mwsoemon.exe
My Web Search Bar for Internet Explorer, email clients, and messenger clients by Mindspark Interactive Network (Signed)
| Version: | 1,2,2,7 |
| MD5: | 83d7eeb3e14f14c489d44a4d32d7fb44 |
| SHA1: | e8d58e81cc8a12ed5a3bf5e82b2b0bb07193c667 |
| SHA256: | 3382edcd0b5ef3e092e7d95f91567bac3f683c4fb3709f2d5f24bc1cea33b94f |
Warning 12 antivirus scanners has detected malware.
What is mwsoemon.exe?
My Web Search by the Mindspark Interactive Network is a browser toolbar, part of the Fun Web Products suite of potentially unwanted applications such as Smiley Central, Cursor Mania, Popular Screensavers and others. The toolbar provides access to search engine results and a 404 Error Redirector among other things to your browser. The My Web Search toolbar could slow down your PC and uses cookies to track your web surfing usage and habits.
About mwsoemon.exe (from Mindspark Interactive Network)
“MyWebSearch brings together the most comprehensive collection of search tools available to provide you with the information you need when you need it.”
Overview
MWSOEMON.EXE is malware that executes as a process with the local user's privileges usually within the context of Windows Explorer. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). The file is digitally signed by Mindspark Interactive Network.
Details
| File name: | MWSOEMON.EXE |
| Publisher: | MyWebSearch.com |
| Product name: | My Web Search Bar for Internet Explorer, email clients, and messenger clients |
| Description: | My Web Search Plugin Loader |
| Typical file path: | C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE |
| File version: | 1,2,2,7 |
| Product version: | 2,3,0,0 |
| Size: | 37.51 KB (38,408 bytes) |
| Certificate |
| Issued to: | Mindspark Interactive Network |
| Digital DNA |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'MyWebSearch Email Plugin' → C:\Program Files2\MYWEBS~1\bar\1.bin\mwsoemon.exe
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'MyWebSearch Email Plugin' → C:\Program Files1\MYWEBS~1\bar\1.bin\mwsoemon.exe
Malware detections
Based on 40+ industry antivirus scanners, 12 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| avast! |
6.0.1289.0 |
Win32:Mywebsearch-R [PUP] |
| AVG |
2014.0.3629 |
AdInstaller.FunWeb |
| Clam AntiVirus |
0.97.3.0 |
Adware.Mywebsearch-2 |
| Comodo Internet Security |
15643 |
Application.Win32.MyWebSearch.~A |
| eSafe |
7.0.17.0 |
Win32.MiscMywebsearc |
| ESET NOD32 |
7.8142 |
Win32/Toolbar.MyWebSearch |
| Kingsoft |
2013.1.8.219 |
Win32.Troj.Generic.(kcloud) |
| Norman |
7.00.22 |
Suspicious_Gen2.IVCJC |
| nProtect |
2013-03-21.03 |
Trojan/W32.Agent.38408 |
| SUPERAntiSpyware |
5.6.0.1008 |
PUP.MyWebSearch |
| Vba32 AntiVirus |
3.12.20.2 |
Adware.MyWebSearch |
| VIPRE Antivirus |
16186 |
MyWebSearch.J (v) (not malicious) |
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00040695% | |
| Kernel CPU: | 0.00035049% | |
| User CPU: | 0.00005646% | |
| Kernel CPU time: | 187,219 ms/min | |
| CPU cycles: | 90,156/sec | |
| Memory |
| Private memory: | 809.6 KB | |
| Private (maximum): | 1.12 MB | |
| Private (minimum): | 521.2 KB | |
| Non-paged memory: | 809.6 KB | |
| Virtual memory: | 39.17 MB | |
| Virtual memory (peak): | 43.76 MB | |
| Working set: | 594 KB | |
| Working set (peak): | 3 MB | |
| Page faults: | 2,944/min | |
| I/O |
| I/O read transfer: | 8 Bytes/sec | |
| I/O read operations: | 1/sec | |
| I/O other transfer: | 79 Bytes/sec | |
| I/O other operations: | 6/sec | |
| Resource allocations |
| Threads: | 2 | |
| Handles: | 69 | |
| GUI GDI count: | 9 | |
| GUI GDI peak: | 11 | |
| GUI USER count: | 3 | |
| GUI USER peak: | 4 | |
Process properties
| Integrety level: | High |
| Platform: | 32-bit |
| Command lines: |
- "C:\progra~1\mywebs~1\bar\1.bin\mwsoemon.exe"
- "C:\Program Files\mywebsearch\bar\2.bin\mwsoemon.exe"
- "C:\progra~2\mywebs~1\bar\1.bin\mwsoemon.exe"
|
| Owner: | User |
| Parent process: | Explorer.EXE (Windows Explorer by Microsoft) |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate N |
45.71% |
|
| Microsoft Windows XP |
42.86% |
|
| Windows 7 Ultimate |
11.43% |
|
Distribution by country
United States installs about 57.14% of My Web Search Bar for Internet Explorer, email clients, and messenger clients.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| GIGABYTE |
100.00% |
|
