Should I block it?

98%

Yes, 98% block recommendation.

Possible reasons:

Multiple malware detections

Performance resource utilization

Additional versions

1, 0, 0, 12	85.71%
1, 0, 0, 5	3.57%
1, 0, 0, 5	7.14%
1, 0, 0, 4	3.57%

Relationships

F3REGHK.DLL (My Web Search Bar for Internet Explorer and FireFox by Mindspark Interactive Network)
F3HKSTUB.DLL (My Web Search Bar for Internet Explorer and FireFox by Mindspark Interactive Network)
mwsoeplg.dll (My Web Search Bar, Fun Buddy Icons, and Smiley Central by MyWebSearch.com)
m3outlcn.dll (My Web Search Bar by MyWebSearch.com)
uninstall fun web products.dll (My Web Search Bar for Internet Explorer, FireFox, email clients, and messenger clients by Mindspark Interactive Network)
M3IEOVR.DLL (My Web Search Bar by Mindspark Interactive Network)
M3DLGHK.DLL (My Web Search Bar by Mindspark Interactive Network)
M3AUXSTB.DLL (My Web Search Bar by Mindspark Interactive Network)
MWSOESTB.DLL (My Web Search Bar for Internet Explorer, email clients, and messenger clients by Mindspark Interactive Network)
mwsbar.dll (My Web Search Bar for Internet Explorer, FireFox, email clients, and messenger clients by Mindspark Interactive Network)
m3highin.exe (My Web Search Bar by Mindspark Interactive Network)
MWSSVC.EXE (My Web Search Bar by Mindspark Interactive Network)
MWSOEMON.EXE (My Web Search Bar for Internet Explorer, email clients, and messenger clients by Mindspark Interactive Network)

PE file structure

Show functions

Import table

advapi32.dll

RegQueryValueExA, RegOpenKeyExA, RegFlushKey, RegSetValueExA, RegCreateKeyExA, RegDeleteValueA, RegDeleteKeyA, RegQueryInfoKeyA, RegEnumKeyExA, RegNotifyChangeKeyValue, RegCloseKey

kernel32.dll

LeaveCriticalSection, EnterCriticalSection, LocalFree, GetProcAddress, lstrcatA, lstrcpyA, lstrcpynA, GetFileAttributesA, GetDriveTypeA, CloseHandle, CreateProcessA, FreeLibrary, ResetEvent, LoadLibraryA, lstrlenA, WaitForSingleObject, GetLastError, CreateEventA, SetLastError, GetSystemDirectoryA, CompareFileTime, GetSystemTimeAsFileTime, GetTickCount, SystemTimeToFileTime, GetSystemTime, lstrcmpiA, Sleep, GetVersionExA, HeapFree, HeapReAlloc, GetProcessHeap, HeapAlloc, DebugBreak, DeleteCriticalSection, InitializeCriticalSection, GetModuleHandleA, GetCommandLineA, ExitProcess, GetModuleFileNameA, GetStartupInfoA

user32.dll

SetWindowsHookExA, MsgWaitForMultipleObjects, PeekMessageA, TranslateMessage, DispatchMessageA, UnhookWindowsHookEx, wsprintfA, CharNextA

version.dll

GetFileVersionInfoA, GetFileVersionInfoSizeA, VerQueryValueA

m3SrchMn.exe

My Web Search Bar for Internet Explorer and FireFox by Mindspark Interactive Network (Signed)

Remove m3SrchMn.exe

Version:	1, 0, 0, 5
MD5:	65fd06261fae39a9e63224d95e8b4307
SHA1:	3d4991d4b43f4ebe3d483d0b499ab6146f25e26d
SHA256:	14d6530501ae7cf794875513a529ccefe262ed166a65a346b15124ce5782c2d0

Warning 12 antivirus scanners has detected malware.

What is m3SrchMn.exe?

MyWebSearch SearchScope Monitor is part of My Web Search by the Mindspark Interactive Network, a browser toolbar, part of the Fun Web Products suite of potentially unwanted applications such as Smiley Central, Cursor Mania, Popular Screensavers and others. The toolbar provides access to search engine results and a 404 Error Redirector among other things to your browser.

About m3SrchMn.exe (from Mindspark Interactive Network)

“MyWebSearch brings together the most comprehensive collection of search tools available to provide you with the information you need when you need it.”

Overview

m3srchmn.exe is malware that executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). The file is digitally signed by Mindspark Interactive Network which was issued by the VeriSign certificate authority (CA).

Details

File name:	m3srchmn.exe
Publisher:	MyWebSearch.com
Product name:	My Web Search Bar for Internet Explorer and FireFox
Description:	MyWebSearch SearchScope Monitor
Typical file path:	C:\Program Files\mywebsearch\bar\1.bin\m3srchmn.exe
File version:	1, 0, 0, 5
Product version:	2, 3, 0, 0
Size:	33.53 KB (34,336 bytes)
Certificate
Issued to:	Mindspark Interactive Network
Authority (CA):	VeriSign
Expiration date:	Sunday, May 6, 2012
Digital DNA
File packed:	No
.NET CLR:	No

More details

Behaviors

Startup files (all users) run

Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'

'My Web Search Bar Search Scope Monitor' → "C:\Program Files2\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h

Malware detections

Based on 40+ industry antivirus scanners, 12 of them detected the following malware.

Antivirus engine	Engine version	Detection
AhnLab V3 Internet Security	2013.03.21	PUP/Win32.MyWebSearch
avast!	6.0.1289.0	Win32:FunWeb-K [PUP]
AVG	2014.0.3629	AdInstaller.FunWeb
Clam AntiVirus	0.97.3.0	Suspect.Adware.MWS
Comodo Internet Security	15643	Application.Win32.WebToolbar.MyWebSearch
ESET NOD32	7.8142	Win32/Toolbar.MyWebSearch.I
Kaspersky	9.0.0.837	not-a-virus:WebToolbar.Win32.MyWebSearch.gd
Kingsoft	2013.1.8.219	Win32.Troj.MyWebSearch.gd.(kcloud)
NANO AntiVirus	0.22.8.51404	Riskware.Win32.MyWebSearch.dfwts
Norman	7.00.22	Suspicious_Gen2.KYAMU
SUPERAntiSpyware	5.6.0.1008	PUP.MyWebSearch
VIPRE Antivirus	16186	MyWebSearch.J (v) (not malicious)

Distribution by Windows OS

OS version	distribution
Microsoft Windows XP	48.15%
Windows 7 Ultimate	22.22%
Windows 7 Ultimate N	14.81%
Windows 7 Home Premium	7.41%
Windows 7 Home Basic	3.70%
Windows 8 Pro	3.70%

Distribution by country

United States installs about 46.67% of My Web Search Bar for Internet Explorer and FireFox.

Distribution by PC manufacturer

PC Manufacturer	distribution
Dell	40.00%
GIGABYTE	20.00%
Acer	20.00%
Hewlett-Packard	20.00%

Remove Adware and Spyware Programs, FREE Download!