Remove MySearch123.com redirect (Removal Instruction)




MySearch123.com  “MySearch123.com” is a Browser Hijacker which redirect your favorite browser and replace your default homepage and default search engine with MySearch123.com. MySearch123.com is known to be bundled with free software and offered during the installation process.

It’s often the user itself which allowed the MySearch123.com homepage on their computer. When you install free software from for example; CNET, Download.com, Softonic look at what is offered during installation. The installation of free-software is build to trick you into installing bundled software.

It is advised to always read the End User License Agreements (EULA) or Terms and Agreements before installing software on your computer. Do never click too fast through the installation process [Next] button of software as you will agree to software you might not want to install. If the installer offers a Advanced or Custom option button, click it to find out if there is any other malicious software offered and installed during the installation process.




Remove MySearch123.com

mysearch123-hijack

Automatic Removal for MySearch123.com

informationall software to automatically remove MySearch123.com is free.

Step 1 – Remove MySearch123.com with AdwCleaner

Step 2 – Remove MySearch123.com with MalwareBytes Anti-Malware

Manual Removal for MySearch123.com

Step 1 – Uninstall Unwanted software

Step 2 – Remove Hijacked shortcut

Step 3 – Remove MySearch123.com from your Browser

Step 4 – Clean your browser from MySearch123.com with AVAST Browser Cleanup

If you experience MySearch123.com on Apple Mac OSX instead of Microsoft Windows, follow our generic guide to remove adware from Mac OSX for free. This complete guide includes detailed instructions and a free adware removal tool for Mac OSX.

adwcleanerRemove MySearch123.com – AdwCleaner

AdwCleaner will scan for hijacks and malicious files in your computer and browser.
The AdwCleaner tool will scan for malicious Services, Folders, Files, Shortcuts, Registry keys and Browser Extensions for Internet Explorer, Google Chrome and Firefox. After the scan you can remove the found malicious items using AdwCleaner and clean your computer and browser(s).

download Download AdwCleaner

warningNotice: if you have problems downloading AdwCleaner, because of popups that keep opening when clicking a link because of adware
Goto this url: https://toolslib.net/downloads/viewdownload/1-adwcleaner/

  • Before running AdwCleaner, close all open programs and browsers.
  • Select the executable for AdwCleaner you just downloaded from the link above.
  • Accept their terms by clicking the “I Agree” button

adwcleaner terms

  • Select the Scan button to start scanning your computer and browser for malicious files.

adwcleaner scan

  • to remove the malicious items found by AdwCleaner using the detection Scan, select the Cleaning button.

adwcleaner cleaning

  • Make sure to close all open programs and browser(s) to continue removing the detected items from your computer.
  • Click OK to continue.

adwcleaner close programs - save work

  • Your computer is rebooted after the removal process.

Logfile from AdwCleaner – MySearch123.com removal

# AdwCleaner v4.206 – Logfile created 17/06/2015
# Updated 01/06/2015 by Xplode
# Database : 2015-06-17.1 [Server]
# Operating system : Windows 8.1 Pro (x64)
# Username :
# Running from : adwcleaner_4.206.exe
# Option : Cleaning

***** [ Services ] *****

[#] Service Deleted : abengine
Service Deleted : CltMngSvc
[#] Service Deleted : globalUpdate
[#] Service Deleted : globalUpdatem
[#] Service Deleted : Live Malware Protection
Service Deleted : Orbiter
[#] Service Deleted : pcsuservice
[#] Service Deleted : PrivoxyService
[#] Service Deleted : SCService
Service Deleted : ServiceEverything
Service Deleted : SPPD
[#] Service Deleted : c6651143

***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\1f41686400001a4a
Folder Deleted : C:\ProgramData\{18370edc-343c-bd27-1837-70edc3433b70}
Folder Deleted : C:\ProgramData\{990e0456-4e87-c6c1-990e-e04564e81159}
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FlvPlayer
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\pc speed up
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GAMESDESKTOP
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Crossbrowse
Folder Deleted : C:\Program Files (x86)\AnyProtectEx
Folder Deleted : C:\Program Files (x86)\FLVM Player
Folder Deleted : C:\Program Files (x86)\globalUpdate
Folder Deleted : C:\Program Files (x86)\pc speed up
Folder Deleted : C:\Program Files (x86)\SearchProtect
Folder Deleted : C:\Program Files (x86)\Wajam
[!] Folder Deleted : C:\Program Files (x86)\ORBTR
Folder Deleted : C:\Program Files (x86)\Crossbrowse
Folder Deleted : C:\Program Files (x86)\GUPlayer
Folder Deleted : C:\Program Files (x86)\HighlightSearches
Folder Deleted : C:\Program Files (x86)\Itibiti Soft Phone
Folder Deleted : C:\Program Files (x86)\PriceLess
Folder Deleted : C:\Program Files (x86)\CinemaPlus-3.2cV17.06
Folder Deleted : C:\Program Files (x86)\gmsd_nl_005010005
Folder Deleted : C:\Windows\SysWOW64\config\systemprofile\AppData\Local\abengine
Folder Deleted : C:\Users\SandBox\AppData\Local\globalUpdate
Folder Deleted : C:\Users\SandBox\AppData\Local\Microsoft\Silverlight\OutOfBrowser\Speedchecker.PCSpeedUp
Folder Deleted : C:\Users\SandBox\AppData\Local\SearchProtect
Folder Deleted : C:\Users\SandBox\AppData\Local\SmartWeb
Folder Deleted : C:\Users\SandBox\AppData\Local\Crossbrowse
Folder Deleted : C:\Users\SandBox\AppData\Local\avabvbavad
Folder Deleted : C:\Users\SandBox\AppData\Local\Cinema.Plus.i3V17.06-BrowserExtensionUninstall
Folder Deleted : C:\Users\SandBox\AppData\Local\HQVideo.v4.0V17.06-BrowserExtensionUninstall
Folder Deleted : C:\Users\SandBox\AppData\Local\gmsd_nl_005010005
Folder Deleted : C:\Users\SandBox\AppData\LocalLow\SmartWeb
Folder Deleted : C:\Users\SandBox\AppData\Roaming\AnyProtectEx
Folder Deleted : C:\Users\SandBox\AppData\Roaming\FlvPlayer
Folder Deleted : C:\Users\SandBox\AppData\Roaming\Updater
Folder Deleted : C:\Users\SandBox\AppData\Roaming\mystartsearch
Folder Deleted : C:\Users\SandBox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\AnyProtect PC Backup
Folder Deleted : C:\Users\SandBox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FLVM Player
Folder Deleted : C:\Users\SandBox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GUPlayer
Folder Deleted : C:\Users\SandBox\AppData\Roaming\Mozilla\Firefox\Profiles\vc83s3q1.default\Extensions\[email protected]
Folder Deleted : C:\Users\SandBox\AppData\Roaming\Mozilla\Firefox\Profiles\vc83s3q1.default\Extensions\[email protected]
Folder Deleted : C:\Users\SandBox\AppData\Roaming\Mozilla\Firefox\Profiles\vc83s3q1.default\Extensions\[email protected]
Folder Deleted : C:\Users\SandBox\AppData\Roaming\Mozilla\Firefox\Profiles\vc83s3q1.default\Extensions\[email protected]
Folder Deleted : C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Extensions\papbadoldddalgcjcicnikcfenodpghp
Folder Deleted : C:\ProgramData\hledfljphhhiclambmmkpnmcddelffim
File Deleted : C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage
File Deleted : C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0.localstorage-journal
File Deleted : C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\databases\chrome-extension_papbadoldddalgcjcicnikcfenodpghp_0
