MyStartSearch.com
Posted: November 20, 2014
Threat Metric
The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to
give every identifiable malware threat. Our Threat Meter includes several criteria based off of
specific malware threats to value their severity, reach and volume. The Threat Meter is able to give
you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count,
Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic
breakdown of how all threats are ranked within our own extensive malware database. The scoring for
each specific malware threat can be easily compared to other emerging threats to draw a contrast in
its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to
remove a threat or pursue additional analytical research for all types of computer users.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
| Ranking: | 854 |
|---|---|
| Threat Level: | 5/10 |
| Infected PCs: | 304,274 |
| First Seen: | September 26, 2014 |
|---|---|
| Last Seen: | October 17, 2023 |
| OS(es) Affected: | Windows |
MyStartSearch.com is a search site that redirects its traffic to other search domains. Although MyStartSearch.com has no clear links with any illegal activities, malware researchers sometimes see browser-hijacking toolbars redirecting their users to MyStartSearch.com. Persistent exposure to advertisements through MyStartSearch.com may put your PC at risk, and removing MyStartSearch.com software is the default response advised for keeping your browser safe.
The Start of MyStartSearch.com Hijacks
MyStartSearch.com resembles a search site but doesn't provide independent links or results. Instead, MyStartSearch.com redirects its users to other popular search engines, with the latest in these being Google. Malware experts found no immediate indications of threatening content loaded through MyStartSearch.com, but do warn that advertisements delivered by MyStartSearch.com may not be screened adequately for your personal safety.
MyStartSearch.com may have no other features of note, but MyStartSearch.com may be set as the default homepage by Yontoo-based adware and toolbars, such as the TornTV Hijacker. Old versions of Yontoo products have been known primarily for hijacking Internet Explorer and other browsers, forcing the PC users to load MyStartSearch.com and other sites with extra advertisements. However, some new variants may include threatening functions and may attack your computer intentionally.
These browser modifications may persist even in the event of you uninstalling the Yontoo software and other browser hijackers responsible for redirecting you to MyStartSearch.com. The complete removal of all redirects to MyStartSearch.com may require that you remove unwanted entries from your Registry. However, doing so manually may risk harm to your operating system and is discouraged by malware analysts whenever any alternatives are available.
Ending a Search for Uninstalling MyStartSearch.com
The adware programs that try to monetize your PC through advertisement traffic sometimes are installed by bundles with other applications. Avoiding these bundles is most efficiently accomplished by avoiding free software sites, file hosts and torrent networks that have histories for promoting adware, threats or illegal downloads. Even if you do need to download files from suspicious sources, scanning them before launching them can let your security software detect many of the most common adware bundles, such as most Yontoo products.
MyStartSearch.com hijackers may affect Web browsers of brands that are popular for Windows users, including Chrome and Internet Explorer. However, some Yontoo products also have been known for targeting OS X. Whatever your OS might be, letting a toolbar or other add-on control whether or not you load MyStartSearch.com is a losing proposition for your Web-browsing security.
MyStartSearch.com hijacking campaigns still are ongoing. However, adware and browser hijackers that are common to such symptoms are significantly older than this year and are estimated to continue making up a sizable portion of PUPs for the near future.
