MyStartSearch.com
Posted: November 20, 2014
Threat Metric
The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to
give every identifiable malware threat. Our Threat Meter includes several criteria based off of
specific malware threats to value their severity, reach and volume. The Threat Meter is able to give
you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count,
Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic
breakdown of how all threats are ranked within our own extensive malware database. The scoring for
each specific malware threat can be easily compared to other emerging threats to draw a contrast in
its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to
remove a threat or pursue additional analytical research for all types of computer users.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
| Ranking: | 603 |
|---|---|
| Threat Level: | 5/10 |
| Infected PCs: | 316,036 |
| First Seen: | September 26, 2014 |
|---|---|
| Last Seen: | March 10, 2025 |
| OS(es) Affected: | Windows |
MyStartSearch.com is a search site that redirects its traffic to other search domains. Although MyStartSearch.com has no clear links with any illegal activities, malware researchers sometimes see browser-hijacking toolbars redirecting their users to MyStartSearch.com. Persistent exposure to advertisements through MyStartSearch.com may put your PC at risk, and removing MyStartSearch.com software is the default response advised for keeping your browser safe.
The Start of MyStartSearch.com Hijacks
MyStartSearch.com resembles a search site but doesn't provide independent links or results. Instead, MyStartSearch.com redirects its users to other popular search engines, with the latest in these being Google. Malware experts found no immediate indications of threatening content loaded through MyStartSearch.com, but do warn that advertisements delivered by MyStartSearch.com may not be screened adequately for your personal safety.
MyStartSearch.com may have no other features of note, but MyStartSearch.com may be set as the default homepage by Yontoo-based adware and toolbars, such as the TornTV Hijacker. Old versions of Yontoo products have been known primarily for hijacking Internet Explorer and other browsers, forcing the PC users to load MyStartSearch.com and other sites with extra advertisements. However, some new variants may include threatening functions and may attack your computer intentionally.
These browser modifications may persist even in the event of you uninstalling the Yontoo software and other browser hijackers responsible for redirecting you to MyStartSearch.com. The complete removal of all redirects to MyStartSearch.com may require that you remove unwanted entries from your Registry. However, doing so manually may risk harm to your operating system and is discouraged by malware analysts whenever any alternatives are available.
Ending a Search for Uninstalling MyStartSearch.com
The adware programs that try to monetize your PC through advertisement traffic sometimes are installed by bundles with other applications. Avoiding these bundles is most efficiently accomplished by avoiding free software sites, file hosts and torrent networks that have histories for promoting adware, threats or illegal downloads. Even if you do need to download files from suspicious sources, scanning them before launching them can let your security software detect many of the most common adware bundles, such as most Yontoo products.
MyStartSearch.com hijackers may affect Web browsers of brands that are popular for Windows users, including Chrome and Internet Explorer. However, some Yontoo products also have been known for targeting OS X. Whatever your OS might be, letting a toolbar or other add-on control whether or not you load MyStartSearch.com is a losing proposition for your Web-browsing security.
MyStartSearch.com hijacking campaigns still are ongoing. However, adware and browser hijackers that are common to such symptoms are significantly older than this year and are estimated to continue making up a sizable portion of PUPs for the near future.