File Deleted : C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\papbadoldddalgcjcicnikcfenodpghp
File Deleted : C:\END
File Deleted : C:\Users\Public\Desktop\crossbrowse.lnk
File Deleted : C:\Users\Public\Desktop\FlvPlayer.lnk
File Deleted : C:\Users\Public\Desktop\Knctr.lnk
File Deleted : C:\Windows\apppatch\apppatch64\vcldr64.dll
File Deleted : C:\Windows\AppPatch\Custom\{8a4d5a43-c64a-45ab-bdf4-804fe18ceafd}.sdb
File Deleted : C:\Windows\AppPatch\Custom\Custom64\{cf2797aa-b7ec-e311-8ed9-005056c00008}.sdb
File Deleted : C:\Windows\AppPatch\nbin\VC32Loader.dll
File Deleted : C:\Windows\mlwps.exe
File Deleted : C:\Windows\SysWOW64\abengine.dll
File Deleted : C:\Windows\SysWOW64\abengineOff.ini
File Deleted : C:\Windows\System32\abengine64.dll
File Deleted : C:\Windows\System32\abengineOff.ini
File Deleted : C:\Users\SandBox\AppData\Roaming\dmIqb7mrXqfJmXnGiJ54kX
File Deleted : C:\Users\SandBox\AppData\Roaming\dmIqb7mrXqfJmXnGiJ54kX.exe
File Deleted : C:\Users\SandBox\AppData\Roaming\G0NcvuECay8c0rPUCNBNgk7cd
File Deleted : C:\Users\SandBox\AppData\Roaming\G0NcvuECay8c0rPUCNBNgk7cd.exe
File Deleted : C:\Users\SandBox\AppData\Roaming\G0NcvuECay8c0rPUCNBNgk7cdX
File Deleted : C:\Users\SandBox\AppData\Roaming\G0NcvuECay8c0rPUCNBNgk7cdX.exe
File Deleted : C:\Users\SandBox\AppData\Roaming\me8SJpQilhuzXEBCq83OHwgxd
File Deleted : C:\Users\SandBox\AppData\Roaming\me8SJpQilhuzXEBCq83OHwgxd.exe
File Deleted : C:\Users\SandBox\AppData\Roaming\Mn8cxfLuJTzIUHG5Y
File Deleted : C:\Users\SandBox\AppData\Roaming\Mn8cxfLuJTzIUHG5Y.exe
File Deleted : C:\Users\SandBox\AppData\Roaming\tYvNtGGJZXjr6tQxOBjApxeYJL6
File Deleted : C:\Users\SandBox\AppData\Roaming\tYvNtGGJZXjr6tQxOBjApxeYJL6.exe
File Deleted : C:\Users\SandBox\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\crossbrowse.lnk
File Deleted : C:\Users\SandBox\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Knctr.lnk
File Deleted : C:\Users\SandBox\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\crossbrowse.lnk
File Deleted : C:\Users\SandBox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\crossbrowse.lnk
File Deleted : C:\Users\SandBox\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SmartWeb.lnk
File Deleted : C:\Users\SandBox\Desktop\AnyProtect.lnk
File Deleted : C:\Users\SandBox\Desktop\FLVM Player.lnk
File Deleted : C:\Users\SandBox\Desktop\PC Speed Up.lnk
File Deleted : C:\Program Files (x86)\Mozilla Firefox\browser\searchplugins\GoSearch.xml
File Deleted : C:\Users\SandBox\AppData\Roaming\Mozilla\Firefox\Profiles\vc83s3q1.default\searchplugins\mystartsearch.xml
File Deleted : C:\Users\SandBox\AppData\Roaming\Mozilla\Firefox\Profiles\vc83s3q1.default\searchplugins\trovi.xml
File Deleted : C:\Users\SandBox\AppData\Roaming\Mozilla\Firefox\Profiles\vc83s3q1.default\searchplugins\webssearches.xml
File Deleted : C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_inst.shoppingate.info_0.localstorage
File Deleted : C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxps_inst.shoppingate.info_0.localstorage-journal
File Deleted : C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage
File Deleted : C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.mystartsearch.com_0.localstorage-journal
File Deleted : C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.trovi.com_0.localstorage
File Deleted : C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_www.trovi.com_0.localstorage-journal

***** [ Scheduled tasks ] *****

Task Deleted : AmiUpdXp
Task Deleted : APSnotifierPP1
Task Deleted : APSnotifierPP2
Task Deleted : APSnotifierPP3
Task Deleted : Crossbrowse
Task Deleted : globalUpdateUpdateTaskMachineCore
Task Deleted : globalUpdateUpdateTaskMachineUA
Task Deleted : Malware Cleaner
Task Deleted : PC SpeedUp Service Deactivator
Task Deleted : iren3006
Task Deleted : dmIqb7mrXqfJmXnGiJ54kX
Task Deleted : G0NcvuECay8c0rPUCNBNgk7cd
Task Deleted : G0NcvuECay8c0rPUCNBNgk7cdX
Task Deleted : me8SJpQilhuzXEBCq83OHwgxd
Task Deleted : Mn8cxfLuJTzIUHG5Y
Task Deleted : tYvNtGGJZXjr6tQxOBjApxeYJL6
Task Deleted : 2920a498-9751-4e99-b094-7f4ea2484813-10_user
Task Deleted : 2920a498-9751-4e99-b094-7f4ea2484813-3
Task Deleted : 2920a498-9751-4e99-b094-7f4ea2484813-4
Task Deleted : 2920a498-9751-4e99-b094-7f4ea2484813-5
Task Deleted : 2920a498-9751-4e99-b094-7f4ea2484813-6
Task Deleted : 2920a498-9751-4e99-b094-7f4ea2484813-7
Task Deleted : 7f2da413-1408-4720-a653-b3554342499b-1-6
Task Deleted : 7f2da413-1408-4720-a653-b3554342499b-1-7
Task Deleted : 7f2da413-1408-4720-a653-b3554342499b-10_user
Task Deleted : 7f2da413-1408-4720-a653-b3554342499b-3
Task Deleted : 7f2da413-1408-4720-a653-b3554342499b-4
Task Deleted : 7f2da413-1408-4720-a653-b3554342499b-5
Task Deleted : 7f2da413-1408-4720-a653-b3554342499b-5_user
Task Deleted : 7f2da413-1408-4720-a653-b3554342499b-6
Task Deleted : 7f2da413-1408-4720-a653-b3554342499b-7
Task Deleted : cd864893-9a0f-4113-b361-7bb039967e94-10_user
Task Deleted : cd864893-9a0f-4113-b361-7bb039967e94-3
Task Deleted : cd864893-9a0f-4113-b361-7bb039967e94-4
Task Deleted : cd864893-9a0f-4113-b361-7bb039967e94-5
Task Deleted : cd864893-9a0f-4113-b361-7bb039967e94-6
Task Deleted : cd864893-9a0f-4113-b361-7bb039967e94-7

***** [ Shortcuts ] *****

Shortcut Disinfected : C:\Users\SandBox\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

