Should I block it?

98%
Yes, 98% block recommendation.
Possible reasons:
Multiple malware detections
Performance resource utilization

VersionsAdditional versions

1,2,2,7 97.22%
1,2,2,7 2.78%
(Note, Mindspark Interactive Network publishes each variation of this file with the same version, but the hashes are unique.)

Relationships

PE structurePE file structure
Show functions
Import table
advapi32.dll
RegOpenKeyExA, RegQueryValueExA, RegFlushKey, RegSetValueExA, RegCreateKeyExA, RegDeleteValueA, RegCloseKey
kernel32.dll
ReleaseMutex, InitializeCriticalSection, EnterCriticalSection, LeaveCriticalSection, DeleteCriticalSection, CreateEventA, lstrcmpA, CreateFileA, lstrcpyA, CreateDirectoryA, lstrcatA, WaitForMultipleObjects, GetTickCount, GetSystemTimeAsFileTime, FlushFileBuffers, WriteFile, GetStartupInfoA, ExitProcess, GetCommandLineA, GetModuleHandleA, DebugBreak, HeapAlloc, GetProcessHeap, HeapReAlloc, CreateMutexA, MultiByteToWideChar, WideCharToMultiByte, lstrlenW, CreateThread, Sleep, FreeLibrary, GetProcAddress, LoadLibraryA, SetThreadPriority, GetCurrentThread, GetFileAttributesA, GetCurrentProcessId, OpenProcess, LocalFree, GetVersionExA, GetDriveTypeA, lstrcpynA, CreateFileMappingA, SetLastError, DuplicateHandle, GetCurrentProcess, OpenFileMappingA, MapViewOfFile, UnmapViewOfFile, SetEvent, WaitForSingleObject, ResetEvent, GetModuleFileNameA, lstrlenA, GetLastError, HeapFree, CloseHandle
ole32.dll
StringFromGUID2
shell32.dll
SHGetPathFromIDListA, SHGetMalloc, SHGetSpecialFolderLocation
user32.dll
MsgWaitForMultipleObjects, GetMessageA, TranslateMessage, GetKeyboardType, IsWindow, DestroyWindow, UnhookWindowsHookEx, CharNextA, wsprintfA, SetWindowsHookExA, DispatchMessageA, CreateDialogIndirectParamA
version.dll
GetFileVersionInfoSizeA, VerQueryValueA, GetFileVersionInfoA

mwsoemon.exe

My Web Search Bar for Internet Explorer, email clients, and messenger clients by Mindspark Interactive Network (Signed)

Remove mwsoemon.exe
Version:   1,2,2,7
MD5:   a8e2d2429e86ee910cff9594f8adbec8
SHA1:   cff5b1ff43f10a37ef14f3e970e74bf0108f4ad7
SHA256:   882b0f2c2c66e6e9f06bf7461ce0c3a17bba0cad0730d6ed110521d8411b33cf
Warning 12 antivirus scanners has detected malware.

What is mwsoemon.exe?

My Web Search by the Mindspark Interactive Network is a browser toolbar, part of the Fun Web Products suite of potentially unwanted applications such as Smiley Central, Cursor Mania, Popular Screensavers and others. The toolbar provides access to search engine results and a 404 Error Redirector among other things to your browser. The My Web Search toolbar could slow down your PC and uses cookies to track your web surfing usage and habits.

About mwsoemon.exe (from Mindspark Interactive Network)

“MyWebSearch brings together the most comprehensive collection of search tools available to provide you with the information you need when you need it.”

Overview

MWSOEMON.EXE is malware that executes as a process with the local user's privileges. It is set to be run when the PC boots and the user logs into Windows (added to the Run registry key for the current user). The file is digitally signed by Mindspark Interactive Network.

DetailsDetails

File name:MWSOEMON.EXE
Publisher:MyWebSearch.com
Product name:My Web Search Bar for Internet Explorer, email clients, and messenger clients
Description:My Web Search Plugin Loader
Typical file path:C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
File version:1,2,2,7
Product version:2,3,0,0
Size:32.08 KB (32,849 bytes)
Certificate
Issued to:Mindspark Interactive Network
Digital DNA
File packed:No
.NET CLR:No
More details

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'MyWebSearch Email Plugin' → C:\Program Files2\MYWEBS~1\bar\1.bin\mwsoemon.exe
Startup files (user) run
Runs under the registry key 'HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'MyWebSearch Email Plugin' → C:\Program Files1\MYWEBS~1\bar\1.bin\mwsoemon.exe

MalwareMalware detections

Based on 40+ industry antivirus scanners, 12 of them detected the following malware.
Antivirus engineEngine versionDetection
avast! 6.0.1289.0 Win32:Mywebsearch-R [PUP]
Clam AntiVirus 0.97.3.0 Adware.Mywebsearch-2
Comodo Internet Security 15462 Application.Win32.AdWare.MyWebSearch.~S
ESET NOD32 7.8079 Win32/Toolbar.MyWebSearch
F-Secure 11.0.19020.35 Adware:W32/MyWebSearch
Kingsoft 2013.1.8.219 Win32.Troj.Generic.(kcloud)
nProtect 2013-03-05.01 Trojan/W32.Agent.32849
Rising Antivirus 24.52.00.04 Trojan.Win32.Generic.12A31F10
SUPERAntiSpyware 5.6.0.1008 PUP.MyWebSearch
The Hacker None Adware/MyWebSearch
Vba32 AntiVirus 3.12.20.2 Adware.MyWebSearch
VIPRE Antivirus 15866 MyWebSearch Toolbar (not malicious)

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00003811%
0.028634%
Kernel CPU:0.00002269%
0.013761%
User CPU:0.00001542%
0.014873%
Kernel CPU time:391 ms/min
100,923,805ms/min
Memory
Private memory:616 KB
21.59 MB
Private (maximum):1.24 MB
Private (minimum):896 KB
Non-paged memory:616 KB
21.59 MB
Virtual memory:25.66 MB
140.96 MB
Virtual memory (peak):30.93 MB
169.69 MB
Working set:928 KB
18.61 MB
Working set (peak):2.34 MB
37.95 MB
Page faults:675/min
2,039/min
I/O
I/O other transfer:0 Bytes/sec
448.09 KB/min
I/O other operations:1/sec
1,671/min
Resource allocations
Threads:1
12
Handles:34
600
GUI GDI count:11
103
GUI USER count:4
49

BehaviorsProcess properties

Integrety level:Undefined
Platform:32-bit
Command line:"C:\progra~1\mywebs~1\bar\2.bin\mwsoemon.exe"
Owner:User
Parent process:Explorer.EXE (Windows Explorer by Microsoft)

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Windows 7 Ultimate N 45.71%
Microsoft Windows XP 42.86%
Windows 7 Ultimate 11.43%

Distribution by countryDistribution by country

United States installs about 57.14% of My Web Search Bar for Internet Explorer, email clients, and messenger clients.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
GIGABYTE 100.00%
Back to top
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE