MySearch
MySearch Description
MySearch toolbar is a commercial Internet Explorer add-on. This toolbar allows to search the web using popular Internet search engines. However, it also displays advertising links. MySearch toolbar doesn’t distribute itself and must be manually installed. Numerous ad-supported application can add it to the system. MySearch runs every time the user launches Internet Explorer.
Type: Browser Hijackers
How Can You Detect MySearch?
MySearch has typically the following processes in memory:
- soproc.exe
- s4popswt.dll
- s4bar.dll
- pagerevisor.dll
- s4sept.exe
- adinstalle.exe
- mysrchas.dll
- s4ezsetp.dll
- aj[1].exe
- s42ns.exe
- s4plugin.dll
- npmysrch.dll
MySearch creates the following registry entries:
- HKEY_CLASSES_ROOT\mysearch.popswatterbarbutton.1\clsid
- HKEY_CLASSES_ROOT\mysearch.popswattersettingscontrol
- HKEY_CLASSES_ROOT\mysearchtoolbar.netscapeshutdown.1
- HKEY_CLASSES_ROOT\mysearchtoolbar.netscapestartup\curver
- HKEY_CLASSES_ROOT\mysearchtoolbar.settingsplugin\clsid
- 85204a50-6997-4543-9ff8-d9bbcb9108f5\1.0
- 014da6c9-189f-421a-88cd-07cfe51cff10
- 58f0b492-a42e-435a-bcbf-c6b2608077ba
- HKEY_CLASSES_ROOT\mysearch.popswatterbarbutton.1
- HKEY_CLASSES_ROOT\mysearch.popswatterbarbutton\curver
- HKEY_CLASSES_ROOT\mysearchtoolbar.netscapeshutdown
- HKEY_CLASSES_ROOT\mysearchtoolbar.netscapestartup.1
- HKEY_CLASSES_ROOT\mysearchtoolbar.settingsplugin.1
- 85204a50-6997-4543-9ff8-d9bbcb9108f5
- HKEY_CURRENT_USER\software\microsoft\internetexplorer\newwindows\allowwww.mysearch.com
- 014da6c1-189f-421a-88cd-07cfe51cff10
- HKEY_CLASSES_ROOT\mysearch.popswatterbarbutton
- HKEY_CLASSES_ROOT\mysearch.popswatterbarbutton\clsid
- HKEY_CLASSES_ROOT\mysearch.popswattersettingscontrol.1
- HKEY_CLASSES_ROOT\mysearchtoolbar.netscapestartup
- HKEY_CLASSES_ROOT\mysearchtoolbar.settingsplugin
- 014da6c0-189f-421a-88cd-07cfe51cff10
- HKEY_CURRENT_USER\software\microsoft\internetexplorer\menuext\webrebates.
- 04079856-5845-4dea-848c-3ecd647aa554
- HKEY_LOCAL_MACHINE\software\microsoft\codestoredatabase\distribution
Important Article Disclaimer
This entry was posted on 02/10/08 and is filed under Browser Hijackers.
You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

English 
Deutsch
Español
Français
Portuguese
MySearch 











