m3SrchMn.exe
My Web Search Bar for Internet Explorer and FireFox by Mindspark Interactive Network (Signed)
Warning 42 antivirus scanners has detected malware in various versions of m3SrchMn.exe.
Overview
There are 4 versions of m3srchmn.exe in the wild, the latest version being 1, 0, 0, 12. m3srchmn.exe is run as a standard windows process with the logged in user's account privileges. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 31.18 KB. The file is a digitally signed and issued to Mindspark Interactive Network by VeriSign. During the process's lifecycle, the typical CPU resource utilization is about 0.0004% including both foreground and background operations, the average private memory consumption is about 530 KB with the maximum memory reaching around 1.33 MB.
What is m3srchmn.exe?
MyWebSearch SearchScope Monitor is part of My Web Search by the Mindspark Interactive Network, a browser toolbar, part of the Fun Web Products suite of potentially unwanted applications such as Smiley Central, Cursor Mania, Popular Screensavers and others. The toolbar provides access to search engine results and a 404 Error Redirector among other things to your browser.
About m3srchmn.exe (from Mindspark Interactive Network)
“MyWebSearch brings together the most comprehensive collection of search tools available to provide you with the information you need when you need it.”
Details |
File name: | m3srchmn.exe |
Publisher: | MyWebSearch.com |
Product name: | My Web Search Bar for Internet Explorer and FireFox |
Description: | MyWebSearch SearchScope Monitor |
Typical file path: | C:\Program Files\mywebsearch\bar\1.bin\m3srchmn.exe |
Certificate |
Issued to: | Mindspark Interactive Network |
Authority (CA): | VeriSign |
Expiration date: | Sunday, May 6, 2012 |
Behaviors
(Note, the behaviors below are for all versions of m3srchmn.exe, select a unique version for details.)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'My Web Search Bar Search Scope Monitor' → "C:\Program Files2\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h
Malware detections
Based on 40+ industry antivirus scanners, 42 of them detected the following malware.
Antivirus engine | Engine version | Detection | File version |
AhnLab V3 Internet Security |
2013.03.15 |
PUP/Win32.MyWebSearch |
1, 0, 0, 12 |
AhnLab V3 Internet Security |
2012.09.27 |
PUP/Win32.MyWebSearch |
1, 0, 0, 4 |
AhnLab V3 Internet Security |
2013.04.02 |
PUP/Win32.MyWebSearch |
1, 0, 0, 5 |
AhnLab V3 Internet Security |
2013.03.21 |
PUP/Win32.MyWebSearch |
1, 0, 0, 5 |
avast! |
6.0.1289.0 |
Win32:FunWeb-K [PUP] |
1, 0, 0, 12 |
avast! |
6.0.1289.0 |
Win32:PUP-gen [PUP] |
1, 0, 0, 4 |
avast! |
6.0.1289.0 |
Win32:FunWeb-K [PUP] |
1, 0, 0, 5 |
avast! |
6.0.1289.0 |
Win32:FunWeb-K [PUP] |
1, 0, 0, 5 |
AVG |
2014.0.3629 |
AdInstaller.FunWeb |
1, 0, 0, 12 |
AVG |
2014.0.3629 |
