Home Malware Programs Potentially Unwanted Programs (PUPs) MyFunCards Toolbar

MyFunCards Toolbar

Posted: March 18, 2011

Threat Metric

Ranking: 2,731
Threat Level: 1/10
Infected PCs: 80,575
First Seen: March 18, 2011
Last Seen: October 17, 2023
OS(es) Affected: Windows

The MyFunCards Toolbar is a potentially unwanted program that may have misleading techniques to encourage people to install the MyFunCards Toolbar so that it can offer several useful functions for making their web browsing experience better. MyFunCards Toolbar is not dangerous to your PC. However, the application could have several features that are considered by some computer users to be unwanted. Computer users not wanting the services provided by MyFunCards may remove it through the use of an antimalware tool. Additionally, manually removing MyFunCards can be done by finding your web browser's extensions and add-on components and then eliminating any that are associated with MyFunCards.

Aliases

not-a-virus:WebToolbar.Win32.MyWebSearch.gen [Kaspersky]Win32:FunWeb-K [PUP] [Avast]Tool.InstallToolbar.5 [DrWeb]Adware.Funweb-12 [ClamAV]Win32.Artemis [eSafe]Win32:PUP-gen [PUP] [Avast]Adware/FunWeb [Fortinet]not-a-virus:WebToolbar.Win32.MyWebSearch.gi [Kaspersky]AdWare/Win32.FunWeb.gen [Antiy-AVL]DLOADER.Trojan [DrWeb]AdInstaller.FunWeb [AVG]Artemis!E252140EC2F9 [McAfee]Trojan-Dropper [Ikarus]

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\PROGRA~1\MYFUNC~2\bar\1.bin\c8barsvc.exe File name: c8barsvc.exe
Size: 28.76 KB (28766 bytes)
MD5: e5886c8a1d319dfca76dae1dabc41a25
Detection count: 7,919
File type: Executable File
Mime Type: unknown/exe
Path: C:\PROGRA~1\MYFUNC~2\bar\1.bin\c8barsvc.exe
Group: Malware file
Last Updated: February 6, 2023
C:\Program Files\MyFunCardsbarIE\bar\1.bin\c8brmon.exe File name: c8brmon.exe
Size: 20.48 KB (20480 bytes)
MD5: 1e4f1423e046e9eb395e02b9a87034bd
Detection count: 7,176
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files\MyFunCardsbarIE\bar\1.bin\c8brmon.exe
Group: Malware file
Last Updated: February 6, 2023
C:\Program Files (x86)\Trend Micro\HiJackThis\backups\backup-20110711-200750-310.dll File name: backup-20110711-200750-310.dll
Size: 675.84 KB (675840 bytes)
MD5: 8cb8dff62f05687274831fbbdcb81b91
Detection count: 5,197
File type: Dynamic link library
Mime Type: unknown/dll
Path: C:\Program Files (x86)\Trend Micro\HiJackThis\backups\backup-20110711-200750-310.dll
Group: Malware file
Last Updated: February 6, 2023
%PROGRAMFILES%\Uninstall MyFunCards.dll File name: Uninstall MyFunCards.dll
Size: 675.84 KB (675840 bytes)
MD5: 329004a26040738fc61985efb0d2df26
Detection count: 1,529
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%
Group: Malware file
Last Updated: January 17, 2014
C:\Program Files\MyFunCardsbarIE\bar\1.bin\c8medint.exe File name: c8medint.exe
Size: 20.59 KB (20598 bytes)
MD5: e6b48bb12943626a2e00c5edeb9b2314
Detection count: 61
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files\MyFunCardsbarIE\bar\1.bin\c8medint.exe
Group: Malware file
Last Updated: February 6, 2023
%PROGRAMFILES%\MyFunCards_5m\bar\1.bin\5mSrcAs.dll File name: 5mSrcAs.dll
Size: 66.96 KB (66960 bytes)
MD5: 928f1a853bd8308a8eff825fc395be2c
Detection count: 49
File type: Dynamic link library
Mime Type: unknown/dll
Path: %PROGRAMFILES%\MyFunCards_5m\bar\1.bin
Group: Malware file
Last Updated: January 17, 2014

Registry Modifications

The following newly produced Registry Values are:

CLSID{04bdd2be-51e9-4031-a7a7-b882b3abea12}{0d5ce42b-8679-426d-b994-be1c7065b2a1}{20f5e3ba-82e9-42b9-9a2b-2a38270d3498}{210f1b36-3b7f-41a4-b5da-3eb87f5a56c2}{22FBBE27-EA78-47C0-911B-805642CC311F}{257bedb2-8226-42f8-b755-c66e2c32972c}{2A8806D0-370A-452F-82C4-7B4CB0BBF176}{30E09818-3A30-47BF-8AC4-656D59C6772F}{35FB662A-B7FE-4040-8EA9-807A664415F7}{402BD884-83EA-4266-9629-B27893A0EF35}{40391699-5229-49fc-b7d3-922717c71827}{432732f2-4ca1-4d00-be71-699550667c05}{43E32FB4-D5E9-41A2-9DED-F0894FB21AD2}{476d2996-ce78-4a30-95f7-80dbb4c9d623}{4A7417BD-15A2-413F-84A8-69CAD55DE283}{4DA251C3-4F2C-4C69-9E3B-966BBFEED8C2}{4E6538AC-A062-484E-9421-95B24C81126C}{563028CC-55F3-4678-A37A-D9B10CFB2B19}{57CFF878-D0A4-40F9-BB2C-4CDC7FF01194}{585A666A-99B8-4F81-8F11-9A9B7EDDC894}{5C88B59B-FEDA-45CB-BE33-0D8209C825BD}{5FEB1D60-0B28-4445-A911-776D5DD5DA20}{614ba139-bd8d-4789-8a78-8f836622ec82}{625BA528-A523-4978-9A9D-63424F6352EE}{62DF2B34-2B58-42F2-985C-013250AD6F11}{63BA5725-11DF-4DC5-B846-D7F858B0652E}{63c79023-1301-4973-b78e-0727454c6a70}{659B31CC-E53F-4B04-A920-8F352E76D1D6}{67E9702B-2041-4BC5-BF82-0BC13E158C32}{683C3964-BB3D-439C-916F-1B7ED01E797C}{6C1E4E02-8456-4F9B-AA3A-BFD24BBB61FC}{6c7e7816-51aa-4e5c-b5a0-660ceaea08b1}{6E444154-EF7C-46E9-BD43-F0F5C2B2518C}{75362E17-8E61-4A05-A8A2-04F585CABD79}{762C8E84-0015-4667-BD61-2D61B69FC59C}{78E0B4F6-1636-4008-9443-B00356D1B364}{811D33FD-97D1-4DFC-BA40-33D7A845BAD2}{86FEEFC4-D55F-493B-A117-B389891B814C}{882D51EE-841A-4829-884A-E85844CDCEDA}{89f650c9-517c-490f-a99c-b835680836e4}{8a5d512d-5ac0-44b1-9882-6252077bc607}{8D429109-8737-4A33-A22B-19219B68FBC7}{9298FA8C-796B-4D80-B25B-E0A53E171248}{9669121C-D085-4E10-AD79-47DB0CC35122}{9b709b9f-98aa-4d90-9c86-19c1d774e5b4}{A36CB996-30A2-4FA7-AD3C-DDD003A80935}{ACA1E7C1-19EB-4C3C-9D2C-372E69C68975}{aef4838b-193b-4392-a6b9-cd6d0b1e57b8}{BC6E741E-667F-48D1-9AA9-D769E3C344EF}{BE206AAC-8D83-4478-AAF6-BD3F045E79D8}{c4b22c87-45ef-4f43-89f2-40db2078864e}{C72DBC94-5EAC-4749-8B52-E19C46884749}{C9983432-AF43-449E-A0A1-EF574A26FD5E}{CE5E4F93-C745-46F6-A04D-493021064EEA}{d2813aa5-0a3b-410d-af7a-d2ac6420d707}{d94ab7b8-12ec-4f92-a0e4-cfa52bfc5271}{da71fd14-5f7b-46ae-b8b1-44074a38f331}{DED6233B-191B-4A35-82F9-6F31D24DA871}{E1CB369C-4F24-4907-84E5-44F13A41354E}{E32C0B37-8074-4B1E-893D-E01E149E495C}{E63CC297-9FD8-4682-B0D3-280DF3A804A7}{F16213F8-7E9B-41BE-AD99-C293B60FFCF8}{f382a6a0-351f-4041-a7c2-ea76e85f5211}{f4c28532-b9d0-4950-a2df-e83f9929242b}{F5C77008-03F5-459E-82DB-8C2D923B3CB2}{fa385ed2-3b5e-463a-bfd7-8f3e87dfe481}{FAB9093C-D694-4F3B-8053-809D28D00E43}{FF9C7239-F008-401A-BE21-B2DE69B37E78}File name without pathhttp_myfuncards.dl.tb.ask.com_0.localstoragehttp_myfuncards.dl.tb.ask.com_0.localstorage-journalHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\MyFunCards_5mSOFTWARE\Classes\MyFunCards_5m.DynamicBarButtonSOFTWARE\Classes\MyFunCards_5m.DynamicBarButton.1SOFTWARE\Classes\MyFunCards_5m.FeedManagerSOFTWARE\Classes\MyFunCards_5m.FeedManager.1SOFTWARE\Classes\MyFunCards_5m.HTMLMenuSOFTWARE\Classes\MyFunCards_5m.HTMLMenu.1SOFTWARE\Classes\MyFunCards_5m.HTMLPanelSOFTWARE\Classes\MyFunCards_5m.HTMLPanel.1SOFTWARE\Classes\MyFunCards_5m.MultipleButtonSOFTWARE\Classes\MyFunCards_5m.MultipleButton.1SOFTWARE