{"id":5232,"date":"2012-06-18T12:31:06","date_gmt":"2012-06-18T09:31:06","guid":{"rendered":"http:\/\/regrunreanimator.com\/research\/?p=5232"},"modified":"2012-06-18T12:31:06","modified_gmt":"2012-06-18T09:31:06","slug":"mapsgalaxy-toolbar","status":"publish","type":"post","link":"https:\/\/regrunreanimator.com\/research\/browser-toolbar\/mapsgalaxytoolbar\/mapsgalaxy-toolbar.htm","title":{"rendered":"MapsGalaxy ToolBar"},"content":{"rendered":"<h1 style=\"text-align: center;\">MapsGalaxy ToolBar<\/h1>\n<p style=\"text-align: center;\"><a href=\"http:\/\/free.mapsgalaxy.com\">http:\/\/free.mapsgalaxy.com<\/a><\/p>\n<p style=\"text-align: center;\"><strong>This software does not change the Windows boot time.<\/strong><\/p>\n<p><a href=\"https:\/\/regrunreanimator.com\/research\/wp-content\/uploads\/2012\/06\/MapsGalaxyToolBar.png\"><img loading=\"lazy\" class=\"aligncenter size-medium wp-image-5233\" title=\"MapsGalaxyToolBar\" src=\"https:\/\/regrunreanimator.com\/research\/wp-content\/uploads\/2012\/06\/MapsGalaxyToolBar-300x225.png\" alt=\"\" width=\"300\" height=\"225\" srcset=\"https:\/\/regrunreanimator.com\/research\/wp-content\/uploads\/2012\/06\/MapsGalaxyToolBar-300x225.png 300w, https:\/\/regrunreanimator.com\/research\/wp-content\/uploads\/2012\/06\/MapsGalaxyToolBar.png 1024w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/a><\/p>\n<div id=\"blist\"><strong>39SRCHMN.EXE<\/strong><br \/>\nDescription: <strong>MindSpark Toolbar Platform SearchScope Monitor MindSpark MindSpark Toolbar Platform SearchScope Monitor 2, 3, 0, 0<\/strong><br \/>\nMD5= <strong>CCA818A157A991CFD0B0D17C0C6D4ECD<\/strong><br \/>\nFile is <strong>signed<\/strong> and the <strong>signature was verified<\/strong>.<br \/>\nFile size= <strong>42536<\/strong><br \/>\n<strong>Related registry changes:<\/strong><br \/>\nHKLM\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\LOW RIGHTS\\ELEVATIONPOLICY\\{E1F80EB5-8AF4-410D-87C1-4F3E2776822A}\\APPNAME: &#8220;<strong>39SRCHMN.EXE<\/strong>&#8221;<br \/>\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\\MAPSGALAXY SEARCH SCOPE MONITOR: &#8220;&#8221;%PROGRAM FILES%\\MAPSGA~2\\BAR\\1.BIN\\<strong>39SRCHMN.EXE<\/strong>&#8221; \/M=2 \/W \/H&#8221;<\/div>\n<div id=\"alist\"><strong>39BRMON.EXE<\/strong><br \/>\nDescription: <strong>VER_DESCRIPTION VER_COMPANY_NAME VER_PRODUCT_NAME 2,3,0,0<\/strong><br \/>\nMD5= <strong>35D6CAAA9E4D82974A74DBDB53801F98<\/strong><br \/>\nFile is <strong>signed<\/strong> and the <strong>signature was verified<\/strong>.<br \/>\nFile size= <strong>30096<\/strong><br \/>\n<strong>Related registry changes:<\/strong><br \/>\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\\MAPSGALAXY_39 BROWSER PLUGIN LOADER: &#8220;%PROGRAM FILES%\\MAPSGA~2\\BAR\\1.BIN\\<strong>39BRMON.EXE<\/strong>&#8220;<\/div>\n<div id=\"blist\"><strong>FLASHUTIL10W_ACTIVEX.EXE<\/strong><br \/>\nDescription: <strong>Adobe\u00ae Flash\u00ae Player Installer\/Uninstaller 10.3 r183 Adobe Systems, Inc. Flash\u00ae Player Installer\/Uninstaller 10,3,183,7<\/strong><br \/>\nMD5= <strong>BB646927C878EF8B966ED168D4C712AE<\/strong><br \/>\nFile is <strong>signed<\/strong> and the <strong>signature was verified<\/strong>.<br \/>\nFile size= <strong>243360<\/strong><br \/>\n<strong>Related registry changes:<\/strong><br \/>\nHKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUNONCE\\FLASHPLAYERUPDATE: &#8220;%SYSDIR%\\MACROMED\\FLASH\\<strong>FLASHUTIL10W_ACTIVEX.EXE<\/strong> -UPDATE ACTIVEX&#8221;<\/div>\n<div id=\"alist\"><strong>39BAR.DLL<\/strong><br \/>\nDescription: <strong>MindSpark Toolbar Platform MindSpark MindSpark Toolbar Platform for Internet Explorer and Firefox 2, 5, 3, 20<\/strong><br \/>\nMD5= <strong>0087835A349C537E79583D41252915FB<\/strong><br \/>\nFile is <strong>signed<\/strong> and the <strong>signature was verified<\/strong>.