MyWebSearch Toolbar

IAC Search

General information:

Malware Name: MyWebSearch Toolbar
Malware Type: Browser Helper Object
Company Name: IAC Search & Media.
Company URL: http://www.mywebsearch.com
Threat Level: High
Operating System: WIN XP
Installation Type: Installed through ActiveX
Operation: Time of After Browser Restart.

Company Description:

My Web Search, is a property of IAC Search & Media. The MyWebSearch toolbar lets user search the web using either google, yahoo, Looksmart etc. The toolbar is also equipped with a popup stopper. The toolbar has links to some of the funweb products (Screensavers, cards etc) also.

Spyware Description:

IAC Search

Characteristics/Symptoms:

    -> Collects information about the pages visited -> Slows the browser -> Can change the IE search settings -> Communicates with the host server -> Shows popup ads from its affiliates -> Contains link to other sites also. -> Changes the IE homepage0

Additional information might be found here:

google Search at Google for MyWebSearch Toolbar
bing Search at Bing for MyWebSearch Toolbar
yahoo Search at Yahoo for MyWebSearch Toolbar

Processes Running:

M3SKPLAY.EXE , MWSOEMON.EXE, F3SCHMON.EXE

File information Created after Installation:

File Location Size (Bytes) Type
C:\Program Files\MyWebSearch\bar\1.bin\M3SKPLAY.EXE 24576 Application
C:\Program Files\MyWebSearch\bar\Cache\0099EEDC.bin unknown BIN File
C:\Program Files\MyWebSearch\bar\Settings\prevcfg2.htm 74877 HTM File

Folder information Created after Installation:

Folder Location
C:\Program Files\MyWebSearch
C:\Program Files\MyWebSearch\bar

Registry information Created after Installation:

Main Registry Key Sub Registry Key Key Value Name
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows Media\WMSDK\sources\f3PopularScreensavers\C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL
HKEY_LOCAL_MACHINE \SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall
HKEY_LOCAL_MACHINE \SOFTWARE\MyWebSearch