MyStartSearch.com

Threat Scorecard

Ranking: 558
Threat Level: 50 % (Medium)
Infected Computers: 131,697
First Seen: September 26, 2014
Last Seen: February 15, 2024
OS(es) Affected: Windows

MyStartSearch.com is associated with Web browser hijacker that is associated with the MyStartSearch.com search engine. However, MyStartSearch.com only is a search engine in its name. This is because MyStartSearch.com is not designed to return legitimate search results or allow computer users to find online content. Rather, MyStartSearch.com may display large numbers of advertisements and sponsored links in response to any query made by the computer user. The MyStartSearch.com search engine is linked to the MyStartSearch.com Web browser toolbar, a Web browser extension that is known to cause numerous problems on affected computers. Malware researchers have noted that MyStartSearch.com may affect other, legitimate Web browser add-ons and cause the affected Web browsers to display pop-up windows and slow down considerably. However, the main symptom linked to MyStartSearch.com is the presence of Web browser redirects to the MyStartSearch.com search engine. Because MyStartSearch.com essentially takes over the affected Web browser, PC security researchers classify MyStartSearch.com as a browser hijacker.

MyStartSearch.com and Similar Potentially Unwanted Programs

Adware, browser hijackers and a variety of other low-level threats are known as Potentially Unwanted Programs. Although not considered threatening, add-ons like MyStartSearch.com may present many symptoms as known threats. PC security researchers have also noted that MyStartSearch.com and similar PUPs may be linked to threats that may install these PUPs in order to monetize their attacks. PC security experts suggest computer users to remove MyStartSearch.com completely from affected computers. PUPs may be bundled with other software. In many cases, MyStartSearch.com may be bundled with free software acquired from dubious online sources. However, it is also common for MyStartSearch.com to be bundled with legitimate software that may be included in a third party installer. Malware researchers advise extra care when installing new software and refusal of any included software set to be installed by default.

Common Issues Associated with MyStartSearch.com

Since the main purpose of MyStartSearch.com is to force computer users visit MyStartSearch.com repeatedly, the main symptom linked to MyStartSearch.com is the presence of irritating browser redirects, both to MyStartSearch.com and to other websites. PC security researchers have also noted that MyStartSearch.com may cause affected Web browsers to display this low-quality search engine in pop-up windows or make links lead to MyStartSearch.com instead of to their real destination. A common issue related to MyStartSearch.com is the fact that this Web browser toolbar may make changes to affected Web browsers automatically. This change may include changing the affected Web browser's default search engine and homepage to MyStartSearch.com, ensuring that computer users are exposed to MyStartSearch.com as soon as the affected Web browser starts up.

Removing MyStartSearch.com from an Affected Machine

Malware researchers advise that computer users use a reliable security program capable of removing PUPs. Many security programs cannot detect or remove PUPs since they are designed for more sophisticated threats such as Trojans, worms and viruses. This is what makes PUPs a well used tool among marketers and threat creators, since the fact that they are not as destructive as traditional threats makes it more likely that they will remain on a computer and carry out their attack. Once the MyStartSearch.com toolbar has been removed, it may be mandatory to revoke any unwanted modifications made to the affected Web browser's settings (such as restoring the default search engine and homepage). Once MyStartSearch.com has been removed, PC security analysts recommend performing a thorough scan of the affected computer to ensure that the MyStartSearch.com toolbar has not led to any other infections or PUPs entering on the affected PC.

