Home Malware Programs Potentially Unwanted Programs (PUPs) MapsGalaxy Toolbar

MapsGalaxy Toolbar

Posted: September 10, 2013

Threat Metric

Ranking: 196
Threat Level: 1/10
Infected PCs: 817,878
First Seen: September 10, 2013
Last Seen: October 17, 2023
OS(es) Affected: Windows

The Mapsgalaxy Toolbar is a Potentially Unwanted Program from Mindspark, which is responsible for releasing numerous similar toolbars that are promoted as adding useful functions to popular web browser applications. While the Mapsgalaxy Toolbar does provide weather forecasts, online map resources and similar features as its marketing claims, the Mapsgalaxy Toolbar also makes browser changes to promote its affiliate sites that enable the Mapsgalaxy Toolbar to track your Web-browsing behavior that some computer users may find to be unnecessary.

The Mapsgalaxy Toolbar is a toolbar oriented towards pointing users to popular map websites like Google Maps with the user's input. Although the Mapsgalaxy Toolbar does perform these functions as stated, the Mapsgalaxy Toolbar also is part of the MyWay family of toolbars – meaning that the Mapsgalaxy Toolbar also has some additional ‘features’ in store for anyone who installs the Mapsgalaxy Toolbar. A default Mapsgalaxy Toolbar installation always may change Chrome's new tab page to http://hp.myway.com/mapsgalaxy/ttab02 with the sole purpose is forcing you to visit this page whenever you open a new tab. Apart from modifying the browser's settings, the MapsGalaxy Toolbar may also gather information about search queries used in http://hp.myway.com/mapsgalaxy/ttab02 or the toolbar's search field.

The Mapsgalaxy Toolbar and similar toolbars from its family often (but not exclusively) use software bundlers and other installation methods that may not require your consent or make it obvious that a toolbar is installing itself. There are no recent cases in which the MapsGalaxy Toolbar was spotted in a bundle, so there's a significant chance that this product's distribution may rely mostly on online ads.

Aliases

Zango [AVG]Win32:Mindspark-A [PUP] [Avast]

Technical Details

Registry Modifications

The following newly produced Registry Values are:

