m3SrchMn.exe
My Web Search Bar for Internet Explorer and FireFox by Mindspark Interactive Network (Signed)
Warning 42 antivirus scanners has detected malware in various versions of m3SrchMn.exe.
Overview
m3srchmn.exe has 4 known versions, the most recent one is 1, 0, 0, 12. During installation, a run registry key for all users is added that will cause the program to run each time any user logs on to Windows. The average file size is about 31.18 KB. It is an authenticode code-signed executable issued to Mindspark Interactive Network by the certification authority VeriSign.
What is m3srchmn.exe?
MyWebSearch SearchScope Monitor is part of My Web Search by the Mindspark Interactive Network, a browser toolbar, part of the Fun Web Products suite of potentially unwanted applications such as Smiley Central, Cursor Mania, Popular Screensavers and others. The toolbar provides access to search engine results and a 404 Error Redirector among other things to your browser.
About m3srchmn.exe (from Mindspark Interactive Network)
“MyWebSearch brings together the most comprehensive collection of search tools available to provide you with the information you need when you need it.”
 Details
|
| File name: | m3srchmn.exe |
| Publisher: | MyWebSearch.com |
| Product name: | My Web Search Bar for Internet Explorer and FireFox |
| Description: | MyWebSearch SearchScope Monitor |
| Typical file path: | C:\Program Files\mywebsearch\bar\1.bin\m3srchmn.exe |
| Certificate |
| Issued to: | Mindspark Interactive Network |
| Authority (CA): | VeriSign |
| Expiration date: | Sunday, May 6, 2012 |
Behaviors
(Note, the behaviors below are for all versions of m3srchmn.exe, select a unique version for details.)
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'My Web Search Bar Search Scope Monitor' → "C:\Program Files1\MYWEBS~1\bar\1.bin\m3SrchMn.exe" /m=2 /w /h
Malware detections
Based on 40+ industry antivirus scanners, 42 of them detected the following malware.
| Antivirus engine | Engine version | Detection | File version |
| AhnLab V3 Internet Security |
2013.03.15 |
PUP/Win32.MyWebSearch |
1, 0, 0, 12 |
| AhnLab V3 Internet Security |
2012.09.27 |
PUP/Win32.MyWebSearch |
1, 0, 0, 4 |
| AhnLab V3 Internet Security |
2013.04.02 |
PUP/Win32.MyWebSearch |
1, 0, 0, 5 |
| AhnLab V3 Internet Security |
2013.03.21 |
PUP/Win32.MyWebSearch |
1, 0, 0, 5 |
| avast! |
6.0.1289.0 |
Win32:FunWeb-K [PUP] |
1, 0, 0, 12 |
| avast! |
6.0.1289.0 |
Win32:PUP-gen [PUP] |
1, 0, 0, 4 |
| avast! |
6.0.1289.0 |
Win32:FunWeb-K [PUP] |
1, 0, 0, 5 |
| avast! |
6.0.1289.0 |
Win32:FunWeb-K [PUP] |
1, 0, 0, 5 |
| AVG |
2014.0.3629 |
AdInstaller.FunWeb |
1, 0, 0, 12 |
| AVG |
2014.0.3629 |
AdInstaller.FunWeb |
1, 0, 0, 5 |
| AVG |
2014.0.3629 |
AdInstaller.FunWeb |
1, 0, 0, 5 |
| Clam AntiVirus |