SpyHunter Detects & Remove MyStartSearch.com

File System Details

MyStartSearch.com may create the following file(s):
# File Name MD5 Detections
1. wnf_mystartsearch.exe 453e479265ea6a9cd579b67ac4c66ee0 6
2. int_mystartsearch.exe 0c27ef35a6d074ab97f7b28491405be7 5
3. 4727_cor_mystartsearch.exe 125a9011cf26af5c2d0ad0d46d3a6f80 3
4. cvs_mystartsearch.exe bb901e792655bf11cc866974ee0b6564 3
5. wnf_mystartsearch.exe 7eaf6477d7f32ef0a99e0457c8aba4d9 3
6. con_mystartsearch.exe 65d28b730f1b3c654812eb6f78b807d5 2
7. llys_mystartsearch.exe 499584981b99168b476b9e234f4cdab9 2
8. 4727_cor_mystartsearch.exe e37fe5195e0e36bd350cfba42070aeb4 2
9. wnf_mystartsearch.exe 8c41ecbb38d749ba02c09e1cd623e299 2
10. cvs_mystartsearch.exe f27e31857990deef523808c5cf5737c3 1
11. 4597_cor_mystartsearch.exe aba3722139ce2fcf4c16f6bac4d4e56d 1
12. wnf_mystartsearch.exe dd16fdd9c6875ba582d468402079e93c 1
13. 4594_cornl_mystartsearch.exe 3dde5a4489a2a37f2e4c4d1228c5217f 1
14. 4726_cornl_mystartsearch.exe 82dee8bd41b7e75c1abb15c9a738c68b 1
15. cvs_mystartsearch.exe 85431840c5b1b89849c0bf419880bd74 1
16. 4726_cornl_mystartsearch.exe 521807075ae3c21d98928aa810d99379 1
17. wnf_mystartsearch.exe 67164a4f978a81233d3ea3c655f006f5 1
18. 4726_cornl_mystartsearch.exe 1118fecf872f72050c5e1d0747b2b4e1 1
19. llys_mystartsearch.exe 63d40e12a7b8de67caf6fc9eefccb575 1
20. 4727_cor_mystartsearch.exe 8d0a9b81dd7244b6dfa010e2a3fb66af 1
21. llys_mystartsearch.exe b2646e1142bafbe3432dc3029267a82f 1
22. 4893_cornl_mystartsearch.exe 409e95078d4a28ff41af6cba5f751532 1
23. 4973_cornl_mystartsearch.exe 17f265cbf7834ea9ab87554745a5ab3b 1
24. wnf_mystartsearch.exe 36655a189f7fc929b2916169870b089c 1
25. cvs_mystartsearch.exe 24250e6a4bf9778741037436932997e2 1
26. llys_mystartsearch.exe 204d0c4f1804b97e3b0aea65a399847d 1
27. %UserProfile%\mystartsearch\
28. %UserProfile%\mystartsearch\478.json
29. %UserProfile%\mystartsearch\MessageBox.xml
30. %UserProfile%\mystartsearch\images\
31. %UserProfile%\mystartsearch\images\checkbox_select.png
32. %UserProfile%\mystartsearch\images\checked.png
33. %UserProfile%\mystartsearch\images\close.png
34. %UserProfile%\mystartsearch\images\bg1.png
35. %UserProfile%\mystartsearch\images\bg.png
36. %UserProfile%\mystartsearch\images\bk_shadow.png
37. %UserProfile%\mystartsearch\images\button.png
38. %UserProfile%\mystartsearch\images\button1.png
39. %UserProfile%\mystartsearch\images\checkbox.png
40. %UserProfile%\mystartsearch\images\code\
41. %UserProfile%\mystartsearch\images\code\code1.jpg
42. %UserProfile%\mystartsearch\images\code\code2.jpg
43. %UserProfile%\mystartsearch\images\code\code3.jpg
44. %UserProfile%\mystartsearch\images\code\code4.jpg
45. %UserProfile%\mystartsearch\images\code\code5.jpg
46. %UserProfile%\mystartsearch\images\code\code6.jpg
47. %UserProfile%\mystartsearch\images\code\Thumbs.db
48. %UserProfile%\mystartsearch\images\Thumbs.db
49. %UserProfile%\mystartsearch\images\min.png
50. %UserProfile%\mystartsearch\images\loading_bg.png
51. %UserProfile%\mystartsearch\images\loading_light.png
52. %UserProfile%\mystartsearch\images\unchecked.png
53. %UserProfile%\mystartsearch\images\scrollbar.bmp
54. %UserProfile%\mystartsearch
55. %UserProfile%\mystartsearch\images
56. %UserProfile%\mystartsearch\images\code
More files

Registry Details

MyStartSearch.com may create the following registry entry or registry entries:
File name without path
http_www.mystartsearch.com_0.localstorage
http_www.mystartsearch.com_0.localstorage-journal
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\mystartsearchSoftware
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\DefaultScope "{33BB0A4E-99AF-4226-BDF6-49120163DE86}"
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\URL "http://www.mystartsearch.com/web/?utm_source=b&utm_medium=[AFFILIATE ID]&utm_campaign=install_ie&utm_content=ds&from=[AFFILIATE ID]&uid=[HARD D
HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Safari.exe\shell\open\command\ ""C:\Program Files (x86)\Safari\Safari.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1b"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\ ""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1b"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\ "C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1b"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\OperaStable\shell\open\command\ ""C:\Program Files (x86)\Opera\Launcher.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1b"
HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\ ""C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1b"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Default_Search_URL "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Default_Page_URL "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Search Page "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Default_Page_URL "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Default_Search_URL "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Search Page "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\ ""C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1b"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Google Chrome\shell\open\command\ ""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\ "C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1b"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\OperaStable\shell\open\command\ ""C:\Program Files (x86)\Opera\Launcher.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1b"
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Safari.exe\shell\open\command\ ""C:\Program Files (x86)\Safari\Safari.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1b"
Software\Microsoft\Internet Explorer\DOMStorage\mystartsearch.com
Software\Microsoft\Internet Explorer\DOMStorage\www.mystartsearch.com
SOFTWARE\mystartsearchSoftware
SOFTWARE\Wow6432Node\mystartsearchSoftware

Directories

MyStartSearch.com may create the following directory or directories:

%APPDATA%\mystartsearch

URLs

MyStartSearch.com may call the following URLs:

.mystartsearch.com
http://mystartsearch.com/web?q
mystartsearch.com

Trending

Most Viewed

Loading...