HoroscopeBuddy Toolbar

Threat Scorecard

Threat Level: 10 % (Normal)
Infected Computers: 23
First Seen: November 14, 2017
Last Seen: November 8, 2020
OS(es) Affected: Windows

The HoroscopeBuddy Toolbar from Free.horoscopebuddy.com is a program that was developed and published by Mindspark Interactive Network, Inc. as a free-to-use browser extension. The HoroscopeBuddy software is known to support versions for Internet Explorer, Google Chrome and Mozilla Firefox. The HoroscopeBuddy Toolbar is promoted as a tool that can enhance your new tab page and deliver the latest horoscopes from Horoscope.com, as well as numerology reports, tarot readings, and spiritual enlightenment guides. Before you install the HoroscopeBuddy Toolbar, it is recommended that you read the Terms of Use and the Privacy Documentation on Eula.mindspark.com/tos/ and Eula.mindspark.com/privacypolicy/. The company behind the HoroscopeBuddy Toolbar uses it to collect the Web usage data and sell it to marketers who will deploy tailor-suited ads via Myway.com and many other Web portals.

The HoroscopeBuddy Toolbar requires the following privileges on Mozilla Firefox:

  • Access your data for all websites.
  • Exchange messages with programs other than Firefox.
  • Access the browser tabs.
  • Access browser activity during navigation.
  • Monitor extension usage and manage themes.

Installing the HoroscopeBuddy Toolbar on Chrome triggers a request for the following privileges:

  • Read and change all your data on the websites you visit.
  • Read and change your browsing history.
  • Replace the page you see when opening a new tab.
  • Manage your downloads.
  • Manage your apps, extensions and themes.

You should note that the HoroscopeBuddy Toolbar changes the new tab and start page in Firefox and IE. The HoroscopeBuddy Toolbar is configured to present the hxxp://hp.myway.com/horoscopebuddy/ttab02/index.html gateway as the new tab page and start page to users. Cybersecurity researchers reveal that hxxp://hp.myway.com/horoscopebuddy/ttab02/index.html is almost identical to hxxp://hp.myway.com/anytimeastrology/S22699/index.html and hxxps://hp.myway.com/astrologysearcher/ttab02chr/index.html that we have mentioned in our article on AnytimeAstrology and AstrologySearcher extensions by Mindspark. HoroscopeBuddy is deemed as a Potentially Unwanted Program (PUP) by Mindspark Interactive Network, Inc., which might apply unwanted changes to your Internet settings. AV tools are known to tag files and settings used by the HoroscopeBuddy Toolbar as:

  • AdWare.MyWebSearch
  • Application.Win32.BrowseFox.nlnbg
  • GrayWare/Win32.StartPage.gen
  • PUA.Toolbar.Agent!
  • PUF.MySearch!1.AEA3 (CLASSIC)
  • PUP.WebToolbar.MyWebSearch
  • PUP/Win32.Getforms.R207000
  • Riskware/Agent
  • Win32:UnwantedSig [PUP]
  • not-a-virus:HEUR:WebToolbar.Win32.Agent.gen

SpyHunter Detects & Remove HoroscopeBuddy Toolbar

Directories

HoroscopeBuddy Toolbar may create the following directory or directories:

%LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\aiobhbancgedeigmnbijlakfnfjmfmcd
%LOCALAPPDATA%\HoroscopeBuddyTooltab

Trending

Most Viewed

Loading...