SMSFromBrowser Toolbar

By GoldSparrow in Potentially Unwanted Programs

Threat Scorecard

Ranking: 2,082
Threat Level: 10 % (Normal)
Infected Computers: 20,340
First Seen: June 23, 2015
Last Seen: September 20, 2023
OS(es) Affected: Windows

SMSFromBrowser Toolbar Image

SMSFromBroswer Toolbar is an Internet browser extension that offers its users the ability to send SMS and text messages directly from their PC while also providing access to sites for online dictation, VOIP and others. All of this is for free, of course. At first glance this may seem like a pretty good deal, SMSFromBrowser, unfortunately, comes with a couple of caveats that have led cybersecurity specialists to consider it as a PUP (Potentially Unwanted Program).

SMSFromBrowser Toolbar Hijacks Browsers, Logs User Information

SMSFromBrowser Toolbar is available for a variety of Internet browsers such as Mozilla Firefox, Internet Explorer, and Safari, but its most prevalent version is the one for Google Chrome. After installation, this PUP proceeds to change the default settings of the user's browser. The homepage and the new tab page will be changed to one provided by SMSFromBrowser - int.search.myway.com, while the default search engine will be replaced by hp.myway.com. [pic - SMSFromToolbar NewTabPage.png] These are some of the obvious signs that SMSFromBrowser Toolbar is present on your computer system but there are numerous more subtle functions of this PUP that work silently in the background.

SMSFromBrowser Toolbar records both anonymous as well as personally identifiable information from the computer system it is installed on. According to the EULA, it collects the IP address, browser type and language, as well as time stamps and other browser-related data. If the user conducts a search through the app, SMSFromBrowser will log "keyword query, search query text, search results clicked, pages viewed and search history." This is not all, however, as the app also keeps a tab on all connected devices and the software installed on the system it is present.

Ask Applications, Inc. (f/k/a Mindspark Interactive Network, Inc. and APN, LLC), the developers of SMSFromBrowser Toolbar, can then, solely on their discretion, provide the collected data to third parties or they can allow said third-parties to start collecting user data by themselves. Most commonly this results in an influx of targeted ads that could take the form of pop-up ads, banners, or search results.

SMSFromBrowser could enter your device through 'bundling'

While SMSFromBrowser Toolbar has an official website where you can download the app, it appears that this is not the way most users encounter the browser extension. Instead, SMSFromBrowser Toolbar seems to be mostly distributed through the so-called method of 'bundling' - packaging the app in the same installer file of another more popular freeware program. In most cases, during the installation setup of the program, it is not immediately conveyed what other apps might also get installed unless the user takes the time to look other the "advanced" or "custom" options.

It is recommended to remove the SMSFromToolbar extension as soon as possible either by following the official instructions provided by the developer here or by using a professional anti-malware program to clean their device.