***** [ Registry ] *****

Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [[email protected]]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [[email protected]]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [pcspeedup]
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickCtrl.10
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.OneClickProcessLauncherMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdate.Update3WebControl.4
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoCreateAsync.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CoreMachineClass.1
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.CredentialDialogMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.OnDemandCOMClassSvc.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.ProcessLauncher.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3COMClassService.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachine.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebMachineFallback.1.0
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc
Key Deleted : HKLM\SOFTWARE\Classes\globalUpdateUpdate.Update3WebSvc.1.0
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=10
Key Deleted : HKLM\SOFTWARE\MozillaPlugins\@staging.google.com/globalUpdate Update;version=4
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [SmartWeb]
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.DataContainer
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.DataContainer.1
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.DataController
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.DataController.1
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.DataTable
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.DataTable.1
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.DataTableFields
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.DataTableFields.1
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.DataTableHolder
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.DataTableHolder.1
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.LSPLogic
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.LSPLogic.1
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.ReadOnlyManager
Key Deleted : HKLM\SOFTWARE\Classes\abengineLib.ReadOnlyManager.1
Key Deleted : HKLM\SOFTWARE\Classes\PCSU.Registry
Key Deleted : HKLM\SOFTWARE\Classes\PCSU.SysUtils
Key Deleted : HKLM\SOFTWARE\Classes\PCSU.SysUtils.1
Key Deleted : HKLM\SOFTWARE\Classes\PCSU.Registry.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Mediaplayer\Shiminclusionlist\crossbrowse.exe
Key Deleted : HKLM\SOFTWARE\Classes\AppID\abengine.EXE
Key Deleted : HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\abengine
Key Deleted : HKLM\SOFTWARE\Classes\CRSBRWSHTML
Key Deleted : HKLM\SOFTWARE\Clients\StartMenuInternet\Crossbrowse
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\crossbrowse.exe
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Itibiti.exe]
Value Deleted : HKLM\SOFTWARE\Classes\.htm\OpenWithProgids [CRSBRWSHTML]
Value Deleted : HKLM\SOFTWARE\Classes\.html\OpenWithProgids [CRSBRWSHTML]
Value Deleted : HKLM\SOFTWARE\RegisteredApplications [Crossbrowse]
Key Deleted : HKLM\SOFTWARE\Classes\AppID\globalupdate.exe
Key Deleted : HKLM\SOFTWARE\Classes\PBB8102CC_E313_4EC6_B272_50571B489633_.PBB8102CC_E313_4EC6_B272_50571B489633_
Key Deleted : HKLM\SOFTWARE\Classes\PBB8102CC_E313_4EC6_B272_50571B489633_.PBB8102CC_E313_4EC6_B272_50571B489633_.9
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [gmsd_nl_005010005]
Key Deleted : HKLM\SOFTWARE\3d4c0999-05aa-c587-8b92-18604b705e93
Key Deleted : HKLM\SOFTWARE\6857219b-52f7-4585-96a9-2a6651222ec1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{12DA0E6F-5543-440C-BAA2-28BF01070AFA}{c6651143}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3278F5CF-48F3-4253-A6BB-004CE84AF492}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{3B5702BA-7F4C-4D1A-B026-1E9A01D43978}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{577975B8-C40E-43E6-B0DE-4C6B44088B52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{69F256DF-BA98-45E9-86EA-FC3CFECF9D30}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{6E87FC94-9866-49B9-8E93-5736D6DE3DD7}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{7E49F793-B3CD-4BF7-8419-B34B8BD30E61}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{834469E3-CA2B-4F21-A5CA-4F6F4DBCDE87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{8529FAA3-5BFD-43C1-AB35-B53C4B96C6E5}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{ADBC39BE-3D20-4333-8D99-E91EB1B62474}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B89F5C49-51DB-4974-AB5A-E25901AA339C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CFC47BB5-5FB5-4AD0-8427-6AA04334A3FC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E06CA7F5-BA34-4FF6-8D24-B1BDC594D91F}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E0ADB535-D7B5-4D8B-B15D-578BDD20D76A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E9B5B0D2-D08A-49FC-8B5C-159B60BAA268}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{F6421EE5-A5BE-4D31-81D5-C16B7BF48E4C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FD8E81D0-F5FE-4CB1-9AEA-1E163D2BAB78}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{028F96B8-C73A-4C60-B82F-3944A19B046E}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{51F7DE65-A990-4213-BDB9-C2657FA7F3F4}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{879F721E-7F23-4B7F-B65B-F5A8F518864A}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A5544F7B-C413-4CAC-8DB4-9A8D1986DD86}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{B9EE49F9-62A3-408D-858F-4ED9A23BAA24}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BF6D8439-BAC1-4E73-94FE-9910D098AE00}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{D4F14684-336F-44FC-8D9E-8A73DAE003EC}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{BB8102CC-E313-4EC6-B272-50571B489633}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{1BCB34DC-BA6D-4B44-B786-4E259598A7C8}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{74CA59B5-0066-48C3-9D1A-84E0C0BB9AD7}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BB8102CC-E313-4EC6-B272-50571B489633}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BB8102CC-E313-4EC6-B272-50571B489633}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BB8102CC-