Home Malware Programs Adware Action Classic Games Toolbar

Action Classic Games Toolbar

Posted: June 23, 2015

Threat Metric

Ranking: 1,212
Threat Level: 2/10
Infected PCs: 75,299
First Seen: May 26, 2015
Last Seen: October 17, 2023
OS(es) Affected: Windows

Action Classic Games Toolbar is an unreliable browser toolbar, associated with actionclassicgames.com. The browser extension, as well as the webpage, are created by Mindspark. This company is famous for its highly suspicious products, which cause a series of annoying modifications to the Internet clients. The browser toolbar contains links to some games, which may not be of any interest to the user. However, at the same time the questionable tool changes the default homepage and inserts various ads. As a result, whenever the user launches Google Chrome, Mozilla Firefox or Internet Explorer, he will inevitably face many pop-ups, banners and targeted videos. Clicking on these ads isn't encouraged as they may redirect you to sites with questionable legitimacy. Also, you should abstain from downloading any games, hosted on actionclassicgames.com because they may also cause some issues. Mindspark relies on different methods to spread Action Classic Games Toolbar – you may find it in the Google Web Store, or it may enter silently as a bundle towards freeware. In any case, the extension offers very limited utility and it is better to delete it.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

CLSID{16108727-3F10-4192-BB21-9314B39CA6B8}{184FEE57-6667-490F-9D21-63BF97D61180}{25C958B3-4B39-4BDB-AAC0-B941968D6139}{2A75062E-1247-41EC-8417-0A82642CB0E2}{4F521F8C-B472-4FAD-BE00-340C2803ED56}{5503B3E9-1C12-4B2F-9293-0DE8F2DA2AE6}{5f96b2e7-ab9f-4ce0-b4c9-e3ec8c32acd9}{604DEEDC-F263-450B-A4CC-7DF7B2C13905}{78faa4c8-3a0b-42e1-9e63-62e57e899eaa}{9D643B33-7D75-403A-85A7-DF329E4B228B}{EB013759-87EA-470D-9A9E-66A5146AAAC7}HKEY..\..\..\..{RegistryKeys}Software\Action Classic GamesSoftware\ActionClassicGames_e1Software\AppDataLow\Software\ActionClassicGames_e1Software\Microsoft\Internet Explorer\DOMStorage\actionclassicgames.dl.myway.comSOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{3e8810b8-21bc-4567-9d53-21a575f0aa4e}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4f521f8c-b472-4fad-be00-340c2803ed56}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6ff6226a-4c91-44e5-b2cb-93c96033f842}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{8fed6e71-aaf0-4fd9-a25d-ccd01216caef}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{f134110e-125c-4df0-a36f-e29d6dc48bf8}SOFTWARE\Wow6432Node\ActionClassicGames_e1SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4f521f8c-b472-4fad-be00-340c2803ed56}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{6ff6226a-4c91-44e5-b2cb-93c96033f842}HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Action Classic GamesTooltab Uninstall Internet Explorer

Additional Information

The following directories were created:
%LOCALAPPDATA%\Action Classic GamesTooltab%LOCALAPPDATA%\ActionClassicGames_e1%PROGRAMFILES%\ActionClassicGames_e1%PROGRAMFILES(x86)%\ActionClassicGames_e1%USERPROFILE%\AppData\LocalLow\ActionClassicGames_e1
The following URL's were detected:
actionclassicgames.dl.tb.
Loading...