Home Malware Programs Potentially Unwanted Programs (PUPs) WebmailWorld Toolbar

WebmailWorld Toolbar

Posted: May 18, 2015

Threat Metric

Ranking: 1,069
Threat Level: 1/10
Infected PCs: 94,637
First Seen: May 7, 2015
Last Seen: October 17, 2023
OS(es) Affected: Windows

WebmailWorld Toolbar is not an application designed in order to enhance the on-line experience of its clients. In fact, it is described as a Potentially Unwanted Program (PUP) due to its limited functionality and extensive negative aspects. The software is developed by Mindspark Interactive Network - a company, responsible for the creation of numerous unreliable tools. WebmailWorld Toolbar is promoted as a program that can provide quick access to the e-mail accounts of the user. This feature can be achieved by simply bookmarking the corresponding sites, so the PUP doesn't offer anything useful. WebmailWorld Toolbar changes the settings of Google Chrome, Mozilla Firefox and Internet Explorer and replaces your default homepage and search engine. The real purpose of the PUP is to boost the web traffic towards some third-party sites. This task explains why you may be automatically redirected towards irrelevant pages, and your search results may not be accurate. WebmailWorld Toolbar primarily comes bundled with another free program, so you should perform the installation through the "Custom" option and should manually uncheck it. If it is already too late, you should perform an in-depth scan with a reputable malware removal tool in order to get rid of the PUP.

Technical Details

Registry Modifications

The following newly produced Registry Values are:

CLSID{005F8465-235B-446A-BDC6-13135C0E63F9}{00DEAED4-E0E0-4CDF-A319-C43F493EDDD2}{04EFB0BB-7D11-46DE-BB71-B8E94E5BA3C5}{08b3b496-d13d-47f7-890a-1d609c5da386}{20EE9396-0FEC-4192-A2D3-844742C64FC4}{279B4AD5-AF56-4D1F-9370-12A5861AC839}{3EC41D36-D12A-4AE9-84AB-F187596263FE}{42BC3466-4838-401D-9C29-16C290E25FDF}{4387f37a-53b2-4878-9b62-48ae5903082f}{48653A19-F735-41FD-9648-BAF5AD7B0DE1}{499EA842-4D9D-4D9B-BED3-10363DDD20FD}{49E43A76-8FF5-4CCF-89D7-4CF3AFF9F60B}{4A9969B5-2321-4E98-A63D-CBE92D24649D}{4B3D9CCA-7C04-475C-AF0F-EE33DA640324}{55daa94e-2947-47aa-b1b7-3e45ffb327ee}{5641c0b5-6703-4b5a-a79f-56f60c27414b}{5DBBB68A-2799-4EE0-B4E3-50541FF9012B}{5F8BD3C5-C8EC-423C-B827-F3F48712D904}{6eb207f7-41d4-4157-a862-7bea0a71ed72}{7a550245-e523-407b-b114-9249a112e2d1}{80ac13c3-c3ec-41c3-afa1-370ab2a26d62}{891BDA9B-3F80-4250-8FFA-E7A0E3750663}{8CCD3699-E188-4767-A759-63326C627332}{90424A16-DE92-4082-9252-9B3FFF344F5A}{940665FD-B85F-4E11-99E3-2AAB37E6E6B4}{97619DE7-F8BA-4D43-8034-DF22B26243C0}{afc132f5-9a39-48d8-843f-3760f6a55cf5}{B5FA85F5-0AB6-436E-B616-20693E34E7B4}{B784B1B5-A3C3-4793-A508-38E767BF4A36}{B7D0867C-6E49-4ED5-B297-250501BBA5A5}{BBDB0AA4-BDA5-40EA-A93E-B461EC45DECE}{bd06746d-7edd-4c7e-aafb-af2c60926682}{C44A2156-EB78-46C7-9C56-3CE075A9A213}{c44c5238-865e-496a-9c7c-323e5be7ac2d}{c9b79c53-ada4-40a5-9325-6a0ec85a1fc1}{D38A1BE7-A7D4-41A0-A388-243550EDC2DA}{e379bd0a-90cc-4703-86ed-ee53745597bb}{E3FFC0DE-34AC-46DA-83B0-D49B6A7267E9}{E4781E9A-0FC4-4804-B311-3534BBAC5356}{E893EC01-B09F-416A-9477-24A454A2E4DC}{E9300B0F-7E7F-4F17-BA8C-79D464B4E733}{EDC00218-5FC3-4910-89D5-EFEF6944F83E}{F1688DEB-5918-43EB-8E34-FB6E0A85A175}{F6B597E4-D313-443C-B8A7-85FAFCD240F5}File name without pathhttp_webmailworld.dl.myway.com_0.localstoragehttp_webmailworld.dl.myway.com_0.localstorage-journalhttp_webmailworld.dl.tb.ask.com_0.localstoragehttp_webmailworld.dl.tb.ask.com_0.localstorage-journalwebmailworld.dl.myway[1].xmlHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\WebmailWorld_dnSoftware\Microsoft\Internet Explorer\Approved Extensions\{08B3B496-D13D-47F7-890A-1D609C5DA386}Software\Microsoft\Internet Explorer\Approved Extensions\{55DAA94E-2947-47AA-B1B7-3E45FFB327EE}Software\Microsoft\Internet Explorer\Approved Extensions\{E379BD0A-90CC-4703-86ED-EE53745597BB}SOFTWARE\Microsoft\Internet Explorer\DOMStorage\webmailworld.dl.myway.comSOFTWARE\Microsoft\Windows\CurrentVersion\Run\WebmailWorld Search Scope MonitorSOFTWARE\WebmailWorldSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\WebmailWorld Search Scope MonitorSYSTEM\ControlSet001\services\WebmailWorld_dnServiceSYSTEM\CurrentControlSet\services\WebmailWorld_dnServiceHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}WebmailWorld_dnbar Uninstall Internet ExplorerWebmailWorldTooltab Uninstall Internet Explorer

Additional Information

The following directories were created:
%LOCALAPPDATA%\WebmailWorldTooltab%LOCALAPPDATA%\WebmailWorld_dn%PROGRAMFILES%\WebmailWorld_dn%PROGRAMFILES(x86)%\WebmailWorld_dn%USERPROFILE%\AppData\LocalLow\WebmailWorld_dn%USERPROFILE%\Application Data\WebmailWorld_dn
Loading...