What is MySearchs?

MySearchs is software application developed by Montiera Technologies LTD. It is most commonly found on computers running Windows 10 with nearly 48.65% of installations running this operating system. MySearchs's installer is typically 1.00 MB in size and installs around 57 files.

MySearchs is most popular in France with 29.73% of installations residing in this country.

MySearchs adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About MySearchs?

Pay-By-Ads from Montiera is a web browser search injector and toolbar that offers bundled legitimate and open-sourced programs, along with additional third-party applications that may not be desired by the user. Although typically installed by default, users are provided with an option to opt-out during or after the installation process. The toolbar communicates with a remote web server using the DNS toolbarservices.com and reports.montiera.com to track various aspects of a user's browsing behaviors and to update its components.

Multiple virus scanners have detected malware in MySearchs.

mysetup.exe (MD5: 6b1bec8908852635eca714c4e15b4898) has been flagged by 20 scanners:

Scanner Software	Version	Result
AVG	15.0.0.4189	Paybyads.893
AVware	1.5.0.21	Montiera (fs)
Baidu-International	3.5.1.41473	Hacktool.Win32.Montiera.aqG
Dr.Web	7.0.10.8210	Adware.Searcher.2712
ESET-NOD32	10732	a variant of Win32/Toolbar.Montiera.R
Fortinet FortiGate	5.0.999.0	Riskware/Montiera
IKARUS anti.virus	T3.1.8.3.0	not-a-virus:Downloader.Montiera
K7 AntiVirus	9.185.14021	Riskware ( 0049c6851 )
K7GW	9.185.14030	Riskware ( 0049c6851 )
Kaspersky	12.0.0.1225	not-a-virus:Downloader.Win32.Montiera.b
Malwarebytes	1.75.0.1	PUP.Optional.MySearchs.A
McAfee	6.0.5.614	Artemis!6B1BEC890885
McAfee-GW-Edition	v2014.2	Artemis
Panda Antivirus	4.6.4.2	Trj/Chgt.I
Qihoo-360	1.0.0.1015	Win32/Virus.Downloader.42e
Sophos	4.98.0	PayByAds
Symantec	20141.1.0.330	Trojan.Gen.2
Trend Micro	9.740.0.1012	TROJ_GEN.R047C0EJR14
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R047C0EJR14
VIPRE Antivirus	34840	Montiera (fs)

mysearchs.exe (MD5: 4ed4ac0a1088e46ecb2f2f6d38b6e361) has been flagged by 23 scanners:

Scanner Software	Version	Result
Antiy-AVL	1.0.0.1	RiskWare[WebToolbar:not-a-virus]/Win32.Montiera
AVG	2015.0.3285	Montiera
Avira	7.11.183.24	Adware/Montiera.d
AVware	1.5.0.21	Montiera (fs)
Baidu-International	4.0.3.141120	PUA.Win32.Montiera.BK
ByteHero BDV	11.20.2014.10	Virus.Win32.Heur.n
ESET-NOD32	8.10670	a variant of Win32/Toolbar.Montiera.L
Fortinet FortiGate	11/20/2014	Riskware/Montiera
IKARUS anti.virus	t3scan.1.8.3.0	not-a-virus:Downloader.Montiera
K7 AntiVirus	13.185.13888	Trojan
K7GW	13.185.13902	Trojan ( 004a07831 )
Kaspersky	14.0.0.2919	not-a-virus:WebToolbar.Win32.Montiera
Malwarebytes	v2014.11.20.02	PUP.Optional.PayByAds.A
McAfee	5600.6941	Artemis!4ED4AC0A1088
McAfee-GW-Edition	7.6941	Artemis!PUP
Sophos	4.98	PayByAds
TrendMicro-HouseCall	7.2.324	Suspicious_GEN.F47V0808
VIPRE Antivirus	34510	Montiera (fs)
Dr.Web	7.0.10.8210	Adware.Searcher.2712
Panda Antivirus	4.6.4.2	Trj/Chgt.I
Qihoo-360	1.0.0.1015	Win32/Virus.Downloader.42e
Symantec	20141.1.0.330	Trojan.Gen.2
Trend Micro	9.740.0.1012	TROJ_GEN.R047C0EJR14

Software Behaviors

Scheduled tasks:

mysetup.exe is scheduled as a task named 'MySearchs Udpater' (Next runs on 16/10/2014 at 08:55).
mysearchs.exe is scheduled as a task named 'MySearchs' (Next runs on 16/10/2014 at 08:55).

Startup Entries

Registry entries:

mysearchs.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'MySearchs' and executes as C:\users\user\appdata\Local\MySearchs\MySearchs\1.3.14.2\mysearchs.exe.

Software Details

URL:

https://www.montiera.com

Support:

–

Installation path:

C:\users\user\appdata\local\pay-by-ads\mysearchs\1.3.11.0

Uninstaller:

"C:\users\user\appdata\Local\Pay-By-Ads\MySearchs\1.3.11.0\mysearchs.exe" /uninstl

Size:

1.00 MB

Language:

English

MySearchs Executable Details

Primary executable:

mysearchs.exe

Name:

MySearchs

Path:

C:\users\user\appdata\local\pay-by-ads\mysearchs\1.3.11.0\mysearchs.exe

MD5:

4ed4ac0a1088e46ecb2f2f6d38b6e361

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

oXjopidj.dll

f1a36f8721a06854979e5db105f318cc

DLL

owlehndn.dll

034993c10e2db2fa3621ecb81302c216

DLL

ofhbmcjZ.dll

801df2598a3edb747bfbd55caa991f9a

DLL

npEennce.dll

6d4c5e1993b975aeea504c99a2cea9c0

EXE

mysetup.exe

Malware

6b1bec8908852635eca714c4e15b4898

DLL

migkdjUk.dll

d9a1a7fb56bae05bf101240c45d1d0ee

DLL

mbiodVkk.dll

3f0c52bd57b0ec0f6130c762cff9e34d

DLL

lii0andp.dll

db050c0dcaf70fa0c30937e67d617044

DLL

lhiSbabd.dll

1d58e3841e0977de4955e2ed26f04ab6

DLL

ldbocWfi.dll

8c0783c56cc044d3689589f17c4af2e1