\Classes\MyFunCards_5m.PseudoTransparentPluginSOFTWARE\Classes\MyFunCards_5m.PseudoTransparentPlugin.1SOFTWARE\Classes\MyFunCards_5m.RadioSOFTWARE\Classes\MyFunCards_5m.Radio.1SOFTWARE\Classes\MyFunCards_5m.RadioSettingsSOFTWARE\Classes\MyFunCards_5m.RadioSettings.1SOFTWARE\Classes\MyFunCards_5m.ScriptButtonSOFTWARE\Classes\MyFunCards_5m.ScriptButton.1SOFTWARE\Classes\MyFunCards_5m.SettingsPluginSOFTWARE\Classes\MyFunCards_5m.SettingsPlugin.1SOFTWARE\Classes\MyFunCards_5m.SkinLauncherSOFTWARE\Classes\MyFunCards_5m.SkinLauncherSettingsSOFTWARE\Classes\MyFunCards_5m.SkinLauncherSettings.1SOFTWARE\Classes\MyFunCards_5m.ThirdPartyInstallerSOFTWARE\Classes\MyFunCards_5m.ThirdPartyInstaller.1SOFTWARE\Classes\MyFunCards_5m.ToolbarProtectorSOFTWARE\Classes\MyFunCards_5m.ToolbarProtector.1SOFTWARE\Classes\MyFunCards_5m.UrlAlertButtonSOFTWARE\Classes\MyFunCards_5m.UrlAlertButton.1SOFTWARE\Classes\MyFunCards_5m.XMLSessionPluginSOFTWARE\Classes\MyFunCards_5m.XMLSessionPlugin.1SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{210F1B36-3B7F-41A4-B5DA-3EB87F5A56C2}SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{C4B22C87-45EF-4F43-89F2-40DB2078864E}SOFTWARE\Microsoft\Internet Explorer\Approved Extensions\{DA71FD14-5F7B-46AE-B8B1-44074A38F331}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0d5ce42b-8679-426d-b994-be1c7065b2a1}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{43e32fb4-d5e9-41a2-9ded-f0894fb21ad2}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{563028cc-55f3-4678-a37a-d9b10cfb2b19}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5feb1d60-0b28-4445-a911-776d5dd5da20}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a909fe04-f6a4-41c0-b6a1-4f0058257643}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b03ecee6-cb2f-4338-84a7-1358ac61a918}SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c855d636-07b5-4dc3-82c7-a35242ea1d05}SOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\myfuncards.comSOFTWARE\Microsoft\Internet Explorer\LowRegistry\DOMStorage\myfuncards.dl.myway.comSOFTWARE\Microsoft\Internet Explorer\SearchScopes\{acbd5593-e5ee-4c15-b48f-1823ce819dec}SOFTWARE\Microsoft\Internet Explorer\Toolbar\{210f1b36-3b7f-41a4-b5da-3eb87f5a56c2}SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{c4b22c87-45ef-4f43-89f2-40db2078864e}SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{da71fd14-5f7b-46ae-b8b1-44074a38f331}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{20f5e3ba-82e9-42b9-9a2b-2a38270d3498}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{257bedb2-8226-42f8-b755-c66e2c32972c}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{614ba139-bd8d-4789-8a78-8f836622ec82}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{811D33FD-97D1-4DFC-BA40-33D7A845BAD2}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{b88fdfa6-b3df-4a5f-acba-3d5d97930eee}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{d94ab7b8-12ec-4f92-a0e4-cfa52bfc5271}SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{fa385ed2-3b5e-463a-bfd7-8f3e87dfe481}SOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyFunCards Search Scope MonitorSOFTWARE\Microsoft\Windows\CurrentVersion\Run\MyFunCards_5m Browser Plugin LoaderSOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyFunCards_5mbar Uninstall FirefoxSOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyFunCards_5mbar Uninstall Internet ExplorerSOFTWARE\Mozilla\Firefox\Extensions\5mffxtbr@MyFunCards_5m.comSOFTWARE\MozillaPlugins\@MyFunCards_5m.com/Plugin\MimeTypes\application/x-myfuncards_5mpluginSOFTWARE\MyFunCardsSOFTWARE\MyFunCards_5mSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{0d5ce42b-8679-426d-b994-be1c7065b2a1}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{43e32fb4-d5e9-41a2-9ded-f0894fb21ad2}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{563028cc-55f3-4678-a37a-d9b10cfb2b19}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5feb1d60-0b28-4445-a911-776d5dd5da20}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{a909fe04-f6a4-41c0-b6a1-4f0058257643}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b03ecee6-cb2f-4338-84a7-1358ac61a918}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{c855d636-07b5-4dc3-82c7-a35242ea1d05}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{acbd5593-e5ee-4c15-b48f-1823ce819dec}SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{210f1b36-3b7f-41a4-b5da-3eb87f5a56c2}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{c4b22c87-45ef-4f43-89f2-40db2078864e}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{da71fd14-5f7b-46ae-b8b1-44074a38f331}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{20f5e3ba-82e9-42b9-9a2b-2a38270d3498}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{257bedb2-8226-42f8-b755-c66e2c32972c}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{614ba139-bd8d-4789-8a78-8f836622ec82}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{811D33FD-97D1-4DFC-BA40-33D7A845BAD2}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{b88fdfa6-b3df-4a5f-acba-3d5d97930eee}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{d94ab7b8-12ec-4f92-a0e4-cfa52bfc5271}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{fa385ed2-3b5e-463a-bfd7-8f3e87dfe481}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\MyFunCards Search Scope MonitorSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\MyFunCards_5m Browser Plugin LoaderSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MyFunCards_5mbar Uninstall FirefoxSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\MyFunCards_5mbar Uninstall Internet ExplorerSOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\5mffxtbr@MyFunCards_5m.comSOFTWARE\Wow6432Node\MozillaPlugins\@MyFunCards_5m.com/Plugin\MimeTypes\application/x-myfuncards_5mpluginSOFTWARE\Wow6432Node\MyFunCards_5mSYSTEM\ControlSet001\services\MyFunCards_5mServiceSYSTEM\ControlSet002\services\MyFunCards_5mServiceSYSTEM\CurrentControlSet\services\MyFunCards_5mServiceHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}MyFunCards_5mbar UninstallMyFunCardsTooltab Uninstall Internet Explorer

Additional Information

The following directories were created:
%LOCALAPPDATA%\MyFunCardsTooltab%LOCALAPPDATA%\MyFunCards_5m%PROGRAMFILES%\MyFunCards_5m%PROGRAMFILES(x86)%\MyFunCards_5m%USERPROFILE%\AppData\LocalLow\MyFunCards_5m%USERPROFILE%\Application Data\MyFunCards_5m
The following URL's were detected:
https://ecards.myfuncards.com/
Loading...