What is MapsGalaxy Firefox Toolbar?

MapsGalaxy Firefox Toolbar is software application developed by Mindspark Interactive Network. It is most commonly found on computers running Windows 7 with nearly 62.80% of installations running this operating system. MapsGalaxy Firefox Toolbar's installer is typically 8.00 MB in size and installs around 21 files.

MapsGalaxy Firefox Toolbar is most popular in the United States with 71.88% of installations residing in this country.

About MapsGalaxy Firefox Toolbar?

The MapsGalaxy Firefox Toolbar is a web browser extension that offers users the ability to search the Internet using MyWebSearch. This toolbar may modify search results and DNS errors, as well as change the home page to mywebsearch.com or another designated webpage. MyWebSearch may also become the default search service and track internet activity for targeted advertising. The MetroCast Toolbar is an ad-supported web browser plugin that may display additional advertisements. This plugin has features that can alter browser settings, including the home page and search settings. It can also change the default search engine and enable search from the browser's address bar.

Multiple virus scanners have detected malware in MapsGalaxy Firefox Toolbar.

39brmon.exe (MD5: 3e1dfacf17584f0aa2372f993ec15618) has been flagged by 21 scanners:

Scanner Software	Version	Result
Avira AntiVir	7.11.63.174	TR/Trash.Gen
avast!	6.0.1289.0	Win32:FunWeb-K [PUP]
Comodo Security	15462	UnclassifiedMalware
Dr.Web		Trojan.Damaged.1
IKARUS anti.virus	T3.1.4.0.0	Trojan.Trash
McAfee-GW-Edition	2012.1	Heuristic.BehavesLike.Exploit.CodeExec.I
PC Tools	9.0.0.2	HeurEngine.MalPE
SUPERAntiSpyware	5.6.0.1008	Trojan.Agent/Gen-Nullo[Short]
Symantec	20121.3.0.76	Bloodhound.MalPE
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.RCBH1KE
AVG	15.0.0.4189	Toolbar.MyWebSearch.D
AVware	1.5.0.21	MyWebSearch.J (v)
ESET-NOD32	10652	Win32/Toolbar.MyWebSearch.T
F-Prot	4.7.1.166	W32/Mywebsearch.H2.gen!Eldorado
G Data	24	Win32.Adware.Mindspark.C
Kaspersky	12.0.0.1225	not-a-virus:WebToolbar.Win32.MyWebSearch.sw
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Undef.(kcloud)
VIPRE Antivirus	34410	MyWebSearch.J (v) (not malicious)
Zillya	2.0.0.1973	Adware.WebSearch.Win32.171
Bkav FE	1.3.0.4261	W32.Clod028.Trojan.f1cd
nProtect	2013-10-29.04	Adware/W32.Agent.62864

NP39Stub.dll (MD5: 7a3d4f9ad1e86a4a9c8f45aed4d758b5) has been flagged by 12 scanners:

Scanner Software	Version	Result
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	15.0.0.4189	Toolbar.MyWebSearch.D
AVware	1.5.0.21	MyWebSearch.J (v)
ESET-NOD32	10652	Win32/Toolbar.MyWebSearch.T
F-Prot	4.7.1.166	W32/Mywebsearch.H2.gen!Eldorado
G Data	24	Win32.Adware.Mindspark.C
Kaspersky	12.0.0.1225	not-a-virus:WebToolbar.Win32.MyWebSearch.sw
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Undef.(kcloud)
VIPRE Antivirus	34410	MyWebSearch.J (v) (not malicious)
Zillya	2.0.0.1973	Adware.WebSearch.Win32.171
Bkav FE	1.3.0.4261	W32.Clod028.Trojan.f1cd
nProtect	2013-10-29.04	Adware/W32.Agent.62864

39SrchMn.exe (MD5: fb85f333d10b1475650c4304f99a1ece) has been flagged by 25 scanners:

Scanner Software	Version	Result
Antiy-AVL	2.0.3.7	Trojan/Win32.Generic
avast!	8.0.1489.320	Win32:Mindspark-A [PUP]
AVG	13.0.0.3169	Skodna.Generic.AOF
Bkav FE	1.3.0.4613	W32.Cloddd7.Trojan.8c0b
Dr.Web		Adware.MyWebSearch.47
ESET-NOD32	9262	Win32/Toolbar.MyWebSearch.W
K7 AntiVirus	9.175.10766	Trojan ( 0047e1181 )
K7GW	9.175.10766	Trojan ( 0047e1181 )
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Undef.(kcloud)
NANO AntiVirus	0.28.0.57029	Trojan.Win32.MyWebSearch.crhhqy
nProtect	2014-01-08.01	Trojan/W32.Agent.44784.D
VIPRE Antivirus	25210	MyWebSearch.J (v) (not malicious)
Avira AntiVir	7.11.63.174	TR/Trash.Gen
Comodo Security	15462	UnclassifiedMalware
IKARUS anti.virus	T3.1.4.0.0	Trojan.Trash
McAfee-GW-Edition	2012.1	Heuristic.BehavesLike.Exploit.CodeExec.I
PC Tools	9.0.0.2	HeurEngine.MalPE
SUPERAntiSpyware	5.6.0.1008	Trojan.Agent/Gen-Nullo[Short]
Symantec	20121.3.0.76	Bloodhound.MalPE
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.RCBH1KE
AVware	1.5.0.21	MyWebSearch.J (v)
F-Prot	4.7.1.166	W32/Mywebsearch.H2.gen!Eldorado
G Data	24	Win32.Adware.Mindspark.C
Kaspersky	12.0.0.1225	not-a-virus:WebToolbar.Win32.MyWebSearch.sw
Zillya	2.0.0.1973	Adware.WebSearch.Win32.171

39SrcAs.dll (MD5: cb31249537d2758f73046888aa02ca7a) has been flagged by 5 scanners:

Scanner Software	Version	Result
avast!	8.0.1489.320	Win32:FunWeb-K [PUP]
AVG	13.0.0.3169	AdInstaller.FunWeb
Bkav FE	1.3.0.4261	W32.Clod028.Trojan.f1cd
nProtect	2013-10-29.04	Adware/W32.Agent.62864
VIPRE Antivirus	22822	MyWebSearch.J (v) (not malicious)

Startup Entries

Registry entries:

39brmon.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'ctfmon.exe' and executes as C:\Program Files3\rundll32.exe C:\Program Files3\lni28.dat,FG00.

Software Details

URL:

https://support.mindspark.com

Support:

–

Installation path:

C:\Program Files\MapsGalaxy_39\bar\1.bin

Uninstaller:

rundll32 "C:\Program Files\MapsGalaxy_39\bar\1.bin\39Bar.dll",O mindsparktoolbarkey="MapsGalaxy_39" uninstalltype="FF"

Size:

8.00 MB

Language:

English

MapsGalaxy Firefox Toolbar Executable Details

Primary executable:

39bar.dll

Name:

MapsGalaxy Firefox Toolbar

Path:

C:\Program Files\MapsGalaxy_39\bar\1.bin\39bar.dll

MD5:

f86336c978311761bc3e2a80b08d46bc

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

39sknlcr.dll

4d660347c844a8bf9ee0fbe4a086bd54