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:%TEMP%\a7d15d04-8659-4200-bbc0-a2f4802a9caf\llys_mystartsearch.exe
File name: llys_mystartsearch.exeSize: 779 KB (779000 bytes)
MD5: 204d0c4f1804b97e3b0aea65a399847d
Detection count: 82
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\a7d15d04-8659-4200-bbc0-a2f4802a9caf
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\RQDKQYK\wnf_mystartsearch.exe
File name: wnf_mystartsearch.exeSize: 317.61 KB (317616 bytes)
MD5: 67164a4f978a81233d3ea3c655f006f5
Detection count: 81
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\RQDKQYK
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\DLG\exe\666216dd04140db51c7272ddf2d6c926\cvs_mystartsearch.exe
File name: cvs_mystartsearch.exeSize: 560.96 KB (560960 bytes)
MD5: f27e31857990deef523808c5cf5737c3
Detection count: 80
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\DLG\exe\666216dd04140db51c7272ddf2d6c926
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\XHBCVZH\wnf_mystartsearch.exe
File name: wnf_mystartsearch.exeSize: 285.72 KB (285720 bytes)
MD5: dd16fdd9c6875ba582d468402079e93c
Detection count: 75
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\XHBCVZH
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\DLG\exe\f0ec5d2e5e8cc36e63da69343164eddc\cvs_mystartsearch.exe
File name: cvs_mystartsearch.exeSize: 361.72 KB (361720 bytes)
MD5: 85431840c5b1b89849c0bf419880bd74
Detection count: 62
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\DLG\exe\f0ec5d2e5e8cc36e63da69343164eddc
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\in2B748358\2556A8D1_stp\4727_cor_mystartsearch.exe
File name: 4727_cor_mystartsearch.exeSize: 563.52 KB (563520 bytes)
MD5: 8d0a9b81dd7244b6dfa010e2a3fb66af
Detection count: 62
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in2B748358\2556A8D1_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\in0D9F241E\602766B6_stp\4726_cornl_mystartsearch.exe
File name: 4726_cornl_mystartsearch.exeSize: 563.52 KB (563520 bytes)
MD5: 82dee8bd41b7e75c1abb15c9a738c68b
Detection count: 60
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in0D9F241E\602766B6_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\9921192e-60ff-4cbb-84da-35b00d1991e6\llys_mystartsearch.exe
File name: llys_mystartsearch.exeSize: 549.11 KB (549112 bytes)
MD5: b2646e1142bafbe3432dc3029267a82f
Detection count: 52
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\9921192e-60ff-4cbb-84da-35b00d1991e6
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\DLG\exe\dd2f3370b5f9a492dc629529bdcdc6aa\cvs_mystartsearch.exe
File name: cvs_mystartsearch.exeSize: 778.92 KB (778928 bytes)
MD5: 24250e6a4bf9778741037436932997e2
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\DLG\exe\dd2f3370b5f9a492dc629529bdcdc6aa
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\in2B748358\0BFEF217_stp\4597_cor_mystartsearch.exe
File name: 4597_cor_mystartsearch.exeSize: 545.6 KB (545600 bytes)
MD5: aba3722139ce2fcf4c16f6bac4d4e56d
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in2B748358\0BFEF217_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\in0D9F241E\5E35BC15_stp\4726_cornl_mystartsearch.exe
File name: 4726_cornl_mystartsearch.exeSize: 563.52 KB (563520 bytes)
MD5: 1118fecf872f72050c5e1d0747b2b4e1
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in0D9F241E\5E35BC15_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\in0D9F241E\44D2F895_stp\4893_cornl_mystartsearch.exe
File name: 4893_cornl_mystartsearch.exeSize: 549.18 KB (549184 bytes)
MD5: 409e95078d4a28ff41af6cba5f751532
Detection count: 24
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in0D9F241E\44D2F895_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\5e362fff-2038-49c9-a46b-b64468d71f33\llys_mystartsearch.exe
File name: llys_mystartsearch.exeSize: 549.11 KB (549112 bytes)
MD5: 63d40e12a7b8de67caf6fc9eefccb575
Detection count: 13
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\5e362fff-2038-49c9-a46b-b64468d71f33
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\Temp1_Mystartsearch.com.zip\int_mystartsearch.exe
File name: int_mystartsearch.exeSize: 549.11 KB (549112 bytes)
MD5: 0c27ef35a6d074ab97f7b28491405be7
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\Temp1_Mystartsearch.com.zip
Group: Malware file
Last Updated: August 17, 2022
%TEMP%\in2B748358\260B15EE_stp\4727_cor_mystartsearch.exe
File name: 4727_cor_mystartsearch.exeSize: 563.52 KB (563520 bytes)
MD5: 125a9011cf26af5c2d0ad0d46d3a6f80
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in2B748358\260B15EE_stp
Group: Malware file
Last Updated: August 17, 2022
%TEMP%\DLG\exe\666216dd04140db51c7272ddf2d6c926\cvs_mystartsearch.exe
File name: cvs_mystartsearch.exeSize: 319.09 KB (319096 bytes)
MD5: bb901e792655bf11cc866974ee0b6564
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\DLG\exe\666216dd04140db51c7272ddf2d6c926
Group: Malware file
Last Updated: December 10, 2019
%USERPROFILE%\Desktop\mystartsearch\wnf_mystartsearch.exe
