Should I block it?
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization
Relationships
- F3REGHK.DLL (My Web Search Bar for Internet Explorer and FireFox by Mindspark Interactive Network)
- m3srchmn.exe (My Web Search Bar for Internet Explorer and FireFox by Mindspark Interactive Network)
- mwsoeplg.dll (My Web Search Bar, Fun Buddy Icons, and Smiley Central by MyWebSearch.com)
- m3outlcn.dll (My Web Search Bar by MyWebSearch.com)
- uninstall fun web products.dll (My Web Search Bar for Internet Explorer, FireFox, email clients, and messenger clients by Mindspark Interactive Network)
- M3IEOVR.DLL (My Web Search Bar by Mindspark Interactive Network)
- M3DLGHK.DLL (My Web Search Bar by Mindspark Interactive Network)
- M3AUXSTB.DLL (My Web Search Bar by Mindspark Interactive Network)
- MWSOESTB.DLL (My Web Search Bar for Internet Explorer, email clients, and messenger clients by Mindspark Interactive Network)
- mwsbar.dll (My Web Search Bar for Internet Explorer, FireFox, email clients, and messenger clients by Mindspark Interactive Network)
- m3highin.exe (My Web Search Bar by Mindspark Interactive Network)
- MWSSVC.EXE (My Web Search Bar by Mindspark Interactive Network)
- MWSOEMON.EXE (My Web Search Bar for Internet Explorer, email clients, and messenger clients by Mindspark Interactive Network)
 PE file structure
|
Show functions |
Import table
advapi32.dll
RegFlushKey, RegQueryValueExA, RegCloseKey, RegOpenKeyExA, RegCreateKeyExA, RegDeleteValueA, RegSetValueExA
kernel32.dll
LeaveCriticalSection, EnterCriticalSection, GetProcAddress, GetModuleHandleA, lstrcatA, lstrcpyA, GetFileAttributesA, lstrlenA, lstrcpynA, LoadLibraryA, lstrcmpiA, GetModuleFileNameA, FreeLibrary, GetVersionExA, HeapFree, HeapReAlloc, GetProcessHeap, HeapAlloc, DebugBreak, DeleteCriticalSection, GetDriveTypeA, InitializeCriticalSection
user32.dll
CallNextHookEx
f3hkstub.dll
My Web Search Bar for Internet Explorer and FireFox by Mindspark Interactive Network (Signed)
| Version: | 1, 0, 0, 1 |
| MD5: | 6cd218776835f45d4c6729183908b8e8 |
| SHA1: | c4a4143c9e772668c63c29263a8baedff29cf9cc |
| SHA256: | cf0560d532a20f0d7a694e37afb9253b2f943637b9a2fc8afd2918d66be599a4 |
Warning 9 antivirus scanners has detected malware.
What is f3hkstub.dll?
MyWebSearch IE Search Box Protector is part of My Web Search by the Mindspark Interactive Network, a browser toolbar, part of the Fun Web Products suite of potentially unwanted applications such as Smiley Central, Cursor Mania, Popular Screensavers and others. The toolbar provides access to search engine results and a 404 Error Redirector among other things to your browser.
About f3hkstub.dll (from Mindspark Interactive Network)
“MyWebSearch brings together the most comprehensive collection of search tools available to provide you with the information you need when you need it.”
Overview
F3HKSTUB.DLL is malware that is loaded as dynamic link library that runs in the context of a process. The file is digitally signed by Mindspark Interactive Network.
Details
| File name: | F3HKSTUB.DLL |
| Publisher: | MyWebSearch.com |
| Product name: | My Web Search Bar for Internet Explorer and FireFox |
| Description: | MyWebSearch IE Search Box Protector |
| Typical file path: | C:\Program Files\MyWebSearch\bar\1.bin\F3HKSTUB.DLL |
| File version: | 1, 0, 0, 1 |
| Product version: | 2, 3, 0, 0 |
| Size: | 29.53 KB (30,240 bytes) |
| Certificate |
| Issued to: | Mindspark Interactive Network |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| .NET CLR: | No |
More details
Malware detections
Based on 40+ industry antivirus scanners, 9 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| AhnLab V3 Internet Security |
2013.02.19.02 |
PUP/Win32.MyWebSearch |
| avast! |
6.0.1289.0 |
Win32:Mywebsearch-Q [PUP] |
| AVG |
2014.0.3629 |
AdInstaller.FunWeb |
| Clam AntiVirus |
0.97.3.0 |
Suspect.Adware.MWS |
| eSafe |
7.0.17.0 |
Win32.Trojan |
| ESET NOD32 |
7.8025 |
a variant of Win32/Toolbar.MyWebSearch.G |
| SUPERAntiSpyware |
5.6.0.1008 |
PUP.MyWebSearch |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.RCBH1AL |
| VIPRE Antivirus |
15628 |
MyWebSearch.J (v) (not malicious) |
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
75.00% |
|
| Windows 7 Ultimate |
25.00% |
|
Distribution by country
TN installs about 100.00% of My Web Search Bar for Internet Explorer and FireFox.
