Home Malware Programs Browser Hijackers Mysites123.com

Mysites123.com

Posted: November 23, 2015

Threat Metric

Ranking: 6,751
Threat Level: 5/10
Infected PCs: 39,092
First Seen: November 23, 2015
Last Seen: March 10, 2025
OS(es) Affected: Windows


Mysites123.com is a search site that may become the homepage of Google Chrome, Mozilla Firefox and Internet Explorer automatically. Despite the visual similarities with Google, this engine may not be reliable, so you should not trust it. The reason to stay away from Mysites123.com concerns to the results that it may display after you conduct a search. It is normal for all search platforms to display a few sponsored links above the best matches. However, Mysites123.com may go too far with this advertising process because the majority of sites that it lists belong to partners. If you visit them, you may be unable to find the information you need because these pages may not correspond to your criteria very well. This potential outcome leads to negative user feedback inevitably. Since most people have never heard about Mysites123.com or would not visit it twice after the first visit, the developers of this questionable search site may rely on a rather suspicious method to promote it. This platform is associated with a browser hijacker, which is a threatening Web add-on. These tools may use different mechanisms to evade the attention of the PC user and enter stealthily. The approach that the people behind Mysites123.com may use most often is called 'bundling.' They simply include a dubious extension into third-party installers so that inattentive users may agree to load the browser hijacker unknowingly. Mysites123.com copies the design of Google and offers the famous 'News,' 'Images' and 'Videos' sections. Some people may even miss the fact that their homepage is different. A worrying aspect of Mysites123.com is that some of the sites that it displays may be compromised. It is paramount to use the latest version of powerful security software to delete the browser hijacker behind this unreliable search platform.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%TEMP%\amt_mysites123.exe File name: amt_mysites123.exe
Size: 698.08 KB (698080 bytes)
MD5: eb408ccf3c70027bb5bac3a783a89b5e
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\nso6A4D.tmp\nsbfr_mysites123.exe File name: nsbfr_mysites123.exe
Size: 189.66 KB (189664 bytes)
MD5: b51f170452d71d3129ab6b444e96b8f5
Detection count: 11
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\nso6A4D.tmp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\nsu397.tmp\nsbit_mysites123.exe File name: nsbit_mysites123.exe
Size: 189.66 KB (189664 bytes)
MD5: 2f76c4cdc300867767b2646a52e97450
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\nsu397.tmp
Group: Malware file
Last Updated: July 13, 2021
%TEMP%\nsm86AF.tmp\nsbes_mysites123.exe File name: nsbes_mysites123.exe
Size: 189.66 KB (189664 bytes)
MD5: 8d8922f509c8105f148c3463610f4251
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\nsm86AF.tmp
Group: Malware file
Last Updated: March 31, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

File name without pathhttp_www.mysites123.com_0.localstoragehttp_www.mysites123.com_0.localstorage-journalmysites123.xmlHKEY..\..\..\..{RegistryKeys}SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\mysites123.comSOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\mysites123.comSOFTWARE\Mozilla\Firefox\Extensions\default_newtabff@gmail.comSOFTWARE\mysites123SoftwareSOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions\default_newtabff@gmail.comSOFTWARE\Wow6432Node\mysites123SoftwareHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Mysites123Mysites123 uninstall

Additional Information

The following directories were created:
%appdata%\mysites123
The following URL's were detected:
mysites123.com
Loading...