File name: wnf_mystartsearch.exeSize: 319.12 KB (319128 bytes)
MD5: 7eaf6477d7f32ef0a99e0457c8aba4d9
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Desktop\mystartsearch
Group: Malware file
Last Updated: December 10, 2019
%TEMP%\con_mystartsearch.exe
File name: con_mystartsearch.exeSize: 318.04 KB (318048 bytes)
MD5: 65d28b730f1b3c654812eb6f78b807d5
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: December 10, 2019
C:\Users\<username>\AppData\Local\Temp\in2B748358\7F6A3BFB_stp\4727_cor_mystartsearch.exe
File name: 4727_cor_mystartsearch.exeSize: 563.52 KB (563520 bytes)
MD5: e37fe5195e0e36bd350cfba42070aeb4
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\in2B748358\7F6A3BFB_stp\4727_cor_mystartsearch.exe
Group: Malware file
Last Updated: September 9, 2022
%TEMP%\TXWAQTP\wnf_mystartsearch.exe
File name: wnf_mystartsearch.exeSize: 317.61 KB (317616 bytes)
MD5: 8c41ecbb38d749ba02c09e1cd623e299
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\TXWAQTP
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\in0D9F241E\36007DE4_stp\4973_cornl_mystartsearch.exe
File name: 4973_cornl_mystartsearch.exeSize: 551.74 KB (551744 bytes)
MD5: 17f265cbf7834ea9ab87554745a5ab3b
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in0D9F241E\36007DE4_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\in2B748358\1EEAB319_stp\4594_cornl_mystartsearch.exe
File name: 4594_cornl_mystartsearch.exeSize: 545.6 KB (545600 bytes)
MD5: 3dde5a4489a2a37f2e4c4d1228c5217f
Detection count: 2
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in2B748358\1EEAB319_stp
Group: Malware file
Last Updated: March 31, 2016
%UserProfile%\mystartsearch
File name: %UserProfile%\mystartsearchGroup: Malware file
%UserProfile%\mystartsearch\478.json
File name: %UserProfile%\mystartsearch\478.jsonMime Type: unknown/json
Group: Malware file
%UserProfile%\mystartsearch\images
File name: %UserProfile%\mystartsearch\imagesGroup: Malware file
%UserProfile%\mystartsearch\images\bg.png
File name: %UserProfile%\mystartsearch\images\bg.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\bg1.png
File name: %UserProfile%\mystartsearch\images\bg1.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\bk_shadow.png
File name: %UserProfile%\mystartsearch\images\bk_shadow.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\button.png
File name: %UserProfile%\mystartsearch\images\button.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\button1.png
File name: %UserProfile%\mystartsearch\images\button1.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\checkbox.png
File name: %UserProfile%\mystartsearch\images\checkbox.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\checkbox_select.png
File name: %UserProfile%\mystartsearch\images\checkbox_select.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\checked.png
File name: %UserProfile%\mystartsearch\images\checked.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\close.png
File name: %UserProfile%\mystartsearch\images\close.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\code
File name: %UserProfile%\mystartsearch\images\codeGroup: Malware file
%UserProfile%\mystartsearch\images\code\code1.jpg
File name: %UserProfile%\mystartsearch\images\code\code1.jpgMime Type: unknown/jpg
Group: Malware file
%UserProfile%\mystartsearch\images\code\code2.jpg
File name: %UserProfile%\mystartsearch\images\code\code2.jpgMime Type: unknown/jpg
Group: Malware file
%UserProfile%\mystartsearch\images\code\code3.jpg
File name: %UserProfile%\mystartsearch\images\code\code3.jpgMime Type: unknown/jpg
Group: Malware file
%UserProfile%\mystartsearch\images\code\code4.jpg
File name: %UserProfile%\mystartsearch\images\code\code4.jpgMime Type: unknown/jpg
Group: Malware file
%UserProfile%\mystartsearch\images\code\code5.jpg
File name: %UserProfile%\mystartsearch\images\code\code5.jpgMime Type: unknown/jpg
Group: Malware file
%UserProfile%\mystartsearch\images\code\code6.jpg
File name: %UserProfile%\mystartsearch\images\code\code6.jpgMime Type: unknown/jpg
Group: Malware file
%UserProfile%\mystartsearch\images\code\Thumbs.db
File name: %UserProfile%\mystartsearch\images\code\Thumbs.dbMime Type: unknown/db
Group: Malware file
%UserProfile%\mystartsearch\images\loading_bg.png
File name: %UserProfile%\mystartsearch\images\loading_bg.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\loading_light.png
File name: %UserProfile%\mystartsearch\images\loading_light.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\min.png
File name: %UserProfile%\mystartsearch\images\min.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\scrollbar.bmp
File name: %UserProfile%\mystartsearch\images\scrollbar.bmpMime Type: unknown/bmp
Group: Malware file
%UserProfile%\mystartsearch\images\Thumbs.db
File name: %UserProfile%\mystartsearch\images\Thumbs.dbMime Type: unknown/db
Group: Malware file
%UserProfile%\mystartsearch\images\unchecked.png
File name: %UserProfile%\mystartsearch\images\unchecked.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\MessageBox.xml
File name: %UserProfile%\mystartsearch\MessageBox.xmlMime Type: unknown/xml
Group: Malware file
More files
Registry Modifications
The following newly produced Registry Values are:
File name without pathhttp_www.mystartsearch.com_0.localstoragehttp_www.mystartsearch.com_0.localstorage-journalHKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\URL "http://www.mystartsearch.com/web/?utm_source=b&utm_medium=[AFFILIATE ID]&utm_campaign=install_ie&utm_content=ds&from=[AFFILIATE ID]&uid=[HARD DHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\mystartsearchSoftwareHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Safari.exe\shell\open\command\ ""C:\Program Files (x86)\Safari\Safari.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\ ""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\ "C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\OperaStable\shell\open\command\ ""C:\Program Files (x86)\Opera\Launcher.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\ ""C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Default_Search_URL "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Default_Page_URL "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Search Page "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\DefaultScope "{33BB0A4E-99AF-4226-BDF6-49120163DE86}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Default_Page_URL "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Default_Search_URL "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Search Page "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\ ""C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Google Chrome\shell\open\command\ ""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\ "C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\OperaStable\shell\open\command\ ""C:\Program Files (x86)\Opera\Launcher.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Safari.exe\shell\open\command\ ""C:\Program Files (x86)\Safari\Safari.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\DOMStorage\mystartsearch.comSoftware\Microsoft\Internet Explorer\DOMStorage\www.mystartsearch.comSOFTWARE\mystartsearchSoftwareSOFTWARE\Wow6432Node\mystartsearchSoftwareHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}mystartsearchmystartsearch uninstall
File name without pathhttp_www.mystartsearch.com_0.localstoragehttp_www.mystartsearch.com_0.localstorage-journalHKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\URL "http://www.mystartsearch.com/web/?utm_source=b&utm_medium=[AFFILIATE ID]&utm_campaign=install_ie&utm_content=ds&from=[AFFILIATE ID]&uid=[HARD DHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\mystartsearchSoftwareHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Safari.exe\shell\open\command\ ""C:\Program Files (x86)\Safari\Safari.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\ ""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\ "C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\OperaStable\shell\open\command\ ""C:\Program Files (x86)\Opera\Launcher.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\ ""C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Default_Search_URL "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Default_Page_URL "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Search Page "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\DefaultScope "{33BB0A4E-99AF-4226-BDF6-49120163DE86}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Default_Page_URL "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Default_Search_URL "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Search Page "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\ ""C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Google Chrome\shell\open\command\ ""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\ "C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\OperaStable\shell\open\command\ ""C:\Program Files (x86)\Opera\Launcher.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Safari.exe\shell\open\command\ ""C:\Program Files (x86)\Safari\Safari.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\DOMStorage\mystartsearch.comSoftware\Microsoft\Internet Explorer\DOMStorage\www.mystartsearch.comSOFTWARE\mystartsearchSoftwareSOFTWARE\Wow6432Node\mystartsearchSoftwareHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}mystartsearchmystartsearch uninstall
Additional Information
The following directories were created:
%APPDATA%\mystartsearch
The following URL's were detected:
.mystartsearch.comhttp://mystartsearch.com/web?qmystartsearch.com
I use SpyHunter, will it remove the MyStartSearch Malware?
Please advise.
joseph
YES, Buy the software SpyHunter & RegHunter it's worth the money.
After a second time scan with both programm's it's gone.
Stephan
Spyhunter has found threats in 'E' DVD-Rom with no disk in and 'F' DVD-RW with no disk in. I'm not going to press 'clean' What else has it got wrong!