<br \/>\nFile size= <strong>697744<\/strong><br \/>\n<strong>Related registry changes:<\/strong><br \/>\nHKLM\\SOFTWARE\\CLASSES\\CLSID\\{1E91A655-BB4B-4693-A05E-2EDEBC4C9D89}\\INPROCSERVER32\\: &#8220;%PROGRAM FILES%\\MAPSGA~2\\BAR\\1.BIN\\<strong>39BAR.DLL<\/strong>&#8221;<br \/>\nHKLM\\SOFTWARE\\CLASSES\\CLSID\\{364EA597-E728-4CE4-BB4A-ED846EF47970}\\INPROCSERVER32\\: &#8220;%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39BAR.DLL<\/strong>&#8221;<br \/>\nHKLM\\SOFTWARE\\CLASSES\\CLSID\\{4B7D0B0C-CFF3-49C5-9BC3-FFABC031C822}\\INPROCSERVER32\\: &#8220;%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39BAR.DLL<\/strong>&#8221;<br \/>\nHKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\UNINSTALL\\MAPSGALAXY_39BAR UNINSTALL\\UNINSTALLSTRING: &#8220;RUNDLL32 %PROGRAM FILES%\\MAPSGA~2\\BAR\\1.BIN\\<strong>39BAR.DLL<\/strong>,O&#8221;<br \/>\nHKLM\\SOFTWARE\\MAPSGALAXY_39\\BAR\\UNINSTALLSTRING: &#8220;&#8221;%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\39HIGHIN.EXE&#8221; <strong>39BAR.DLL<\/strong>,O&#8221;<\/div>\n<div id=\"blist\"><strong>39SRCAS.DLL<\/strong><br \/>\nDescription: <strong>MindSpark Search Assistant MindSpark MindSpark Search Assistant for Internet Explorer 1, 2, 3, 5<\/strong><br \/>\nMD5= <strong>CB31249537D2758F73046888AA02CA7A<\/strong><br \/>\nFile is <strong>signed<\/strong> and the <strong>signature was verified<\/strong>.<br \/>\nFile size= <strong>62864<\/strong><br \/>\n<strong>Related registry changes:<\/strong><br \/>\nHKLM\\SOFTWARE\\CLASSES\\CLSID\\{71C1D63A-C944-428A-A5BD-BA513190E5D2}\\INPROCSERVER32\\: &#8220;%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39SRCAS.DLL<\/strong>&#8221;<br \/>\nHKLM\\SOFTWARE\\MAPSGALAXY_39\\BAR\\SWITCHES\\<strong>39SRCAS.DLL<\/strong>: &#8220;1&#8221;<\/div>\n<div id=\"blist\"><strong>39BARSVC.EXE<\/strong><br \/>\nDescription: <strong>Service MapsGalaxyService Start Type: loaded automatically by Server Manager PRODUCTVERS_TITLE COMPANYVERS_NAME PRODUCTVERS_NAME 2, 3, 0, 0<\/strong><br \/>\nMD5= <strong>622FCF264119F7DF127BE353F796B319<\/strong><br \/>\nFile is <strong>signed<\/strong> and the <strong>signature was verified<\/strong>.<br \/>\nFile size= <strong>42504<\/strong><br \/>\n<strong>Related registry changes:<\/strong><br \/>\nHKLM\\SYSTEM\\CURRENTCONTROLSET\\SERVICES\\MAPSGALAXY_39SERVICE\\IMAGEPATH: &#8220;%PROGRAM FILES%\\MAPSGA~2\\BAR\\1.BIN\\<strong>39BARSVC.EXE<\/strong>&#8220;<\/div>\n<p><!--more--><\/p>\n<div class=\"date\"><strong>Removed after installation:<\/strong><\/div>\n<p>[INTERNET EXPLORER] [CONTEXT MENU ITEMS] :HKCU &amp;??????? ? MICROSOFT EXCEL<\/p>\n<div id=\"blist\"><strong>GOOGLETOOLBARDYNAMIC_MUI_EN_60D6097707281E79.DLL\/<\/strong><br \/>\nDescription: <strong>File is deleted or hidden by rootkit or could not be located.<\/strong><\/div>\n<div class=\"date\"><strong>Modified during installation:<\/strong><\/div>\n<p>~+ [INTERNET EXPLORER] [CURRENT HOME PAGE] :HKCU START PAGE=HTTP:\/\/HOME.MYWEBSEARCH.COM\/INDEX.JHTML?N=77DE8857&amp;PTNRS=UXXDM025YYRU&amp;PTB=348EFCD9-2DCD-401E-89A9-72CDADEA9AD0&amp;SI=146463<br \/>\n~- [INTERNET EXPLORER] [CURRENT HOME PAGE] :HKCU START PAGE=HTTP:\/\/WWW.GOOGLE.COM\/<\/p>\n<div class=\"date\"><\/div>\n<p><strong>FILES ADDED:80<\/strong><\/p>\n<div id=\"clist\">%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\39FFXTBR@MAPSGALAXY_39.COM\\CHROME\\39FFXTBR.JAR<br \/>\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\39FFXTBR@MAPSGALAXY_39.COM\\CHROME.MANIFEST<br \/>\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\39FFXTBR@MAPSGALAXY_39.COM\\INSTALL.RDF<br \/>\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\39FFXTBR@MAPSGALAXY_39.COM\\INSTALLKEYS.JS<br \/>\n%LOCAL APPDATA%\\MICROSOFT\\INTERNET EXPLORER\\DOMSTORE\\URCLIPSD\\MAPS.GOOGLE[1].XML<br \/>\n%LOCAL APPDATA%\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\LAST ACTIVE\\{D19FAF50-B924-11E1-BBE7-000C2982064B}.DAT<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39AUXSTB.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39BAR.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39BARSVC.EXE<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39BRMON.EXE<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39BRSTUB.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39DATACT.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39DLGHK.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39DYN.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39FEEDMG.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39HIGHIN.EXE<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39HKSTUB.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39HTMLMU.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39HTTPCT.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39IDLE.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39IEOVR.