Should I block it?

98%
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization

VersionsAdditional versions

1,2,2,7 97.22%
1,2,2,7 2.78%
(Note, Mindspark Interactive Network publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

Parent process
Related files

PE structurePE file structure

Show functions
Import table
advapi32.dll
RegOpenKeyExA, RegQueryValueExA, RegFlushKey, RegSetValueExA, RegCreateKeyExA, RegDeleteValueA, RegCloseKey
kernel32.dll
ReleaseMutex, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, CreateEventA, lstrcmpA, CreateFileA, lstrcpyA, CreateDirectoryA, lstrcatA, WaitForMultipleObjects, GetTickCount, GetSystemTimeAsFileTime, FlushFileBuffers, WriteFile, GetStartupInfoA, ExitProcess, GetCommandLineA, GetModuleHandleA, DebugBreak, HeapAlloc, GetProcessHeap, HeapReAlloc, CreateMutexA, MultiByteToWideChar, WideCharToMultiByte, lstrlenW, CreateThread, Sleep, FreeLibrary, GetProcAddress, LoadLibraryA, SetThreadPriority, GetCurrentThread, GetFileAttributesA, GetCurrentProcessId, OpenProcess, LocalFree, GetVersionExA, GetDriveTypeA, lstrcpynA, CreateFileMappingA, SetLastError, DuplicateHandle, GetCurrentProcess, OpenFileMappingA, MapViewOfFile, UnmapViewOfFile, SetEvent, WaitForSingleObject, ResetEvent, GetModuleFileNameA, lstrlenA, GetLastError, HeapFree, CloseHandle
ole32.dll
StringFromGUID2
shell32.dll
SHGetPathFromIDListA, SHGetMalloc, SHGetSpecialFolderLocation
user32.dll
MsgWaitForMultipleObjects, GetMessageA, TranslateMessage, GetKeyboardType, IsWindow, DestroyWindow, UnhookWindowsHookEx, CharNextA, wsprintfA, SetWindowsHookExA, DispatchMessageA, CreateDialogIndirectParamA
version.dll
GetFileVersionInfoSizeA, VerQueryValueA, GetFileVersionInfoA

mwsoemon.exe

My Web Search Bar for Internet Explorer, email clients, and messenger clients by Mindspark Interactive Network (Signed)

Remove mwsoemon.exe
Version:   1,2,2,7
MD5:   83d7eeb3e14f14c489d44a4d32d7fb44
SHA1:   e8d58e81cc8a12ed5a3bf5e82b2b0bb07193c667
SHA256:   3382edcd0b5ef3e092e7d95f91567bac3f683c4fb3709f2d5f24bc1cea33b94f
Warning 12 antivirus scanners has detected malware.

What is mwsoemon.exe?

My Web Search by the Mindspark Interactive Network is a browser toolbar, part of the Fun Web Products suite of potentially unwanted applications such as Smiley Central, Cursor Mania, Popular Screensavers and others. The toolbar provides access to search engine results and a 404 Error Redirector among other things to your browser. The My Web Search toolbar could slow down your PC and uses cookies to track your web surfing usage and habits.

About mwsoemon.exe (from Mindspark Interactive Network)

MyWebSearch brings together the most comprehensive collection of search tools available to provide you with the information you need when you need it.

Overview

MWSOEMON.EXE is malware that executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). The file is digitally signed by Mindspark Interactive Network.

DetailsDetails

File name:MWSOEMON.EXE
Publisher:MyWebSearch.com
Product name:My Web Search Bar for Internet Explorer, email clients, and messenger clients
Description:My Web Search Plugin Loader
Typical file path:C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
File version:1,2,2,7
Product version:2,3,0,0
Size:37.51 KB (38,408 bytes)
Certificate
Issued to:Mindspark Interactive Network
Digital DNA
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'MyWebSearch Email Plugin' → C:\Program Files2\MYWEBS~1\bar\1.bin\mwsoemon.exe
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'MyWebSearch Email Plugin' → C:\Program Files1\MYWEBS~1\bar\1.bin\mwsoemon.exe

MalwareMalware detections

Based on 40+ industry antivirus scanners, 12 of them detected the following malware.
Antivirus engineEngine versionDetection
avast! 6.0.1289.0 Win32:Mywebsearch-R [PUP]
AVG 2014.0.3629 AdInstaller.FunWeb
Clam AntiVirus 0.97.3.0 Adware.Mywebsearch-2
Comodo Internet Security 15643 Application.Win32.MyWebSearch.~A
eSafe 7.0.17.0 Win32.MiscMywebsearc
ESET NOD32 7.8142 Win32/Toolbar.MyWebSearch
Kingsoft 2013.1.8.219 Win32.Troj.Generic.(kcloud)
Norman 7.00.22 Suspicious_Gen2.IVCJC
nProtect 2013-03-21.03 Trojan/W32.Agent.38408
SUPERAntiSpyware 5.6.0.1008 PUP.MyWebSearch
Vba32 AntiVirus 3.12.20.2 Adware.MyWebSearch
VIPRE Antivirus 16186 MyWebSearch.J (v) (not malicious)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00040695%
0.028634%
Kernel CPU:0.00035049%
0.013761%
User CPU:0.00005646%
0.014873%
Kernel CPU time:187,219 ms/min
100,923,805ms/min
CPU cycles:90,156/sec
17,470,203/sec
Memory
Private memory:809.6 KB
21.59 MB
Private (maximum):1.12 MB
Private (minimum):521.2 KB
Non-paged memory:809.6 KB
21.59 MB
Virtual memory:39.17 MB
140.96 MB
Virtual memory (peak):43.76 MB
169.69 MB
Working set:594 KB
18.61 MB
Working set (peak):3 MB
37.95 MB
Page faults:2,944/min
2,039/min
I/O
I/O read transfer:8 Bytes/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O other transfer:79 Bytes/sec
448.09 KB/min
I/O other operations:6/sec
1,671/min
Resource allocations
Threads:2
12
Handles:69
600
GUI GDI count:9
103
GUI GDI peak:11
142
GUI USER count:3
49
GUI USER peak:4
71

BehaviorsProcess properties

Integrety level:High
Platform:32-bit
Command lines:
  • "C:\progra~1\mywebs~1\bar\1.bin\mwsoemon.exe"
  • "C:\Program Files\mywebsearch\bar\2.bin\mwsoemon.exe"
  • "C:\progra~2\mywebs~1\bar\1.bin\mwsoemon.exe"
Owner:User
Parent process:Explorer.EXE (Windows Explorer by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate N 45.71%
Microsoft Windows XP 42.86%
Windows 7 Ultimate 11.43%

Distribution by countryDistribution by country

United States installs about 57.14% of My Web Search Bar for Internet Explorer, email clients, and messenger clients.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
GIGABYTE 100.00%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE