mwsBar.dll
My Web Search Bar for Internet Explorer, FireFox, email clients, and messenger clients by Mindspark Interactive Network (Signed)
| Version: | 2, 3, 98, 80 |
| MD5: | a420d39f8db91c41b83476e1060996e8 |
| SHA1: | 332f32822c766a453ca76f8cae60fb2a94e93a86 |
| SHA256: | 082701f700860ced0420707a5f3e99a0ff4b61153c8d9f52a1d3b13605e5ce50 |
Warning 7 antivirus scanners has detected malware.
What is mwsBar.dll?
My Web Search by the Mindspark Interactive Network is a browser toolbar, part of the Fun Web Products suite of potentially unwanted applications such as Smiley Central, Cursor Mania, Popular Screensavers and others. The toolbar provides access to search engine results and a 404 Error Redirector among other things to your browser. The My Web Search toolbar could slow down your PC and uses cookies to track your web surfing usage and habits.
About mwsBar.dll (from Mindspark Interactive Network)
“MyWebSearch brings together the most comprehensive collection of search tools available to provide you with the information you need when you need it.”
Overview
mwsbar.dll is malware that is loaded as dynamic link library that runs in the context of Internet Explorer. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed in Internet Explorer as a Browser Helper Object (BHO) which has full acess to the web browser's behaviors and content. The file is digitally signed by Mindspark Interactive Network which was issued by the VeriSign certificate authority (CA).
Details
| File name: | mwsbar.dll |
| Publisher: | MyWebSearch.com |
| Product name: | My Web Search Bar for Internet Explorer, FireFox, email clients, and messenger clients |
| Description: | My Web Search |
| Typical file path: | C:\Program Files\mywebsearch\bar\1.bin\mwsbar.dll |
| File version: | 2, 3, 98, 80 |
| Size: | 815.27 KB (834,832 bytes) |
| Certificate |
| Issued to: | Mindspark Interactive Network |
| Authority (CA): | VeriSign |
| Expiration date: | Wednesday, May 6, 2015 |
| Digital DNA |
| PE subsystem: | Windows GUI |
| File packed: | No |
| .NET CLR: | No |
More details
Behaviors
Internet Explorer Browser Helper Object
Located in the registry at 'SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects'
- BHO CLSID: {07B18EA1-A523-4961-B6BB-170DE4475CCA}
Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
- 'My Web Search Bar' → rundll32 C:\Program Files1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
Internet Explorer toolbars
Located in the registry at 'SOFTWARE\Microsoft\Internet Explorer\Toolbar'
- CLSID: {07B18EA9-A523-4961-B6BB-170DE4475CCA}
Internet Explorer web browsers
Located in the registry at 'SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser'
- CLSID: {07B18EA9-A523-4961-B6BB-170DE4475CCA}
Startup files (all users) run once
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce'
- 'MyWebSearch bar Uninstall' → rundll32 C:\Program Files2\UNINST~1.DLL,O -2
Malware detections
Based on 40+ industry antivirus scanners, 7 of them detected the following malware.
| Antivirus engine | Engine version | Detection |
| AhnLab V3 Internet Security |
2012.11.13.04 |
PUP/Win32.MyWebSearch |
| AVG |
2014.0.3629 |
Zango |
| Clam AntiVirus |
0.97.3.0 |
Adware.FunWebProducts-5 |
| ESET NOD32 |
7.7686 |
a variant of Win32/Toolbar.MyWebSearch.K |
| Kingsoft |
2012.9.22.155 |
Win32.Troj.Generic.a.(kcloud) |
| SUPERAntiSpyware |
5.6.0.1008 |
PUP.MyWebSearch |
| VIPRE Antivirus |
13956 |
MyWebSearch.J (v) (not malicious) |
Distribution by Windows OS
| OS version | distribution |
| Microsoft Windows XP |
43.48% |
|
| Windows 7 Ultimate N |
34.78% |
|
| Windows 7 Ultimate |
13.04% |
|
| Windows 7 Home Premium |
8.70% |
|
Distribution by country
United States installs about 46.15% of My Web Search Bar for Internet Explorer, FireFox, email clients, and messenger clients.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| GIGABYTE |
100.00% |
|
