mwsoemon.exe
My Web Search Bar for Internet Explorer, email clients, and messenger clients by Mindspark Interactive Network (Signed)
Warning 24 antivirus scanners has detected malware in various versions of mwsoemon.exe.
Overview
MWSOEMON.EXE has 2 known versions, the most recent one is 1,2,2,7. MWSOEMON.EXE is run as a standard windows process with the logged in user's account privileges. By adding a startup entry to the run registry key, the file will be executed when the user logs into Windows. The average file size is about 34.79 KB. It is an authenticode code-signed executable issued to Mindspark Interactive Network. During the process's lifecycle, the typical CPU resource utilization is about 0.0004% including both foreground and background operations, the average private memory consumption is about 792 KB with the maximum memory reaching around 1.13 MB and typical read I/O operations are around 8 Bytes per minute.
What is MWSOEMON.EXE?
My Web Search by the Mindspark Interactive Network is a browser toolbar, part of the Fun Web Products suite of potentially unwanted applications such as Smiley Central, Cursor Mania, Popular Screensavers and others. The toolbar provides access to search engine results and a 404 Error Redirector among other things to your browser. The My Web Search toolbar could slow down your PC and uses cookies to track your web surfing usage and habits.
About MWSOEMON.EXE (from Mindspark Interactive Network)
“MyWebSearch brings together the most comprehensive collection of search tools available to provide you with the information you need when you need it.”
 Details
|
| File name: | MWSOEMON.EXE |
| Publisher: | MyWebSearch.com |
| Product name: | My Web Search Bar for Internet Explorer, email clients, and messenger clients |
| Description: | My Web Search Plugin Loader |
| Typical file path: | C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE |
| Certificate |
| Issued to: | Mindspark Interactive Network |
Behaviors
(Note, the behaviors below are for all versions of MWSOEMON.EXE, select a unique version for details.)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'MyWebSearch Email Plugin' → C:\Program Files2\MYWEBS~1\bar\1.bin\mwsoemon.exe
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'MyWebSearch Email Plugin' → C:\Program Files1\MYWEBS~1\bar\1.bin\mwsoemon.exe
Malware detections
Based on 40+ industry antivirus scanners, 24 of them detected the following malware.
| Antivirus engine | Engine version | Detection | File version |
| avast! |
6.0.1289.0 |
Win32:Mywebsearch-R [PUP] |
1,2,2,7 |
| avast! |
6.0.1289.0 |
Win32:Mywebsearch-R [PUP] |
1,2,2,7 |
| AVG |
2014.0.3629 |
AdInstaller.FunWeb |
1,2,2,7 |
| Clam AntiVirus |
0.97.3.0 |
Adware.Mywebsearch-2 |
1,2,2,7 |
| Clam AntiVirus |
0.97.3.0 |
Adware.Mywebsearch-2 |
1,2,2,7 |
| Comodo Internet Security |
15643 |
Application.Win32.MyWebSearch.~A |
1,2,2,7 |
| Comodo Internet Security |
15462 |
Application.Win32.AdWare.MyWebSearch.~S |
1,2,2,7 |
| eSafe |
7.0.17.0 |
Win32.MiscMywebsearc |
1,2,2,7 |
| ESET NOD32 |
7.8142 |
Win32/Toolbar.MyWebSearch |
1,2,2,7 |
| ESET NOD32 |
7.8079 |
Win32/Toolbar.MyWebSearch |
1,2,2,7 |
| F-Secure |
11.0.19020.35 |
Adware:W32/MyWebSearch |
1,2,2,7 |
| Kingsoft |
2013.1.8.219 |
Win32.Troj.Generic.(kcloud) |
1,2,2,7 |
| Kingsoft |
2013.1.8.219 |
Win32.Troj.Generic.(kcloud) |
1,2,2,7 |
| Norman |
7.00.22 |
Suspicious_Gen2.IVCJC |
1,2,2,7 |
| nProtect |
2013-03-21.03 |
Trojan/W32.Agent.38408 |
1,2,2,7 |
| nProtect |
2013-03-05.01 |
Trojan/W32.Agent.32849 |
1,2,2,7 |
| Rising Antivirus |
24.52.00.04 |
Trojan.Win32.Generic.12A31F10 |
1,2,2,7 |
| SUPERAntiSpyware |
5.6.0.1008 |
PUP.MyWebSearch |
1,2,2,7 |
| SUPERAntiSpyware |
5.6.0.1008 |
PUP.MyWebSearch |
1,2,2,7 |
| The Hacker |
None |
Adware/MyWebSearch |
1,2,2,7 |
| Vba32 AntiVirus |
3.12.20.2 |
Adware.MyWebSearch |
1,2,2,7 |
| Vba32 AntiVirus |
3.12.20.2 |
Adware.MyWebSearch |
1,2,2,7 |
| VIPRE Antivirus |
16186 |
MyWebSearch.J (v) (not malicious) |
1,2,2,7 |
| VIPRE Antivirus |
15866 |
MyWebSearch Toolbar (not malicious) |
1,2,2,7 |
All file variations of MWSOEMON.EXE
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate N |
45.71% |
|
| Microsoft Windows XP |
42.86% |
|
| Windows 7 Ultimate |
11.43% |
|
Distribution by country
United States installs about 57.14% of My Web Search Bar for Internet Explorer, email clients, and messenger clients.
