Home Malware Programs Potentially Unwanted Programs (PUPs) FlightSearch Toolbar

FlightSearch Toolbar

Posted: October 13, 2015

Threat Metric

Ranking: 1,492
Threat Level: 1/10
Infected PCs: 90,850
First Seen: October 13, 2015
Last Seen: October 16, 2023
OS(es) Affected: Windows

FlightSearch Toolbar is a potentially unwanted program (PUP) created and marketed by Mindspark Interactive Network that is known to offer quick search methods for finding flights through the Internet. Use of the FlightSearch Toolbar and its search feature may load other sites that offer services for finding flights. Even though FlightSearch Toolbar does not modify internet settings or install without your knowledge, it is prone to being present on the toolbar area of popular web browsers, such as Internet Explorer, Google Chrome, and Firefox. FlightSearch Toolbar isn’t found on many sources on the internet as it primarily comes from a site that markets and promotes FlightSearch Toolbar. Some users may not wish to continue using FlightSearch Toolbars any longer, and they can do that by uninstalling the 'FlightSearch Toolbar' from their list of active browser extensions.

Aliases

Riskware/MyWebSearch [Fortinet]Win32.Application.Agent.JRLRMB [GData]Adware.MyWebSearch.103 [DrWeb]Application.Win32.MyWebSearch.R [Comodo]not-a-virus:AdWare.Win32.MySearch.ac [Kaspersky]Win32:Mindspark-A [PUP] [Avast]W32/Mywebsearch.K.gen!Eldorado [F-Prot]

Technical Details

Registry Modifications

The following newly produced Registry Values are:

CLSID{04440ab6-575c-48ca-ac19-49e71651cbf1}{064A2B1F-8984-40A3-AB9B-23F7EA3C3BE5}{0B7CB0F5-778B-4C52-82A9-4C6A8CB2387F}{0e4cc294-a52e-41fc-898a-29154ecd167f}{105430EA-3177-4BF7-A724-6B3EFC0D7686}{17759da4-b18e-4200-8730-48e6528bd935}{19960255-eade-43ba-aae9-e120a56d529f}{21526B23-D72D-4707-B6FB-DF40A5381D6E}{23BD4789-A625-4189-8079-BE4B31B32006}{266BBC8D-13F5-423B-985E-CEEDABF03ECB}{2693DA0C-24B1-42A1-AF59-217407AFEEC6}{26CFA1D5-C951-471F-AAA7-6FC4A54838E7}{2731B405-7C64-4AE5-8343-8A9474C9DBBC}{2A639D59-2C39-497B-9067-F8BDDCD40E0A}{2ad69829-ae00-43bd-b8fe-823c4f469c4f}{348B6FCC-21B7-4617-9D6E-B711273391DB}{396E2002-5A2A-4356-A52C-0652358E88BA}{451783fe-643e-4af7-a68a-cfe518c386f7}{45FF96EF-061E-4F53-8D0B-F80A44B62E40}{476D56AA-8FDB-4EC7-AB79-E9F0F000EA03}{5db72d44-a4e1-430d-9d68-73c34c2b3620}{6414ED83-2D32-4417-9A3A-37A8D9E853B1}{6A27B9BC-77B0-4D6F-B2E7-1DCE582BE39E}{6FF13B62-FD06-45A0-A4DD-602BF26F6383}{7D41FE08-AD59-45D5-9C1C-554367F53F97}{7D98BF90-08D0-4B6E-B294-98715DDBD397}{96EBE4E6-4CD1-4CC2-A01A-D2772180CE2C}{9F0DA50C-59F8-416D-A77C-76974B3DED27}{A1449372-2FD9-48FC-BD1F-45DB09AABE96}{A82A6A51-9D0D-4BB2-A28A-6A6ED46A3845}{AB0F2641-E956-42DD-BE26-A50BA1FF8207}{D20A4005-E88A-4A00-9945-8E01DF91B782}{dbc08b33-69ed-4e59-b3e6-d456aa8b56b9}{E250B4F3-B546-42BA-ACF4-3E856CE6017B}{EA8D2AF6-76B1-4E94-B6EF-CDE59C041257}{EB1D8FB4-10B2-40E1-878E-401B380D9E56}{ED442B84-64CD-4185-9448-D6924CBF319E}{F48C3D5C-9FC5-43C1-B405-969B3F361AD6}{F93ED997-AD88-4F25-B2FA-8BDB09EC490D}{FC5A1B62-3251-4B7E-9FFC-4ACB69322D36}File name without pathflightsearchapp.dl.myway[1].xmlhttp_flightsearchapp.dl.myway.com_0.localstoragehttp_flightsearchapp.dl.myway.com_0.localstorage-journalhttp_flightsearchapp.dl.tb.ask.com_0.localstoragehttp_flightsearchapp.dl.tb.ask.com_0.localstorage-journalHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\FlightSearch_foSoftware\FlightSearchSOFTWARE\FlightSearch_foSoftware\Microsoft\Internet Explorer\DOMStorage\flightsearchapp.dl.myway.comSoftware\Microsoft\Internet Explorer\DOMStorage\flightsearchapp.dl.tb.ask.comSOFTWARE\Wow6432Node\FlightSearch_foHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}FlightSearch_fobar Uninstall Internet ExplorerFlightSearchTooltab Uninstall Internet Explorer

Additional Information

The following directories were created:
%LOCALAPPDATA%\FlightSearchTooltab%PROGRAMFILES%\FlightSearch_fo%PROGRAMFILES(x86)%\FlightSearch_fo
Loading...