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:%TEMP%\is45637729\1978104_stp\Apr27_3566_cor_mystartsearch.exe
File name: Apr27_3566_cor_mystartsearch.exeSize: 405.36 KB (405368 bytes)
MD5: 6c134a906b5ba820399629916b9ddf77
Detection count: 94
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\is45637729\1978104_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\is45637729\1401433_stp\Apr1fix_3397_cor_mystartsearch.exe
File name: Apr1fix_3397_cor_mystartsearch.exeSize: 405.88 KB (405880 bytes)
MD5: b8ace0283f67a13d76202251569cad92
Detection count: 92
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\is45637729\1401433_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\8c3f8b8c-afde-400d-aead-6473776f4fc8\lly_mystartsearch.exe
File name: lly_mystartsearch.exeSize: 507.41 KB (507416 bytes)
MD5: 2d4b800dac2200155dbc70cf8a55f97b
Detection count: 84
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\8c3f8b8c-afde-400d-aead-6473776f4fc8
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\a7d15d04-8659-4200-bbc0-a2f4802a9caf\llys_mystartsearch.exe
File name: llys_mystartsearch.exeSize: 779 KB (779000 bytes)
MD5: 204d0c4f1804b97e3b0aea65a399847d
Detection count: 82
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\a7d15d04-8659-4200-bbc0-a2f4802a9caf
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\in2B748358\2556A8D1_stp\4727_cor_mystartsearch.exe
File name: 4727_cor_mystartsearch.exeSize: 563.52 KB (563520 bytes)
MD5: 8d0a9b81dd7244b6dfa010e2a3fb66af
Detection count: 62
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in2B748358\2556A8D1_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\is386526232\6C78FEF9_stp\Apr7_3397_cor_mystartsearch.exe
File name: Apr7_3397_cor_mystartsearch.exeSize: 405.88 KB (405880 bytes)
MD5: 226c0170c30d573b17e522d5dd129dca
Detection count: 51
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\is386526232\6C78FEF9_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\DLG\exe\79698dad2a6484de41f67a2858b0d298\cvs1_mystartsearch.exe
File name: cvs1_mystartsearch.exeSize: 562.27 KB (562272 bytes)
MD5: 03a2f2682bb726cd7ffccd008883f9b0
Detection count: 50
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\DLG\exe\79698dad2a6484de41f67a2858b0d298
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\DLG\exe\dd2f3370b5f9a492dc629529bdcdc6aa\cvs_mystartsearch.exe
File name: cvs_mystartsearch.exeSize: 778.92 KB (778928 bytes)
MD5: 24250e6a4bf9778741037436932997e2
Detection count: 44
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\DLG\exe\dd2f3370b5f9a492dc629529bdcdc6aa
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\is45637729\1401471_stp\May6_3648_cor_mystartsearch.exe
File name: May6_3648_cor_mystartsearch.exeSize: 314.74 KB (314744 bytes)
MD5: 657572625a5b71a5beb396c6da3b59b2
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\is45637729\1401471_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\in2B748358\0BFEF217_stp\4597_cor_mystartsearch.exe
File name: 4597_cor_mystartsearch.exeSize: 545.6 KB (545600 bytes)
MD5: aba3722139ce2fcf4c16f6bac4d4e56d
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in2B748358\0BFEF217_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\TempDir\sien_mystartsearch.exe
File name: sien_mystartsearch.exeSize: 198.11 KB (198112 bytes)
MD5: dce744f449d75a647bff7fef3e541303
Detection count: 36
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\TempDir
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\LIL2D96.tmp\bdo_mystartsearch.exe
File name: bdo_mystartsearch.exeSize: 198.11 KB (198112 bytes)
MD5: 1955797ca29a30066bc713761f94ac21
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\LIL2D96.tmp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\in0D9F241E\5E35BC15_stp\4726_cornl_mystartsearch.exe
File name: 4726_cornl_mystartsearch.exeSize: 563.52 KB (563520 bytes)
MD5: 1118fecf872f72050c5e1d0747b2b4e1
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in0D9F241E\5E35BC15_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\DLG\exe\f5598a280889a5db980db8126698a717\cvs2_mystartsearch.exe
File name: cvs2_mystartsearch.exeSize: 286.81 KB (286816 bytes)
MD5: 323d1737a863c71d18092fe189483862
Detection count: 25
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\DLG\exe\f5598a280889a5db980db8126698a717
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\in0D9F241E\44D2F895_stp\4893_cornl_mystartsearch.exe
File name: 4893_cornl_mystartsearch.exeSize: 549.18 KB (549184 bytes)
MD5: 409e95078d4a28ff41af6cba5f751532
Detection count: 24
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in0D9F241E\44D2F895_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\Temp1_Mystartsearch.com.zip\int_mystartsearch.exe
File name: int_mystartsearch.exeSize: 549.11 KB (549112 bytes)
MD5: 0c27ef35a6d074ab97f7b28491405be7
Detection count: 16
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\Temp1_Mystartsearch.com.zip
Group: Malware file
Last Updated: September 25, 2024
%ALLUSERSPROFILE%\{0992d200-9f84-4916-0992-2d2009f84802}\mystartsearch.exe
File name: mystartsearch.exeSize: 847.04 KB (847048 bytes)
MD5: 823291eff0ce60ed54786b9399558cf1
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %ALLUSERSPROFILE%\{0992d200-9f84-4916-0992-2d2009f84802}