SpyHunter Detects & Remove SMSFromBrowser Toolbar

Registry Details

SMSFromBrowser Toolbar may create the following registry entry or registry entries:
CLSID
{046BB815-0F3B-437C-9482-DE44A2F0E876}
{109AE665-04B4-4B25-BA93-5E0128F046F8}
{26E4836E-419A-4250-BC53-871414F7DA3F}
{2bcad394-a3b2-45ed-8146-8753443efb1c}
{2EE89CCE-B353-4454-AF45-521F317177FB}
{3188eefd-9259-445d-8ccd-b99d6296ad1a}
{39ebff0c-3c27-4c64-a889-00eed7e7f48f}
{3C1F5A45-34D9-484B-A674-9AB817F0AF60}
{4535DE07-DA58-4D90-8259-D335311BA7BB}
{4636FEB5-CE9E-4D3D-B838-46A9B4620C54}
{474A75BB-93A4-48D2-8BF8-7899ABC0A4C4}
{4a427b06-1b06-493b-beef-41406f35351f}
{4B7BA0B7-4F00-475B-899B-8B10418FDC5E}
{4DA50F0A-AD98-4E0C-910D-E35E6AB23F88}
{5285a44e-d23d-44dd-adc6-25f233dcfbc2}
{54CD434D-E4DB-4984-9FFE-10D05BB45C00}
{557C6AA0-2850-463B-9502-583A4E8DCFEF}
{596901cf-f73d-454f-96a3-a359b9d0648e}
{61AC7AEA-C726-44C3-A2A9-FDE31D79765A}
{621f1d90-f3b6-4eb3-b4f9-7bf920ebea28}
{6582B350-42BA-4E56-ACE7-75532F5C8847}
{69D5F86F-3F87-46D7-82AA-FBAF1C9DAB17}
{6A1F1722-367B-4733-AEE5-CA85385BB250}
{6E988F03-0F1E-4D75-AD8F-6EBC4DA2127E}
{72C5DED6-E9B9-4826-A9F2-0AE4F9CC5CF8}
{7F444135-DC8E-4D0A-A4B9-EF1EF5856904}
{88e50810-6019-4a4a-a742-3aee038f75ae}
{89C678D3-2D33-478C-A052-1683F41C67B0}
{8C627953-5078-49B9-80D0-9E9CE3C0549F}
{8CD57AD0-8F87-4B0F-A044-B16B4F9069FE}
{91bd7f2b-f5a3-4770-b3f5-b293443fa726}
{9bc71041-c044-49f0-8c79-630ff148e6f3}
{9FA0B3E0-204A-419E-8977-E8BDAB4FA338}
{A373BCB8-696F-4669-B45F-802A16EA01E2}
{a865e46b-eea0-4d76-b325-395ead1eb1fe}
{AA7AB769-99F3-4A7D-888A-809D49AA8A18}
{ac561298-8f22-4d6a-ba70-931ac76292b1}
{b1d7ea4a-79ca-454e-897f-f5a052e467f6}
{B7A3A1B0-6BFC-4735-8B7F-6B4B6790F3DE}
{c5041829-4bec-4fb2-ba6a-ecf63ee8be74}
{CEB3CEDE-FE79-4760-9606-F45B0FA2DE23}
{CF2F9462-94B9-4BB6-AD68-6D2B4B65E4AB}
{D55BF226-A026-4762-9392-0CF0A63E8997}
{DD789BE5-B7D9-4C5C-9F4E-16874DA94157}
{E482914D-75CF-478A-AE74-79A608A1725A}
{E6185F81-F694-4976-A459-C395F766387F}
{E7F1E4ED-580E-425B-8AA6-141A090993F9}
{E9D41B14-FBDE-4E23-ABED-2222CBD1E9E9}
{F345A978-E28D-4818-80F4-52C6933C215C}
{ffe35078-94b2-4fc0-990d-bf8289bc25e4}
File name without path
http_SMSfromBrowser.dl.myway.com_0.localstorage
http_SMSfromBrowser.dl.myway.com_0.localstorage-journal
http_SMSfromBrowser.dl.tb.ask.com_0.localstorage
http_SMSfromBrowser.dl.tb.ask.com_0.localstorage-journal
Software\AppDataLow\Software\SMSfromBrowser_f7
Software\Microsoft\Internet Explorer\Approved Extensions\{3188EEFD-9259-445D-8CCD-B99D6296AD1A}
Software\Microsoft\Internet Explorer\Approved Extensions\{B1D7EA4A-79CA-454E-897F-F5A052E467F6}
Software\Microsoft\Internet Explorer\Approved Extensions\{FFE35078-94B2-4FC0-990D-BF8289BC25E4}
Software\Microsoft\Internet Explorer\DOMStorage\smsfrombrowser.dl.myway.com
Software\Microsoft\Internet Explorer\SearchScopes\{50E39B96-8771-4FA6-B7BE-04F1D4E2B26F}
SOFTWARE\Microsoft\Internet Explorer\Toolbar\{B1D7EA4A-79CA-454E-897F-F5A052E467F6}
SOFTWARE\Microsoft\Tracing\SMSfromBrowser_RASAPI32
SOFTWARE\Microsoft\Tracing\SMSfromBrowser_RASMANCS
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3188EEFD-9259-445D-8CCD-B99D6296AD1A}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{B1D7EA4A-79CA-454E-897F-F5A052E467F6}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FFE35078-94B2-4FC0-990D-BF8289BC25E4}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3188EEFD-9259-445D-8CCD-B99D6296AD1A}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{B1D7EA4A-79CA-454E-897F-F5A052E467F6}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FFE35078-94B2-4FC0-990D-BF8289BC25E4}
Software\SMSfromBrowser
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{50E39B96-8771-4FA6-B7BE-04F1D4E2B26F}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\{B1D7EA4A-79CA-454E-897F-F5A052E467F6}
SOFTWARE\Wow6432Node\Microsoft\Tracing\SMSfromBrowser_RASAPI32
SOFTWARE\Wow6432Node\Microsoft\Tracing\SMSfromBrowser_RASMANCS
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{3188EEFD-9259-445D-8CCD-B99D6296AD1A}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{FFE35078-94B2-4FC0-990D-BF8289BC25E4}
SMSfromBrowser_f7bar Uninstall Internet Explorer
SMSfromBrowserTooltab Uninstall Internet Explorer

Directories

SMSFromBrowser Toolbar may create the following directory or directories:

%APPDATA%\Microsoft\Windows\Start Menu\Programs\SMSfromBrowser
%LOCALAPPDATA%\SMSfromBrowserTooltab
%UserProfile%\Local Settings\Application Data\SMSfromBrowserTooltab

Trending

Most Viewed

Loading...