Home Malware Programs Browser Hijackers Mysites123.com

Mysites123.com

Posted: November 23, 2015

Threat Metric

Ranking: 4,988
Threat Level: 5/10
Infected PCs: 38,867
First Seen: November 23, 2015
Last Seen: October 12, 2023
OS(es) Affected: Windows


Mysites123.com is a search site that may become the homepage of Google Chrome, Mozilla Firefox and Internet Explorer automatically. Despite the visual similarities with Google, this engine may not be reliable, so you should not trust it. The reason to stay away from Mysites123.com concerns to the results that it may display after you conduct a search. It is normal for all search platforms to display a few sponsored links above the best matches. However, Mysites123.com may go too far with this advertising process because the majority of sites that it lists belong to partners. If you visit them, you may be unable to find the information you need because these pages may not correspond to your criteria very well. This potential outcome leads to negative user feedback inevitably. Since most people have never heard about Mysites123.com or would not visit it twice after the first visit, the developers of this questionable search site may rely on a rather suspicious method to promote it. This platform is associated with a browser hijacker, which is a threatening Web add-on. These tools may use different mechanisms to evade the attention of the PC user and enter stealthily. The approach that the people behind Mysites123.com may use most often is called 'bundling.' They simply include a dubious extension into third-party installers so that inattentive users may agree to load the browser hijacker unknowingly. Mysites123.com copies the design of Google and offers the famous 'News,' 'Images' and 'Videos' sections. Some people may even miss the fact that their homepage is different. A worrying aspect of Mysites123.com is that some of the sites that it displays may be compromised. It is paramount to use the latest version of powerful security software to delete the browser hijacker behind this unreliable search platform.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%TEMP%\amt_mysites123.exe File name: amt_mysites123.exe
Size: 651.31 KB (651312 bytes)
MD5: 2cfb0e95b028d3413e7120db9bdc5e0b
Detection count: 96
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\nsv9000.tmp\nsbit_mysites123.exe File name: nsbit_mysites123.exe
Size: 189.71 KB (189712 bytes)
MD5: 269bcaf2c0306a2881ffdfa948d5cde6
Detection count: 96
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\nsv9000.tmp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\nsc55FD.tmp\nsbes_mysites123.exe File name: nsbes_mysites123.exe
Size: 189.71 KB (189712 bytes)
MD5: 0a3e8c3e43ee201586436b3df8d38d4a
Detection count: 91
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\nsc55FD.tmp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\amt_mysites123.exe File name: amt_mysites123.exe
Size: 440.05 KB (440056 bytes)
MD5: 426b54b23f4d9d2cb3c74d3c96693ea7
Detection count: 85
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\amt_mysites123.exe File name: amt_mysites123.exe
Size: 440.05 KB (440056 bytes)
MD5: 0915a97d2f348f6f751222743f2e1e25
Detection count: 82
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\amt_mysites123.exe File name: amt_mysites123.exe
Size: 434.42 KB (434424 bytes)
MD5: a83d667947aace8884df8549c5da0f17
Detection count: 74
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\amt_mysites123.exe File name: amt_mysites123.exe
Size: 181.49 KB (181496 bytes)
MD5: e5ef5ab6ad346f34547f34dcbb0bb97d
Detection count: 71
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\amt_mysites123.exe File name: amt_mysites123.exe
Size: 439.03 KB (439032 bytes)
MD5: 31458a05dd65cf0b7022174f52c1db72
Detection count: 54
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\nse3E5.tmp\nsbfr_mysites123.exe File name: nsbfr_mysites123.exe
Size: 189.71 KB (189712 bytes)
MD5: baccc13378710bda6763a41583e66103
Detection count: 50
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\nse3E5.tmp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\nsdFB.tmp\nsbit_mysites123.exe File name: nsbit_mysites123.exe
Size: 189.71 KB (189712 bytes)
MD5: 8a70cdb844776f9fcb4f9dc8e3480b8d
Detection count: 22
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\nsdFB.tmp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\amt_mysites123.exe File name: amt_mysites123.exe
Size: 698.08 KB (698080 bytes)
MD5: eb408ccf3c70027bb5bac3a783a89b5e
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\nsg3811.tmp\nsbes_mysites123.exe File name: nsbes_mysites123.exe
Size: 189.71 KB (189712 bytes)
MD5: 1d1ff6c4f4e69c55fb2238f90f8b1c0a
Detection count: 15
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\nsg3811.tmp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\nso6A4D.tmp\nsbfr_mysites123.exe File name: nsbfr_mysites123.exe
Size: 189.66 KB (189664 bytes)
MD5: b51f170452d71d3129ab6b444e96b8f5
Detection count: 11
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\nso6A4D.tmp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\nsmE0D5.tmp\nsbfr_mysites123.exe File name: nsbfr_mysites123.exe
Size: 189.71 KB (189712 bytes)
MD5: b300d7c212d0771d04a6f6f6626fdb29
Detection count: 10
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\nsmE0D5.tmp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\nsu397.tmp\nsbit_mysites123.exe File name: nsbit_mysites123.exe
Size: 189.66 KB (189664 bytes)
MD5: 2f76c4cdc300867767b2646a52e97450
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\nsu397.tmp
Group: Malware file
Last Updated: July 13, 2021
%TEMP%\amt_mysites123.exe File name: amt_mysites123.exe
Size: 440.05 KB (440056 bytes)
MD5: b7ecd47eed7bfb03755495961e410196
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\nsm86AF.tmp\nsbes_mysites123.exe File name: nsbes_mysites123.exe
Size: 189.66 KB (189664 bytes)
MD5: 8d8922f509c8105f148c3463610f4251
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\nsm86AF.tmp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\amt_mysites123.exe File name: amt_mysites123.exe
Size: 439.03 KB (439032 bytes)
MD5: 5a5548ef6ab3f6df5d8d4f6c6e19c792
Detection count: 0
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 31, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

File name without pathhttp_www.mysites123.com_0.localstoragehttp_www.mysites123.com_0.localstorage-journalmysites123.xmlHKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mysites123.comSOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mysites123.comSOFTWARE\Mozilla\Firefox\Extensions\default_newtabff@gmail.comSOFTWARE\mysites123SoftwareSOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\default_newtabff@gmail.comSOFTWARE\Wow6432Node\mysites123SoftwareHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Mysites123Mysites123 uninstall

Additional Information

The following directories were created:
%appdata%\mysites123
The following URL's were detected:
http://www.mysites123.com/web?q=
Loading...