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\con_mystartsearch.exe
File name: con_mystartsearch.exeSize: 318.04 KB (318048 bytes)
MD5: 65d28b730f1b3c654812eb6f78b807d5
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%
Group: Malware file
Last Updated: September 25, 2024
E:\5586744670060544\96734908f02e234c21976c6acc11e73f6e0ae9c00738110665a16711f2344f6e
File name: 96734908f02e234c21976c6acc11e73f6e0ae9c00738110665a16711f2344f6eSize: 330.69 KB (330696 bytes)
MD5: 8cc94d3786f36419ad25ab40cf5112c6
Detection count: 5
Path: E:\5586744670060544\96734908f02e234c21976c6acc11e73f6e0ae9c00738110665a16711f2344f6e
Group: Malware file
Last Updated: August 9, 2021
%TEMP%\9C80\temp\wpc_mystartsearch.exe
File name: wpc_mystartsearch.exeSize: 356.37 KB (356376 bytes)
MD5: 047a1fa847bde86ca1b63aca7ef755fb
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\9C80\temp
Group: Malware file
Last Updated: November 8, 2019
%TEMP%\in0D9F241E\36007DE4_stp\4973_cornl_mystartsearch.exe
File name: 4973_cornl_mystartsearch.exeSize: 551.74 KB (551744 bytes)
MD5: 17f265cbf7834ea9ab87554745a5ab3b
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in0D9F241E\36007DE4_stp
Group: Malware file
Last Updated: March 31, 2016
%TEMP%\in2B748358\1EEAB319_stp\4594_cornl_mystartsearch.exe
File name: 4594_cornl_mystartsearch.exeSize: 545.6 KB (545600 bytes)
MD5: 3dde5a4489a2a37f2e4c4d1228c5217f
Detection count: 2
File type: Executable File
Mime Type: unknown/exe
Path: %TEMP%\in2B748358\1EEAB319_stp
Group: Malware file
Last Updated: March 31, 2016
%UserProfile%\mystartsearch
File name: %UserProfile%\mystartsearchGroup: Malware file
%UserProfile%\mystartsearch\478.json
File name: %UserProfile%\mystartsearch\478.jsonMime Type: unknown/json
Group: Malware file
%UserProfile%\mystartsearch\images
File name: %UserProfile%\mystartsearch\imagesGroup: Malware file
%UserProfile%\mystartsearch\images\bg.png
File name: %UserProfile%\mystartsearch\images\bg.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\bg1.png
File name: %UserProfile%\mystartsearch\images\bg1.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\bk_shadow.png
File name: %UserProfile%\mystartsearch\images\bk_shadow.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\button.png
File name: %UserProfile%\mystartsearch\images\button.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\button1.png
File name: %UserProfile%\mystartsearch\images\button1.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\checkbox.png
File name: %UserProfile%\mystartsearch\images\checkbox.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\checkbox_select.png
File name: %UserProfile%\mystartsearch\images\checkbox_select.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\checked.png
File name: %UserProfile%\mystartsearch\images\checked.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\close.png
File name: %UserProfile%\mystartsearch\images\close.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\code
File name: %UserProfile%\mystartsearch\images\codeGroup: Malware file
%UserProfile%\mystartsearch\images\code\code1.jpg
File name: %UserProfile%\mystartsearch\images\code\code1.jpgMime Type: unknown/jpg
Group: Malware file
%UserProfile%\mystartsearch\images\code\code2.jpg
File name: %UserProfile%\mystartsearch\images\code\code2.jpgMime Type: unknown/jpg
Group: Malware file
%UserProfile%\mystartsearch\images\code\code3.jpg
File name: %UserProfile%\mystartsearch\images\code\code3.jpgMime Type: unknown/jpg
Group: Malware file
%UserProfile%\mystartsearch\images\code\code4.jpg
File name: %UserProfile%\mystartsearch\images\code\code4.jpgMime Type: unknown/jpg
Group: Malware file
%UserProfile%\mystartsearch\images\code\code5.jpg
File name: %UserProfile%\mystartsearch\images\code\code5.jpgMime Type: unknown/jpg
Group: Malware file
%UserProfile%\mystartsearch\images\code\code6.jpg
File name: %UserProfile%\mystartsearch\images\code\code6.jpgMime Type: unknown/jpg
Group: Malware file
%UserProfile%\mystartsearch\images\code\Thumbs.db
File name: %UserProfile%\mystartsearch\images\code\Thumbs.dbMime Type: unknown/db
Group: Malware file
%UserProfile%\mystartsearch\images\loading_bg.png
File name: %UserProfile%\mystartsearch\images\loading_bg.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\loading_light.png
File name: %UserProfile%\mystartsearch\images\loading_light.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\min.png
File name: %UserProfile%\mystartsearch\images\min.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\images\scrollbar.bmp
File name: %UserProfile%\mystartsearch\images\scrollbar.bmpMime Type: unknown/bmp
Group: Malware file
%UserProfile%\mystartsearch\images\Thumbs.db
File name: %UserProfile%\mystartsearch\images\Thumbs.dbMime Type: unknown/db
Group: Malware file
%UserProfile%\mystartsearch\images\unchecked.png
File name: %UserProfile%\mystartsearch\images\unchecked.pngMime Type: unknown/png
Group: Malware file
%UserProfile%\mystartsearch\MessageBox.xml
File name: %UserProfile%\mystartsearch\MessageBox.xmlMime Type: unknown/xml
Group: Malware file
More files
Registry Modifications
The following newly produced Registry Values are:
File name without pathhttp_www.mystartsearch.com_0.localstoragehttp_www.mystartsearch.com_0.localstorage-journalHKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\URL "http://www.mystartsearch.com/web/?utm_source=b&utm_medium=[AFFILIATE ID]&utm_campaign=install_ie&utm_content=ds&from=[AFFILIATE ID]&uid=[HARD DHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\mystartsearchSoftwareHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Safari.exe\shell\open\command\ ""C:\Program Files (x86)\Safari\Safari.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\ ""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\ "C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\OperaStable\shell\open\command\ ""C:\Program Files (x86)\Opera\Launcher.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\ ""C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Default_Search_URL "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Default_Page_URL "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Search Page "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\DefaultScope "{33BB0A4E-99AF-4226-BDF6-49120163DE86}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Default_Page_URL "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Default_Search_URL "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Search Page "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\ ""C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Google Chrome\shell\open\command\ ""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\ "C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\OperaStable\shell\open\command\ ""C:\Program Files (x86)\Opera\Launcher.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Safari.exe\shell\open\command\ ""C:\Program Files (x86)\Safari\Safari.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\DOMStorage\mystartsearch.comSoftware\Microsoft\Internet Explorer\DOMStorage\www.mystartsearch.comSOFTWARE\mystartsearchSoftwareSOFTWARE\Wow6432Node\mystartsearchSoftwareHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}mystartsearchmystartsearch uninstall
File name without pathhttp_www.mystartsearch.com_0.localstoragehttp_www.mystartsearch.com_0.localstorage-journalHKEY..\..\..\..{Subkeys}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\URL "http://www.mystartsearch.com/web/?utm_source=b&utm_medium=[AFFILIATE ID]&utm_campaign=install_ie&utm_content=ds&from=[AFFILIATE ID]&uid=[HARD DHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\mystartsearchSoftwareHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Safari.exe\shell\open\command\ ""C:\Program Files (x86)\Safari\Safari.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command\ ""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\ "C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\OperaStable\shell\open\command\ ""C:\Program Files (x86)\Opera\Launcher.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\ ""C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Default_Search_URL "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Default_Page_URL "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\MAIN\Search Page "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\DefaultScope "{33BB0A4E-99AF-4226-BDF6-49120163DE86}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Default_Page_URL "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Start Page "http://www.mystartsearch.com/?type=hp&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Default_Search_URL "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\Search Page "http://www.mystartsearch.com/web/?type=ds&ts=[TIMESTAMP]&from=[AFFILIATE ID]&uid=[HARD DRIVE ID]&q={searchTerms}HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\FIREFOX.EXE\shell\open\command\ ""C:\Program Files (x86)\Mozilla Firefox\firefox.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Google Chrome\shell\open\command\ ""C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\ "C:\Program Files\Internet Explorer\iexplore.exe http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\OperaStable\shell\open\command\ ""C:\Program Files (x86)\Opera\Launcher.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Clients\StartMenuInternet\Safari.exe\shell\open\command\ ""C:\Program Files (x86)\Safari\Safari.exe" http://www.mystartsearch.com/?type=sc&ts=1427639391&from=amt&uid=VBOXXHARDDISK_VB540a1e04-12c9aa1bHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\DOMStorage\mystartsearch.comSoftware\Microsoft\Internet Explorer\DOMStorage\www.mystartsearch.comSOFTWARE\mystartsearchSoftwareSOFTWARE\Wow6432Node\mystartsearchSoftwareHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}mystartsearchmystartsearch uninstall
Additional Information
The following directories were created:
%APPDATA%\mystartsearch
The following URL's were detected:
.mystartsearch.commystartsearch.com
I use SpyHunter, will it remove the MyStartSearch Malware?
Please advise.
joseph
YES, Buy the software SpyHunter & RegHunter it's worth the money.
After a second time scan with both programm's it's gone.
Stephan
Spyhunter has found threats in 'E' DVD-Rom with no disk in and 'F' DVD-RW with no disk in. I'm not going to press 'clean' What else has it got wrong!