What is MySearchs?

MySearchs is software application developed by Montiera Technologies LTD. It is most commonly found on computers running Windows 10 with nearly 48.65% of installations running this operating system. MySearchs's installer is typically 1.00 MB in size and installs around 57 files.

MySearchs is most popular in France with 29.73% of installations residing in this country.

MySearchs adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About MySearchs?

Pay-By-Ads from Montiera is a web browser search injector and toolbar that offers bundled legitimate and open-sourced programs, along with additional third-party applications that may not be desired by the user. Although typically installed by default, users are provided with an option to opt-out during or after the installation process. The toolbar communicates with a remote web server using the DNS toolbarservices.com and reports.montiera.com to track various aspects of a user's browsing behaviors and to update its components.

Multiple virus scanners have detected malware in MySearchs.

mysetup.exe (MD5: 6b1bec8908852635eca714c4e15b4898) has been flagged by 20 scanners:

Scanner Software	Version	Result
AVG	15.0.0.4189	Paybyads.893
AVware	1.5.0.21	Montiera (fs)
Baidu-International	3.5.1.41473	Hacktool.Win32.Montiera.aqG
Dr.Web	7.0.10.8210	Adware.Searcher.2712
ESET-NOD32	10732	a variant of Win32/Toolbar.Montiera.R
Fortinet FortiGate	5.0.999.0	Riskware/Montiera
IKARUS anti.virus	T3.1.8.3.0	not-a-virus:Downloader.Montiera
K7 AntiVirus	9.185.14021	Riskware ( 0049c6851 )
K7GW	9.185.14030	Riskware ( 0049c6851 )
Kaspersky	12.0.0.1225	not-a-virus:Downloader.Win32.Montiera.b
Malwarebytes	1.75.0.1	PUP.Optional.MySearchs.A
McAfee	6.0.5.614	Artemis!6B1BEC890885
McAfee-GW-Edition	v2014.2	Artemis
Panda Antivirus	4.6.4.2	Trj/Chgt.I
Qihoo-360	1.0.0.1015	Win32/Virus.Downloader.42e
Sophos	4.98.0	PayByAds
Symantec	20141.1.0.330	Trojan.Gen.2
Trend Micro	9.740.0.1012	TROJ_GEN.R047C0EJR14
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R047C0EJR14
VIPRE Antivirus	34840	Montiera (fs)

mysearchs.exe (MD5: 4ed4ac0a1088e46ecb2f2f6d38b6e361) has been flagged by 23 scanners:

Scanner Software	Version	Result
Antiy-AVL	1.0.0.1	RiskWare[WebToolbar:not-a-virus]/Win32.Montiera
AVG	2015.0.3285	Montiera
Avira	7.11.183.24	Adware/Montiera.d
AVware	1.5.0.21	Montiera (fs)
Baidu-International	4.0.3.141120	PUA.Win32.Montiera.BK
ByteHero BDV	11.20.2014.10	Virus.Win32.Heur.n
ESET-NOD32	8.10670	a variant of Win32/Toolbar.Montiera.L
Fortinet FortiGate	11/20/2014	Riskware/Montiera
IKARUS anti.virus	t3scan.1.8.3.0	not-a-virus:Downloader.Montiera
K7 AntiVirus	13.185.13888	Trojan
K7GW	13.185.13902	Trojan ( 004a07831 )
Kaspersky	14.0.0.2919	not-a-virus:WebToolbar.Win32.Montiera
Malwarebytes	v2014.11.20.02	PUP.Optional.PayByAds.A
McAfee	5600.6941	Artemis!4ED4AC0A1088
McAfee-GW-Edition	7.6941	Artemis!PUP
Sophos	4.98	PayByAds
TrendMicro-HouseCall	7.2.324	Suspicious_GEN.F47V0808
VIPRE Antivirus	34510	Montiera (fs)
Dr.Web	7.0.10.8210	Adware.Searcher.2712
Panda Antivirus	4.6.4.2	Trj/Chgt.I
Qihoo-360	1.0.0.1015	Win32/Virus.Downloader.42e
Symantec	20141.1.0.330	Trojan.Gen.2
Trend Micro	9.740.0.1012	TROJ_GEN.R047C0EJR14

Software Behaviors

Scheduled tasks:

mysetup.exe is scheduled as a task named 'MySearchs Udpater' (Next runs on 16/10/2014 at 08:55).
mysearchs.exe is scheduled as a task named 'MySearchs' (Next runs on 16/10/2014 at 08:55).

Startup Entries

Registry entries:

mysearchs.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'MySearchs' and executes as C:\users\user\appdata\Local\MySearchs\MySearchs\1.3.14.2\mysearchs.exe.

Software Details

URL:

https://www.montiera.com

Support:

–

Installation path:

C:\users\user\appdata\local\pay-by-ads\mysearchs\1.3.11.0

Uninstaller:

"C:\users\user\appdata\Local\Pay-By-Ads\MySearchs\1.3.11.0\mysearchs.exe" /uninstl

Size:

1.00 MB

Language:

English

MySearchs Executable Details

Primary executable:

mysearchs.exe

Name:

MySearchs

Path:

C:\users\user\appdata\local\pay-by-ads\mysearchs\1.3.11.0\mysearchs.exe

MD5:

4ed4ac0a1088e46ecb2f2f6d38b6e361

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

laeo7oll.dll

9bffd749af5b04722525965661ea502c

DLL

Kbfiebgk.dll

7a269a3e964174d8a27404fee4f720d8

DLL

jpikgeld.dll

099290017a36e4c2f478eb1e08362fc1

DLL

jgfipRbl.dll

2b63f9ee0d8890d58f55b73f1aa23b97

DLL

jbv0idkn.dll

d7a873275648c5f0a5a6425b507ad3e1

DLL

jblshkli.dll

e144c5ecfa3ae169b23a6ea4902caaa9

DLL

itofewo7.dll

e69ce0683a5af816dba3f8a53efc7d90

DLL

ipfaAlma.dll

aa34cc103e602eb4f25ecd303ef0052e

DLL

impmT9Oi.dll

b96363e1e806426f2eb2851366439daf

DLL

imkeoofm.dll

cf6a2b524919bd4018a31fa6e8515cc3