Home Malware Programs Potentially Unwanted Programs (PUPs) TypingFanatic Toolbar

TypingFanatic Toolbar

Posted: August 18, 2015

Threat Metric

Ranking: 10,474
Threat Level: 1/10
Infected PCs: 2,492
First Seen: August 5, 2015
Last Seen: September 25, 2023
OS(es) Affected: Windows

Nowadays, almost every person uses a PC when he needs to write documents. For some users the process of typing may be an unpleasant event because they are not accustomed – they may make too many typing errors, or simply their speed may be slow. These people may be tempted to install TypingFanatic Toolbar because it promises to improve their writing speed. Allegedly, TypingFanatic Toolbar can calculate the words per minute (WPM) of the user and can offer various lessons. However, TypingFanatic Toolbar because it is deemed a Potentially Unwanted Program (PUP). As soon as it finds a way into your system, this software made by Mindspark will interfere with the functionality of Google Chrome, Internet Explorer, and Mozilla Firefox by suggesting a change to the default homepage and new tab page to hxxp://myway.com.

Offers to install the TypingFanatic Toolbar may be seen in online advertisements which claim that this is a great utility to improve your typing speed while using a computer keyboard. The TypingFanatic Toolbar is downloaded through the extension's official website, and upon installation, it may ask for permission to enhance the user's browsing experience by changing their homepage and new tab page to hxxp://myway.com.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

CLSID{006AE248-82BE-4A48-A301-BB2328825B18}{061A5FA5-7CFA-4903-BB46-BC1794E4D257}{32129A72-5700-4AA8-A610-C069BE5F0A6E}{3FED66D8-85C8-491F-B130-7575E876CF85}{51518165-4261-4988-8d29-95b57e6851d7}{5E74DFD8-4A66-4ABE-97FA-CA935C7A64A3}{6A997425-1EA2-49F6-84B4-57CF3B83B36E}{7513939B-DAD3-4CA7-B60E-53E160A8DB78}{8C154033-3CFE-4936-A738-787051DFA480}{9351E0FE-9A05-427E-9BB8-E9EC7A51D9C2}{B129BC44-7EE3-46E4-9595-5457491CA248}{BF3C7F8E-2891-4FC8-8C0A-CB23D88A53EF}{CAC3B65C-41F0-4434-9A3B-D75F39F4C581}{D0B5E511-AE51-49C5-8616-EACCDB467FCB}{DF43A2D9-050F-45D4-A3B3-D7209DC2C1C6}{ED0BB4F5-D931-4F7E-A2D0-D15DC8CEFCF2}{EF4FA4F7-57C4-401F-8AE8-FD574317896D}{F36D6C49-0872-4DF9-864E-F1386B49F16A}{F64EAE0B-4279-4197-8D4B-5FD28C573A1C}{F7D3EBB6-1A90-411F-8E1E-A4257444EC3B}{FE0EFCBE-B09F-4C89-9097-3E27CAC71A00}File name without pathhttp_TypingFanatic.dl.tb.ask.com_0.localstoragehttp_TypingFanatic.dl.tb.ask.com_0.localstorage-journalHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\TypingFanatic_f5Software\Microsoft\Internet Explorer\Approved Extensions\{3C2D2F8F-080E-4B03-9112-72BC0483DAB4}Software\Microsoft\Internet Explorer\Approved Extensions\{43B52292-53CE-4CF0-A8E5-10AB8B9641FA}Software\Microsoft\Internet Explorer\Approved Extensions\{55E5081A-BF13-4579-899F-DCF7FD253772}SOFTWARE\Microsoft\Tracing\TypingFanatic_RASAPI32SOFTWARE\Microsoft\Tracing\TypingFanatic_RASMANCSSOFTWARE\Microsoft\Windows\CurrentVersion\Run\TypingFanaticSOFTWARE\Microsoft\Windows\CurrentVersion\Run\TypingFanatic AppIntegrator 32-bitSOFTWARE\Microsoft\Windows\CurrentVersion\Run\TypingFanatic AppIntegrator 64-bitSOFTWARE\Microsoft\Windows\CurrentVersion\Run\TypingFanatic EPM SupportSOFTWARE\Microsoft\Windows\CurrentVersion\Run\TypingFanatic Search Scope MonitorSoftware\TypingFanaticSoftware\TypingFanatic_f5SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{3c2d2f8f-080e-4b03-9112-72bc0483dab4}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{55e5081a-bf13-4579-899f-dcf7fd253772}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\TypingFanaticSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\TypingFanatic AppIntegrator 32-bitSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\TypingFanatic AppIntegrator 64-bitSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\TypingFanatic EPM SupportSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\TypingFanatic Search Scope MonitorSOFTWARE\Wow6432Node\TypingFanatic_f5SYSTEM\ControlSet001\services\TypingFanatic_f5ServiceSYSTEM\CurrentControlSet\services\TypingFanatic_f5ServiceHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}TypingFanatic_f5bar Uninstall Internet ExplorerTypingFanaticTooltab Uninstall Internet Explorer

Additional Information

The following directories were created:
%LOCALAPPDATA%\TypingFanaticTooltab%LOCALAPPDATA%\TypingFanatic_f5%PROGRAMFILES%\TypingFanatic_f5EI%PROGRAMFILES(x86)%\TypingFanatic_f5%PROGRAMFILES(x86)%\TypingFanatic_f5EI%USERPROFILE%\AppData\LocalLow\TypingFanatic_f5
Loading...