CLSID{03480F0D-7897-4FC0-86D8-18B6FF450D2A}{0396D01A-1323-4A15-BD0C-1BC7510F46C6}{05F5414D-DCD6-4EE6-8C46-20A3F1209E0F}{09B8C335-1622-42C7-8650-A79D56551343}{0D8734DB-7110-4CDB-833F-52BC93865AB2}{1241cebd-9777-4bc6-aae5-2a77e25db246}{15106AE4-6BDF-443E-80B0-3E38B59D26EC}{16C7BB64-AC8D-4863-92ED-799D20F001DA}{173a5778-34bf-48a2-8a5e-6963ce922fed}{1796ec91-d094-4a5f-b681-e16015d1ceac}{1e91a655-bb4b-4693-a05e-2edebc4c9d89}{200F1306-1316-473B-90CE-A777144BBDF5}{26842a09-ffa8-4e2c-ae12-0c80f01c3295}{269D72FF-8629-4DB6-AB4F-86AA3A92F8A9}{3141FB47-2F0F-417D-A6FE-7047C5D2BBB4}{364ea597-e728-4ce4-bb4a-ed846ef47970}{37ed966d-4d0e-4d66-9633-bea542c92860}{3ED5E5EC-0965-4DD3-B7D8-DBC48A1172B9}{41AE59EF-88EE-450B-B60A-F153679E6EE8}{4369f96e-4071-43e7-8fd2-4d8f96918ef3}{4404078E-2745-4E25-B010-BBC026C0E9C2}{47A124BA-A6E2-4ED4-AA6F-84FF29E4D7DC}{4AEF0F25-D761-4EAA-AEB7-9E756C6BF11E}{4b7d0b0c-cff3-49c5-9bc3-ffabc031c822}{4E26AE37-A628-496E-B410-5D432F38BD1A}{4f28fa5f-7d15-4753-b4fc-d548a0f02bfb}{4F55EE37-30D9-45D6-870F-3EEA6CB9BE9F}{50ADA3A9-20B4-4EE0-8AFA-DE0BCAB94A25}{5e1bdcf6-dd5f-4dd3-8783-b1454aef1830}{64FBF8B6-C770-401A-8B84-F630EDAF4448}{6818868A-1B3D-4E35-A561-FA964A96CD3B}{69D0BAC4-A1B1-45CE-944F-9EEB1479F059}{71c1d63a-c944-428a-a5bd-ba513190e5d2}{797657A7-D3C7-4D7C-98E3-D0324DDFC4BA}{7A739956-FB82-4379-AF60-E38C48226AA7}{7d4dfaf7-f2ce-4c91-91a4-514c9612914d}{87792411-B73A-435E-86F3-AE633A690E84}{8FEEDA9E-8F71-45DF-A797-468226D1D35B}{902E7D34-D421-4766-8191-15A1B52D0BA2}{9193E23B-4182-493F-A38E-682307A7C463}{9b58a6ce-b337-43d5-9c2f-8c6d92fba094}{9D2A3081-70F2-4877-A06D-9BF697A35518}{9EF88362-131D-48B0-8969-CCC96F897AB8}{a083c35d-61a9-4625-bbb6-fb54e71b8527}{a35ff019-6dbe-4044-b080-6f3fa78a947f}{A549A4F7-FA70-421C-B0F2-8F6C0B4B85A8}{A8168AFE-9F36-49DE-A80A-00D19FB50207}{AE0F4663-EAE3-437F-BE60-9EC9B745DBFA}{B03CD630-51ED-4B15-974C-76472E4624C0}{b70e008c-967b-4104-bc7b-6f7c77dbc38d}{B82A91D3-2A13-4BF6-981B-7D9ED152CCED}{B9D4AA93-F4C6-480B-8C06-0811F2446943}{BAD750C1-F04B-42E6-847F-4F4BA8A7EDE1}{BF78452B-F168-4310-9EC0-4B9B66B845F0}{C285FFF4-DE32-402D-B8FD-6F34F1D5920C}{c4a25b73-8ef5-4282-9d21-c8920dd577a1}{cae88e60-cea5-4fcb-b611-54ea6305d8ab}{CDDB17CD-7A6B-4887-8EE6-68A43F532197}{D833690C-6E56-46C2-A19F-CF5FD81C9C9A}{db1384d8-1bda-4c8d-a743-e9ca671feb00}{DE4CC811-10B7-41F0-AB0E-EC2CFC91A8AD}{e045df14-bf1d-405c-a37b-a75c1551ad17}{E2DAE1A4-09EE-4209-AD3B-1C96330EDCEF}{E38FA7CB-C053-4B07-84AD-BCA6D2BE4FE7}{EF8C6146-8009-4A3F-8CA3-9E932B017099}{f3477e9d-d2f6-49f0-9b23-854d7958d07e}{F8B71C28-069E-406D-8D61-4461B464E37F}{F9B90065-CD7A-4439-B311-B292299182A9}File name without pathfree.mapsgalaxy[1].xmlhttp_free.mapsgalaxy.com_0.localstoragehttp_free.mapsgalaxy.com_0.localstorage-journalhttp_mapsgalaxy.dl.myway.com_0.localstoragehttp_mapsgalaxy.dl.myway.com_0.localstorage-journalhttp_mapsgalaxy.dl.tb.ask.com_0.localstoragehttp_mapsgalaxy.dl.tb.ask.com_0.localstorage-journalhttp_www.mapsgalaxy.com_0.localstoragehttp_www.mapsgalaxy.com_0.localstorage-journalmapsgalaxy.dl.myway[1].xmlmapsgalaxy.dl.tb.ask[1].xmlwww.mapsgalaxy[1].xmlRegexp file mask%PROGRAMFILES%\39Uninstall MapsGalaxy.dll%PROGRAMFILES(x86)%\39Uninstall MapsGalaxy.dllHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\MapsGalaxy_39Software\MapsGalaxySoftware\MapsGalaxy_39Software\Microsoft\Internet Explorer\Approved Extensions\{1E91A655-BB4B-4693-A05E-2EDEBC4C9D89}Software\Microsoft\Internet Explorer\Approved Extensions\{364EA597-E728-4CE4-BB4A-ED846EF47970}Software\Microsoft\Internet Explorer\Approved Extensions\{71C1D63A-C944-428A-A5BD-BA513190E5D2}Software\Microsoft\Internet Explorer\DOMStorage\free.mapsgalaxy.comSoftware\Microsoft\Internet Explorer\DOMStorage\mapsgalaxy.comSoftware\Microsoft\Internet Explorer\DOMStorage\mapsgalaxy.dl.myway.comSoftware\Microsoft\Internet Explorer\DOMStorage\mapsgalaxy.dl.tb.ask.comSoftware\Microsoft\Internet Explorer\DOMStorage\search.myway.comSoftware\Microsoft\Internet Explorer\DOMStorage\www.mapsgalaxy.comSOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1241cebd-9777-4bc6-aae5-2a77e25db246}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6818868a-1b3d-4e35-a561-fa964a96cd3b}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79e57afa-bc05-4636-9457-fbc0abb3576b}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9193e23b-4182-493f-a38e-682307a7c463}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ae0f4663-eae3-437f-be60-9ec9b745dbfa}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{bf75b5a2-8403-4f70-88a6-488e3bea0d7b}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e1f80eb5-8af4-410d-87c1-4f3e2776822a}SOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\mapsgalaxy.comSOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\mapsgalaxy.dl.myway.comSOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\mapsgalaxy.dl.tb.ask.comSOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\www.mapsgalaxy.comSoftware\Microsoft\Internet