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39IMPIPE.EXE<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39MEDINT.EXE<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39MLBTN.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39MSG.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39PLUGIN.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39RADIO.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39REGFFT.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39REGHK.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39REGIET.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39SCRIPT.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39SKIN.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39SKNLCR.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39SKPLAY.EXE<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39SRCAS.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39SRCHMN.EXE<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39TPINST.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>39UABTN.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\CHROME\\39FFXTBR.JAR<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\CHROME.MANIFEST<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>CREXT.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>CREXTP39.EXE<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\INSTALL.RDF<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\INSTALLKEYS.JS<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\LOGO.BMP<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>NP39STUB.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>T8EXTEX.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>T8EXTPEX.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>T8HTML.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>T8RES.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\<strong>T8TICKER.DLL<\/strong><br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\0003253C<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\00032905<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\00032A8C.BMP<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\00032ABA.BMP<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\00032B18.BMP<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\00032B57.BMP<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\00032B86.BMP<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\00032BC4.BMP<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\00032BF3.BMP<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\00032C22.BMP<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\00032C60.BMP<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\00032C8F.BMP<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\00033DC5.JHTML<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\000364D5<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\0003786D.BMP<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE\\FILES.INI<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\GEN1\\COMMON.T8S<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\HISTORY\\SEARCH3<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\IE9MESG\\COMMON.T8S<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\MESSAGE\\COMMON.T8S<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\SETTINGS\\PREVCFG2.HTM<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\SETTINGS\\SETTING3.HTM<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\SETTINGS\\S_PID.DAT<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\SETTINGS\\S_W1.DAT<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\SETTINGS\\S_W2.DAT<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\MAPSGALAXY_39\\CACHE\\POPUPPROPERTIES202980343.HTML<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\MAPSGALAXY_39\\CACHE\\POPUPPROPERTIES202980364.HTML<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\MAPSGALAXY_39\\CACHE\\POPUPPROPERTIES202980406.HTML<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\MAPSGALAXY_39\\CACHE\\RADIO.HTML<\/div>\n<div class=\"date\"><\/div>\n<p><strong>FILES DELETED:2<\/strong><\/p>\n<div id=\"dlist\">%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS.INI<br \/>\n%LOCAL APPDATA%\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\LAST ACTIVE\\{ED4A9D08-AFD1-11E1-BBE5-000C2982064B}.DAT<\/div>\n<div