Win32/Toolbar.MyWebSearch.AO potentially unwanted (file analysis)

The Win32/Toolbar.MyWebSearch.AO potentially unwanted is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Toolbar.MyWebSearch.AO potentially unwanted virus can do?

Sample contains Overlay data
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/Toolbar.MyWebSearch.AO potentially unwanted?


File Info:
name: 221B7A14324A3FB27003.mlw
path: /opt/CAPEv2/storage/binaries/dfffb1d45359b2b43ce142984196b59e13463f0475c437a29d6457c9a090bb68
crc32: F33835E5
md5: 221b7a14324a3fb2700332939feda902
sha1: d2efbb56789a68862a98d92d53db30361fb21598
sha256: dfffb1d45359b2b43ce142984196b59e13463f0475c437a29d6457c9a090bb68
sha512: 610a16d984ec4e7006bc820f695333b60429f90a429f742445194db34cc35b0265caefa0a77c9035e48dff23a3cf52a88fb5d14fbdc68f94d7a8c5a1a2f9ab4b
ssdeep: 12288:W3VaAe/TAL+9uU/VrXPB/5Yomi9rmPYig2miyzy:yVaAe/TAL+9x/VrXPjYohpqYI
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T1E8945C21B6C0C476C05F2272BD15CAB8A1B978B2CD3A8197BBDD0B2F1F742C59635B52
sha3_384: 14ce3b994735d228504b6a000619c90f6bd7952499f1942f5ede088ac7aca96e73e147d8001247c73d4f888de7eda50e
ep_bytes: 8bff558bec837d0c017505e81a540000
timestamp: 2015-06-17 14:46:47

Version Info:
0: [No Data]

Win32/Toolbar.MyWebSearch.AO potentially unwanted also known as:

Bkav	W32.AIDetectMalware
Lionic	Riskware.Win32.Malicious.1!c
Zillya	Adware.MyWebSearch.Win32.11649
Sangfor	Trojan.Win32.Save.a
ESET-NOD32	a variant of Win32/Toolbar.MyWebSearch.AO potentially unwanted
Avast	Win32:GenMaliciousA-MGY [PUP]
ClamAV	Win.Adware.Mywebsearch-233
Tencent	Malware.Win32.Gencirc.10b1f4e5
Sophos	Generic Reputation PUA (PUA)
Jiangmin	Adware.MySearch.at
Google	Detected
Microsoft	PUA:Win32/MyWebSearch
Xcitium	Application.Win32.MyWebSearch.DBS@5vc1m5
Cynet	Malicious (score: 100)
AhnLab-V3	PUP/Win32.MyWebSearch.R169983
VBA32	AdWare.MySearch
Rising	PUA.MyWebSearch!8.EC (CLOUD)
Yandex	Trojan.GenAsa!qoX6rByLbpQ
Fortinet	Riskware/MyWebSearch
AVG	Win32:GenMaliciousA-MGY [PUP]
DeepInstinct	MALICIOUS

How to remove Win32/Toolbar.MyWebSearch.AO potentially unwanted?

Win32/Toolbar.MyWebSearch.AO potentially unwanted removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X