Explorer\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}SOFTWARE\Microsoft\Internet Explorer\Toolbar\{364ea597-e728-4ce4-bb4a-ed846ef47970}Software\Microsoft\Internet Explorer\URLSearchHooks\{26842a09-ffa8-4e2c-ae12-0c80f01c3295}SOFTWARE\Microsoft\Tracing\MapsGalaxy_RASAPI32SOFTWARE\Microsoft\Tracing\MapsGalaxy_RASMANCSSOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{1e91a655-bb4b-4693-a05e-2edebc4c9d89}SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{71c1d63a-c944-428a-a5bd-ba513190e5d2}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run32\MapsGalaxy EPM SupportSOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{173a5778-34bf-48a2-8a5e-6963ce922fed}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1796ec91-d094-4a5f-b681-e16015d1ceac}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3ED5E5EC-0965-4DD3-B7D8-DBC48A1172B9}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4b7d0b0c-cff3-49c5-9bc3-ffabc031c822}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8f0b76e1-4e46-427b-b55b-b90593468ac6}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{a35ff019-6dbe-4044-b080-6f3fa78a947f}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e045df14-bf1d-405c-a37b-a75c1551ad17}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{364EA597-E728-4CE4-BB4A-ED846EF47970}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1E91A655-BB4B-4693-A05E-2EDEBC4C9D89}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{364EA597-E728-4CE4-BB4A-ED846EF47970}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{71C1D63A-C944-428A-A5BD-BA513190E5D2}SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MapsGalaxy EPM SupportSOFTWARE\Microsoft\Windows\CurrentVersion\Run\MapsGalaxy Search Scope MonitorSOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce\MapsGalaxy_39bar UninstallSOFTWARE\Mozilla\Firefox\Extensions\39ffxtbr@MapsGalaxy_39.comSOFTWARE\MozillaPlugins\@MapsGalaxy_39.com/PluginSOFTWARE\Wow6432Node\MapsGalaxy_39SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{1241cebd-9777-4bc6-aae5-2a77e25db246}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6818868a-1b3d-4e35-a561-fa964a96cd3b}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{79e57afa-bc05-4636-9457-fbc0abb3576b}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9193e23b-4182-493f-a38e-682307a7c463}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ae0f4663-eae3-437f-be60-9ec9b745dbfa}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{bf75b5a2-8403-4f70-88a6-488e3bea0d7b}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{e1f80eb5-8af4-410d-87c1-4f3e2776822a}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{b0441a0e-a49a-4e16-afc1-74ecced1921f}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{364ea597-e728-4ce4-bb4a-ed846ef47970}SOFTWARE\Wow6432Node\Microsoft\Tracing\MapsGalaxy_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\MapsGalaxy_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{1e91a655-bb4b-4693-a05e-2edebc4c9d89}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{71c1d63a-c944-428a-a5bd-ba513190e5d2}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{173a5778-34bf-48a2-8a5e-6963ce922fed}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1796ec91-d094-4a5f-b681-e16015d1ceac}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3ED5E5EC-0965-4DD3-B7D8-DBC48A1172B9}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{4b7d0b0c-cff3-49c5-9bc3-ffabc031c822}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8f0b76e1-4e46-427b-b55b-b90593468ac6}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{a35ff019-6dbe-4044-b080-6f3fa78a947f}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{e045df14-bf1d-405c-a37b-a75c1551ad17}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\MapsGalaxy EPM SupportSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\MapsGalaxy Search Scope MonitorSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\MapsGalaxy_39bar UninstallSOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\39ffxtbr@MapsGalaxy_39.comSOFTWARE\Wow6432Node\MozillaPlugins\@MapsGalaxy_39.com/PluginSYSTEM\ControlSet001\services\MapsGalaxy_39ServiceSYSTEM\ControlSet002\services\MapsGalaxy_39ServiceHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}MapsGalaxy_39bar Uninstall FirefoxMapsGalaxy_39bar Uninstall Internet ExplorerMapsGalaxyTooltab Uninstall Internet Explorer