0.97.3.0 |
Suspect.Adware.MWS |
1, 0, 0, 12 |
| Clam AntiVirus |
0.97.3.0 |
Suspect.Adware.MWS |
1, 0, 0, 4 |
| Clam AntiVirus |
0.97.3.0 |
Suspect.Adware.MWS |
1, 0, 0, 5 |
| Clam AntiVirus |
0.97.3.0 |
Suspect.Adware.MWS |
1, 0, 0, 5 |
| Comodo Internet Security |
15576 |
Application.Win32.WebToolbar.MyWebSearch |
1, 0, 0, 12 |
| Comodo Internet Security |
15788 |
Application.Win32.WebToolbar.MyWebSearch |
1, 0, 0, 5 |
| Comodo Internet Security |
15643 |
Application.Win32.WebToolbar.MyWebSearch |
1, 0, 0, 5 |
| eSafe |
7.0.17.0 |
Win32.MiscMywebsearc |
1, 0, 0, 12 |
| ESET NOD32 |
7.8118 |
a variant of Win32/Toolbar.MyWebSearch.I |
1, 0, 0, 12 |
| ESET NOD32 |
7.7520 |
a variant of Win32/Toolbar.MyWebSearch.I |
1, 0, 0, 4 |
| ESET NOD32 |
7.8182 |
Win32/Toolbar.MyWebSearch.I |
1, 0, 0, 5 |
| ESET NOD32 |
7.8142 |
Win32/Toolbar.MyWebSearch.I |
1, 0, 0, 5 |
| F-Secure |
9.0.16440.0 |
Adware:W32/MyWebSearch.M |
1, 0, 0, 4 |
| Kaspersky |
9.0.0.837 |
not-a-virus:WebToolbar.Win32.MyWebSearch.gd |
1, 0, 0, 5 |
| Kaspersky |
9.0.0.837 |
not-a-virus:WebToolbar.Win32.MyWebSearch.gd |
1, 0, 0, 5 |
| Kingsoft |
2013.1.8.219 |
Win32.Troj.MyWebSearch.gd.(kcloud) |
1, 0, 0, 5 |
| Kingsoft |
2013.1.8.219 |
Win32.Troj.MyWebSearch.gd.(kcloud) |
1, 0, 0, 5 |
| NANO AntiVirus |
0.22.8.51404 |
Riskware.Win32.MyWebSearch.qvbsm |
1, 0, 0, 5 |
| NANO AntiVirus |
0.22.8.51404 |
Riskware.Win32.MyWebSearch.dfwts |
1, 0, 0, 5 |
| Norman |
6.08.06 |
W32/Suspicious_Gen2.HORHE |
1, 0, 0, 4 |
| Norman |
7.00.22 |
Suspicious_Gen2.JLQEN |
1, 0, 0, 5 |
| Norman |
7.00.22 |
Suspicious_Gen2.KYAMU |
1, 0, 0, 5 |
| SUPERAntiSpyware |
5.6.0.1008 |
PUP.MyWebSearch |
1, 0, 0, 12 |
| SUPERAntiSpyware |
5.50.0.1016 |
PUP.MyWebSearch |
1, 0, 0, 4 |
| SUPERAntiSpyware |
5.6.0.1008 |
PUP.MyWebSearch |
1, 0, 0, 5 |
| SUPERAntiSpyware |
5.6.0.1008 |
PUP.MyWebSearch |
1, 0, 0, 5 |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.RCBH1CB |
1, 0, 0, 5 |
| VIPRE Antivirus |
16054 |
MyWebSearch.J (v) (not malicious) |
1, 0, 0, 12 |
| VIPRE Antivirus |
13246 |
MyWebSearch Toolbar (not malicious) |
1, 0, 0, 4 |
| VIPRE Antivirus |
16484 |
MyWebSearch.J (v) (not malicious) |
1, 0, 0, 5 |
| VIPRE Antivirus |
16186 |
MyWebSearch.J (v) (not malicious) |
1, 0, 0, 5 |
All file variations of m3srchmn.exe
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
48.15% |
|
| Windows 7 Ultimate |
22.22% |
|
| Windows 7 Ultimate N |
14.81% |
|
| Windows 7 Home Premium |
7.41% |
|
| Windows 7 Home Basic |
3.70% |
|
| Windows 8 Pro |
3.70% |
|
Distribution by country
United States installs about 46.67% of My Web Search Bar for Internet Explorer and FireFox.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
40.00% |
|
| GIGABYTE |
20.00% |
|
| Acer |
20.00% |
|
| Hewlett-Packard |
20.00% |
|