AdInstaller.FunWeb |
1, 0, 0, 5 |
AVG |
2014.0.3629 |
AdInstaller.FunWeb |
1, 0, 0, 5 |
Clam AntiVirus |
0.97.3.0 |
Suspect.Adware.MWS |
1, 0, 0, 12 |
Clam AntiVirus |
0.97.3.0 |
Suspect.Adware.MWS |
1, 0, 0, 4 |
Clam AntiVirus |
0.97.3.0 |
Suspect.Adware.MWS |
1, 0, 0, 5 |
Clam AntiVirus |
0.97.3.0 |
Suspect.Adware.MWS |
1, 0, 0, 5 |
Comodo Internet Security |
15576 |
Application.Win32.WebToolbar.MyWebSearch |
1, 0, 0, 12 |
Comodo Internet Security |
15788 |
Application.Win32.WebToolbar.MyWebSearch |
1, 0, 0, 5 |
Comodo Internet Security |
15643 |
Application.Win32.WebToolbar.MyWebSearch |
1, 0, 0, 5 |
eSafe |
7.0.17.0 |
Win32.MiscMywebsearc |
1, 0, 0, 12 |
ESET NOD32 |
7.8118 |
a variant of Win32/Toolbar.MyWebSearch.I |
1, 0, 0, 12 |
ESET NOD32 |
7.7520 |
a variant of Win32/Toolbar.MyWebSearch.I |
1, 0, 0, 4 |
ESET NOD32 |
7.8182 |
Win32/Toolbar.MyWebSearch.I |
1, 0, 0, 5 |
ESET NOD32 |
7.8142 |
Win32/Toolbar.MyWebSearch.I |
1, 0, 0, 5 |
F-Secure |
9.0.16440.0 |
Adware:W32/MyWebSearch.M |
1, 0, 0, 4 |
Kaspersky |
9.0.0.837 |
not-a-virus:WebToolbar.Win32.MyWebSearch.gd |
1, 0, 0, 5 |
Kaspersky |
9.0.0.837 |
not-a-virus:WebToolbar.Win32.MyWebSearch.gd |
1, 0, 0, 5 |
Kingsoft |
2013.1.8.219 |
Win32.Troj.MyWebSearch.gd.(kcloud) |
1, 0, 0, 5 |
Kingsoft |
2013.1.8.219 |
Win32.Troj.MyWebSearch.gd.(kcloud) |
1, 0, 0, 5 |
NANO AntiVirus |
0.22.8.51404 |
Riskware.Win32.MyWebSearch.qvbsm |
1, 0, 0, 5 |
NANO AntiVirus |
0.22.8.51404 |
Riskware.Win32.MyWebSearch.dfwts |
1, 0, 0, 5 |
Norman |
6.08.06 |
W32/Suspicious_Gen2.HORHE |
1, 0, 0, 4 |
Norman |
7.00.22 |
Suspicious_Gen2.JLQEN |
1, 0, 0, 5 |
Norman |
7.00.22 |
Suspicious_Gen2.KYAMU |
1, 0, 0, 5 |
SUPERAntiSpyware |
5.6.0.1008 |
PUP.MyWebSearch |
1, 0, 0, 12 |
SUPERAntiSpyware |
5.50.0.1016 |
PUP.MyWebSearch |
1, 0, 0, 4 |
SUPERAntiSpyware |
5.6.0.1008 |
PUP.MyWebSearch |
1, 0, 0, 5 |
SUPERAntiSpyware |
5.6.0.1008 |
PUP.MyWebSearch |
1, 0, 0, 5 |
Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.RCBH1CB |
1, 0, 0, 5 |
VIPRE Antivirus |
16054 |
MyWebSearch.J (v) (not malicious) |
1, 0, 0, 12 |
VIPRE Antivirus |
13246 |
MyWebSearch Toolbar (not malicious) |
1, 0, 0, 4 |
VIPRE Antivirus |
16484 |
MyWebSearch.J (v) (not malicious) |
1, 0, 0, 5 |
VIPRE Antivirus |
16186 |
MyWebSearch.J (v) (not malicious) |
1, 0, 0, 5 |
All file variations of m3srchmn.exe
Distribution by Windows OS
OS version | distribution |
Microsoft Windows XP |
48.15% |
|
Windows 7 Ultimate |
22.22% |
|
Windows 7 Ultimate N |
14.81% |
|
Windows 7 Home Premium |
7.41% |
|
Windows 7 Home Basic |
3.70% |
|
Windows 8 Pro |
3.70% |
|
Distribution by country
United States installs about 46.67% of My Web Search Bar for Internet Explorer and FireFox.
Distribution by PC manufacturer
PC Manufacturer | distribution |
Dell |
40.00% |
|
GIGABYTE |
20.00% |
|
Acer |
20.00% |
|
Hewlett-Packard |
20.00% |
|