that offers users the ability to search the Internet using MyWebSearch. This toolbar may modify search results and DNS errors, as well as change the home page to mywebsearch.com or another designated webpage. MyWebSearch may also become the default search service and track internet activity for targeted advertising. The MetroCast Toolbar is an ad-supported web browser plugin that may display additional advertisements. This plugin has features that can alter browser settings, including the home page and search settings. It can also change the default search engine and enable search from the browser's address bar.

Multiple virus scanners have detected malware in MapsGalaxy Firefox Toolbar.

39brmon.exe (MD5: 3e1dfacf17584f0aa2372f993ec15618) has been flagged by 21 scanners:
Scanner Software Result
Avira AntiVir TR/Trash.Gen
avast! Win32:FunWeb-K [PUP]
Comodo Security UnclassifiedMalware
Dr.Web Trojan.Damaged.1
IKARUS anti.virus Trojan.Trash
McAfee-GW-Edition Heuristic.BehavesLike.Exploit.CodeExec.I
PC Tools HeurEngine.MalPE
SUPERAntiSpyware Trojan.Agent/Gen-Nullo[Short]
Symantec Bloodhound.MalPE
TrendMicro-HouseCall TROJ_GEN.RCBH1KE
AVG Toolbar.MyWebSearch.D
AVware MyWebSearch.J (v)
ESET-NOD32 Win32/Toolbar.MyWebSearch.T
F-Prot W32/Mywebsearch.H2.gen!Eldorado
G Data Win32.Adware.Mindspark.C
Kaspersky not-a-virus:WebToolbar.Win32.MyWebSearch.sw
Kingsoft AntiVirus Win32.Troj.Undef.(kcloud)
VIPRE Antivirus MyWebSearch.J (v) (not malicious)
Zillya Adware.WebSearch.Win32.171
Bkav FE W32.Clod028.Trojan.f1cd
nProtect Adware/W32.Agent.62864
NP39Stub.dll (MD5: 7a3d4f9ad1e86a4a9c8f45aed4d758b5) has been flagged by 12 scanners:
Scanner Software Result
avast! Win32:Mindspark-A [PUP]
AVG Toolbar.MyWebSearch.D
AVware MyWebSearch.J (v)
ESET-NOD32 Win32/Toolbar.MyWebSearch.T
F-Prot W32/Mywebsearch.H2.gen!Eldorado
G Data Win32.Adware.Mindspark.C
Kaspersky not-a-virus:WebToolbar.Win32.MyWebSearch.sw
Kingsoft AntiVirus Win32.Troj.Undef.(kcloud)
VIPRE Antivirus MyWebSearch.J (v) (not malicious)
Zillya Adware.WebSearch.Win32.171
Bkav FE W32.Clod028.Trojan.f1cd
nProtect Adware/W32.Agent.62864
39SrchMn.exe (MD5: fb85f333d10b1475650c4304f99a1ece) has been flagged by 25 scanners:
Scanner Software Result
Antiy-AVL Trojan/Win32.Generic
avast! Win32:Mindspark-A [PUP]
AVG Skodna.Generic.AOF
Bkav FE W32.Cloddd7.Trojan.8c0b
Dr.Web Adware.MyWebSearch.47
ESET-NOD32 Win32/Toolbar.MyWebSearch.W
K7 AntiVirus Trojan ( 0047e1181 )
K7GW Trojan ( 0047e1181 )
Kingsoft AntiVirus Win32.Troj.Undef.(kcloud)
NANO AntiVirus Trojan.Win32.MyWebSearch.crhhqy
nProtect Trojan/W32.Agent.44784.D
VIPRE Antivirus MyWebSearch.J (v) (not malicious)
Avira AntiVir TR/Trash.Gen
Comodo Security UnclassifiedMalware
IKARUS anti.virus Trojan.Trash
McAfee-GW-Edition Heuristic.BehavesLike.Exploit.CodeExec.I
PC Tools HeurEngine.MalPE
SUPERAntiSpyware Trojan.Agent/Gen-Nullo[Short]
Symantec Bloodhound.MalPE
TrendMicro-HouseCall TROJ_GEN.RCBH1KE
AVware MyWebSearch.J (v)
F-Prot W32/Mywebsearch.H2.gen!Eldorado
G Data Win32.Adware.Mindspark.C
Kaspersky not-a-virus:WebToolbar.Win32.MyWebSearch.sw
Zillya Adware.WebSearch.Win32.171
39SrcAs.dll (MD5: cb31249537d2758f73046888aa02ca7a) has been flagged by 5 scanners:
Scanner Software Result
avast! Win32:FunWeb-K [PUP]
AVG AdInstaller.FunWeb
Bkav FE W32.Clod028.Trojan.f1cd
nProtect Adware/W32.Agent.62864
VIPRE Antivirus MyWebSearch.J (v) (not malicious)

Startup Entries

Registry entries:
  • 39brmon.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ctfmon.exe' and executes as C:\Program Files3\rundll32.exe C:\Program Files3\lni28.dat,FG00.

Software Details

URL:
https://support.mindspark.com
Support:
–
Installation path:
C:\Program Files\MapsGalaxy_39\bar\1.bin
Uninstaller:
rundll32 "C:\Program Files\MapsGalaxy_39\bar\1.bin\39Bar.dll",O mindsparktoolbarkey="MapsGalaxy_39" uninstalltype="FF"
Size:
8.00 MB
Language:
English

MapsGalaxy Firefox Toolbar Executable Details

Primary executable:
39bar.dll
Name:
MapsGalaxy Firefox Toolbar
Path:
C:\Program Files\MapsGalaxy_39\bar\1.bin\39bar.dll
MD5:
f86336c978311761bc3e2a80b08d46bc
SHA-1:
–
SHA-256:
–
Files installed by MapsGalaxy Firefox Toolbar
File Type Filename MD5
DLL
3d4aca84349bff8642dc00145bbc51c4
DLL
1c8c0b13a323474f95abc9f05eed227d
DLL
e8298b19ec987061e98f83dff8c310be
EXE
3e1dfacf17584f0aa2372f993ec15618
DLL
4876e787ed8d945838235f8cfe079d05
DLL
b315203e6d9995156946194516cf5332
DLL
22ae719e91b4bfcdf6122d3e2a0f272e
DLL
7a3d4f9ad1e86a4a9c8f45aed4d758b5
EXE
fb85f333d10b1475650c4304f99a1ece
DLL
cb31249537d2758f73046888aa02ca7a