class=\"date\"><\/div>\n<p><strong>FILES[ATTR]MODIFIED:18<\/strong><\/p>\n<div id=\"clist\">%APPDATA%\\MACROMEDIA\\FLASH PLAYER\\MACROMEDIA.COM\\SUPPORT\\FLASHPLAYER\\SYS\\SETTINGS.SOL<br \/>\n%PROFILE%\\IECOMPATCACHE\\INDEX.DAT<br \/>\n%PROFILE%\\IETLDCACHE\\INDEX.DAT<br \/>\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\FEEDSSTORE.FEEDSDB-MS<br \/>\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\MICROSOFT FEEDS~\\MICROSOFT AT HOME~.FEED-MS<br \/>\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\MICROSOFT FEEDS~\\MICROSOFT AT WORK~.FEED-MS<br \/>\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\INTERNET EXPLORER SUGGESTED SITES~.FEED-MS<br \/>\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS\\{5588ACFD-6436-411B-A5CE-666AE6A92D3D}~\\WEBSLICES~\\WEB SLICE GALLERY~.FEED-MS<br \/>\n%LOCAL APPDATA%\\MICROSOFT\\FEEDS CACHE\\INDEX.DAT<br \/>\n%LOCAL APPDATA%\\MICROSOFT\\INTERNET EXPLORER\\DOMSTORE\\IG74HEML\\WWW.GOOGLE[1].XML<br \/>\n%LOCAL APPDATA%\\MICROSOFT\\INTERNET EXPLORER\\DOMSTORE\\INDEX.DAT<br \/>\n%LOCAL APPDATA%\\MICROSOFT\\INTERNET EXPLORER\\RECOVERY\\LAST ACTIVE\\RECOVERYSTORE.{EB98B106-AFD1-11E1-BBE5-000C2982064B}.DAT<br \/>\n%LOCAL APPDATA%\\MICROSOFT\\WINDOWS\\USRCLASS.DAT<br \/>\n%TEMP%\\CE4CF87733651BF1F44DD1E02FC1A8E8<br \/>\n%PROFILE%\\PRIVACIE\\INDEX.DAT<br \/>\nC:\\DOCUMENTS AND SETTINGS\\LOCALSERVICE\\LOCAL SETTINGS\\APPLICATION DATA\\MICROSOFT\\WINDOWS\\USRCLASS.DAT<br \/>\nC:\\DOCUMENTS AND SETTINGS\\NETWORKSERVICE\\LOCAL SETTINGS\\APPLICATION DATA\\MICROSOFT\\WINDOWS\\USRCLASS.DAT<br \/>\n%WinDir%\\TASKS\\USER_FEED_SYNCHRONIZATION-{600E3BA8-8EF5-4554-94FE-DB90950D3DEB}.JOB<\/div>\n<div class=\"date\"><\/div>\n<p><strong>FOLDERS ADDED:16<\/strong><\/p>\n<div id=\"dlist\">%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS<br \/>\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\39FFXTBR@MAPSGALAXY_39.COM<br \/>\n%APPDATA%\\MOZILLA\\FIREFOX\\PROFILES\\7BLSFY3V.DEFAULT\\EXTENSIONS\\39FFXTBR@MAPSGALAXY_39.COM\\CHROME<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\CHROME<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\1.BIN\\THIRDPARTYINSTALLERS<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\CACHE<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\GEN1<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\HISTORY<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\IE9MESG<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\MESSAGE<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\BAR\\SETTINGS<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\MAPSGALAXY_39<br \/>\n%PROGRAM FILES%\\MAPSGALAXY_39\\MAPSGALAXY_39\\CACHE<\/div>\n<div class=\"wpInsert wpInsertInPostAd wpInsertBelow\" style=\"padding: 0px;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>MapsGalaxy ToolBar http:\/\/free.mapsgalaxy.com This software does not change the Windows boot time. 39SRCHMN.EXE Description: MindSpark Toolbar Platform SearchScope Monitor MindSpark MindSpark Toolbar Platform SearchScope Monitor 2, 3, 0, 0 MD5= CCA818A157A991CFD0B0D17C0C6D4ECD File is signed and the signature was verified. File size= 42536 Related registry changes: HKLM\\SOFTWARE\\MICROSOFT\\INTERNET EXPLORER\\LOW RIGHTS\\ELEVATIONPOLICY\\{E1F80EB5-8AF4-410D-87C1-4F3E2776822A}\\APPNAME: &#8220;39SRCHMN.EXE&#8221; HKLM\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\RUN\\MAPSGALAXY SEARCH SCOPE MONITOR: &#8220;&#8221;%PROGRAM FILES%\\MAPSGA~2\\BAR\\1.BIN\\39SRCHMN.EXE&#8221; [&hellip;]<br \/><a style=\"color: #42A2CE\" href=\"https:\/\/regrunreanimator.com\/research\/browser-toolbar\/mapsgalaxytoolbar\/mapsgalaxy-toolbar.htm\"><u>More&#8230;<\/u><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[4329],"tags":[8432],"_links":{"self":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts\/5232"}],"collection":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/comments?post=5232"}],"version-history":[{"count":0,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/posts\/5232\/revisions"}],"wp:attachment":[{"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/media?parent=5232"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/categories?post=5232"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/regrunreanimator.com\/research\/wp-json\/wp\/v2\/tags?post=5232"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}