Additional Information

The following directories were created:
%LOCALAPPDATA%\MapsGalaxyTooltab%LOCALAPPDATA%\MapsGalaxy_39%PROGRAMFILES%\MapsGalaxy_39%PROGRAMFILES%\MapsGalaxy_39EI%PROGRAMFILES(x86)%\MapsGalaxy_39%PROGRAMFILES(x86)%\MapsGalaxy_39EI%USERPROFILE%\AppData\LocalLow\MapsGalaxy_39%USERPROFILE%\AppData\LocalLow\MapsGalaxy_39EI%USERPROFILE%\Application Data\MapsGalaxy_39%UserProfile%\Local Settings\Application Data\MapsGalaxyTooltab
The following cookies were detected:
mapsgalaxy.com
The following URL's were detected:
search.searchgdd.comsearch.searchgdd2.com

36 Comments

  • Joann Harris says:

    accding to my records I have mapsgalaxy....
    I just don't know how to go to that and get a simple direction of an address. PLEASE help!!

  • jenifer says:

    been trying for hrs to use maps galexy which i have installed. but not now

  • DONNA Max says:

    How do I remove the "Mapsgalaxy" and "0nlineMapFinder" tool bars??? Help!

  • Gurdev saund says:

    please unstall mapsgalaxy

  • nancy bates says:

    do not need have not used

  • Carylon Boen says:

    I want to delete mapsgalaxy how do I do this?

  • Leif Landquist says:

    do not need! storno

  • Larry D Smith Sr says:

    Do not need and not using

  • Larry D Smith says:

    Installed but unable to get to come up so I can get it for directions so please remove thank you

  • roger severson says:

    17 please remove this from my computer

  • JALEESA says:

    This is not my computer and it said i have mapgalaxy but it would pull up maps. It is not my duplicate comment. Could it be that everyone is having the same problem?

  • Loretta says says:

    I want Galaxy maps removed from my computer. Thank you

  • Arthur Fischer says:

    All I did was go to mapquest and I got this mapsGalaxy. It changed my tool bar! How do get rid of this mapsGalaxy
    and go back to what I had before without paying for it?

  • Lillie Dunn says:

    Please remove the map galaxy from my tool bar, etc. I do not need this and don't desire to have it. It has caused a lot of problems with my computer.

  • Susan Kiger says:

    please remove this from my computer....not downloaded by me.

  • Karen Bridewell says:

    please uninstall mapsgalaxy and toolbar and any thing else to do with it from my compiter as I think it is causing problems with my computer and I don't want it. Thank you. I can not find it anywhere to uninstall it or even in my programs.

  • Kimberly Mullins says:

    Dear god pleae help me uninstall these mapgalaxy downloads

  • Beverly Driver says:

    I want to get this uninstalled. Right now please.

  • Barb albrecht says:

    remove mapsgalaxy from my computer

  • Joseph Scrivo says:

    I just want to get maps without the max galaxy tool bar jamming up my web browser. Show me how.

  • Debe says:

    Thia mapsgalaxy is sooooooooooo bad! Cannot get a map for directions, it gave me a virus. I uninstalled it and all it did was uninstall the toolbar! I cannot get a freaking map on my computer because it tells me I have already installed the mapsgalaxy..which I uninstalled! I wish I could press charges against this company or something! Even if you go to Yahoomaps.com......MAPSGALAXY wants you to install their toolbar! So now, I cannot find a map for directions! And everyone wants money to fix the problem! They installed it! They should remove it! Besides all that, every website for maps wants you to download mapsgalaxy toolbar! We all are now screwed over this mapsgalaxy and I wish I could contact the company and let them know how I feel about it and make them remove it permanently from my computer. Thanks for reading my rants! I hope everyone else has better luck than I did! Have a nice day!

  • D0ug says:

    Please remove everything associated with Galaxy maps from my computer immediately!!!!!!!!!!!!!!!!!

  • mac says:

    take this off i do not need maps galaxy

  • remove mapsgalaxy says:

    need help to remove tool bar mapsgalaxy

  • Prof. Dr. Eng./ Gamal Elmarsafi says:

    Just remove. It is a bad, bad and wast of time

  • VERONICA JACKSON says:

    PLEASE REMOVE MAPSGALAXY FROM MY COMPUTER,THANKYOU.

  • brenda says:

    remove max galaxy. return to google chrome

  • melvena Francise says:

    unable to connect. Do not need

  • Michael Lewis says:

    Iwant maps galaxy removed. I was only asking for directions on Google Maps and do not want this program on my computer

  • C A Dennis says:

    Need to remove this from my computer. did not request it and don't want it.

  • Teresa Jones says:

    Please remove this. It won't allow me to do my programs easily.

  • Teresa Jones says:

    Please remove as I do not need this.

  • Connie Kohler says:

    do not want this, please delete

  • Aileen Williams says:

    remove mapsgalaxy toolbar, program and anything to do with this site

  • nicola says:

    Please remove this galaxy maps and anything to do with this from my browser thanks! I can't access my email links, it goes straight to this page every single time. SO FRUSTRATING

  • Carrie says:

    I want maps galaxy and toolbar uninstalled off my computer NOW. Please help.

Loading...