E313-4EC6-B272-50571B489633}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{BB8102CC-E313-4EC6-B272-50571B489633}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5645E0E7-FC12-43BF-A6E4-F9751942B298}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{5E89ACE9-E16B-499A-87B4-0DBF742404C1}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{BB8102CC-E313-4EC6-B272-50571B489633}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4AEC2270-2E5F-40C8-BE5A-E5A5264714C0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{52E8E39B-2773-448F-BC20-547CD8DA4685}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{62163814-0C94-4DC3-BA99-5E9E2420C914}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{68AEA825-D48B-4A56-87F0-6FCE988A2C48}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{6A0F07D3-F28E-4F45-8D4C-BBF8000F5BB8}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7AF435BC-80A9-466E-938B-32E4482EBD65}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{85CEBABD-A775-41E2-8B67-FE06104F06ED}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{AE92A5AB-E575-4487-BCC0-96D333E5346C}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C622315B-3049-43D4-9B41-D4B2DC2CD706}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{CDB85458-AE08-4106-B699-B946FF4A61CD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{025EEF9C-90F5-417E-9196-09FA4AAB4C92}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{03F13205-38FF-4361-BECE-EE939A002FA2}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1FAAF6AB-B931-4D05-BA12-B0ECCCCE2D0F}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{BB8102CC-E313-4EC6-B272-50571B489633}
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command
Data Restored : HKEY_LOCAL_MACHINE\SOFTWARE\Clients\StartMenuInternet\Google Chrome\shell\open\command
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{015DB5FA-EAFB-4592-A95B-F44D3EE87FA9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{20B9D1AE-AD1A-38B4-87FE-AF278DA9861D}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{20B9D1AE-AD1A-38B4-87FE-AF278DA9861D}
Key Deleted : HKCU\Software\AnyProtect
Key Deleted : HKCU\Software\GlobalUpdate
Key Deleted : HKCU\Software\InstalledBrowserExtensions
Key Deleted : HKCU\Software\SearchProtect
Key Deleted : HKCU\Software\Speedchecker Limited
Key Deleted : HKCU\Software\Tutorials
Key Deleted : HKCU\Software\TutoTag
Key Deleted : HKCU\Software\WajIEnhance
Key Deleted : HKCU\Software\Super Optimizer
Key Deleted : HKCU\Software\CrossBrowser
Key Deleted : HKCU\Software\Crossbrowse
Key Deleted : HKCU\Software\YorkNewCin
Key Deleted : HKCU\Software\HighDefAction
Key Deleted : HKCU\Software\ArenaHD
Key Deleted : HKCU\Software\CinemaPlus-3.2cV17.06
Key Deleted : HKCU\Software\CinemaPlus-3.2cV17.06-nv
Key Deleted : HKCU\Software\CinemaPlus-3.2cV17.06-nv-ie
Key Deleted : HKCU\Software\Cinema.Plus.i3V17.06
Key Deleted : HKCU\Software\HQVideo.v4.0V17.06
Key Deleted : HKCU\Software\AppDataLow\Software\Crossrider
Key Deleted : HKCU\Software\AppDataLow\Software\SmartWeb
Key Deleted : HKLM\SOFTWARE\FlvPlayer
Key Deleted : HKLM\SOFTWARE\GlobalUpdate
Key Deleted : HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : HKLM\SOFTWARE\SearchProtect
Key Deleted : HKLM\SOFTWARE\Speedchecker Limited
Key Deleted : HKLM\SOFTWARE\Tutorials
Key Deleted : HKLM\SOFTWARE\mystartsearchSoftware
Key Deleted : HKLM\SOFTWARE\ORBTR
Key Deleted : HKLM\SOFTWARE\GAMESDESKTOP
Key Deleted : HKLM\SOFTWARE\{12A61307-94CD-4F8E-94BC-918E511FAA81}
Key Deleted : HKLM\SOFTWARE\SPPDCOM
Key Deleted : HKLM\SOFTWARE\TabNav
Key Deleted : HKLM\SOFTWARE\Crossbrowse
Key Deleted : HKLM\SOFTWARE\YorkNewCin
Key Deleted : HKLM\SOFTWARE\HighDefAction
Key Deleted : HKLM\SOFTWARE\ArenaHD
Key Deleted : HKLM\SOFTWARE\FFPluginHp
Key Deleted : HKLM\SOFTWARE\CinemaPlus-3.2cV17.06
Key Deleted : HKLM\SOFTWARE\CinemaPlus-3.2cV17.06-nv
Key Deleted : HKLM\SOFTWARE\CinemaPlus-3.2cV17.06-nv-ie
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\FlvPlayer
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\Cinema.Plus.i3V17.06
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Uninstall\HQVideo.v4.0V17.06
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AnyProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FLVM Player
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SearchProtect
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SoftwareUpdater
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SmartWeb
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\mystartsearch uninstall
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Crossbrowse
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{7ADF667E-E14D-4D2C-827C-B0108F0D93BC}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{75F9BF4A-AF67-A478-A37B-31D73186D3F3}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\CinemaPlus-3.2cV17.06
Key Deleted : [x64] HKLM\SOFTWARE\InstalledBrowserExtensions
Key Deleted : [x64] HKLM\SOFTWARE\Speedchecker Limited
Key Deleted : [x64] HKLM\SOFTWARE\YorkNewCin
Key Deleted : [x64] HKLM\SOFTWARE\HighDefAction
Key Deleted : [x64] HKLM\SOFTWARE\ArenaHD
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PCSU-SL_is1
Data Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] – C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC32Loader.dll
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] – C:\PROGRA~2\SearchProtect\SearchProtect\bin\VC64Loader.dll
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\globalupdate.exe
Data Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] – hxxp=127.0.0.1:52622;hxxps=127.0.0.1:52622
Data Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] – 1
Data Deleted : HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] – <-loopback>
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyServer] – hxxp=127.0.0.1:52622;hxxps=127.0.0.1:52622
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyEnable] – 1
Data Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] – <-loopback>

***** [ Web browsers ] *****

-\\ Internet Explorer v11.0.9600.17840

Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
Setting Restored : HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURls [Tabs]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
Setting Restored : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]

-\\ Mozilla Firefox v38.0.5 (x86 en-GB)

[vc83s3q1.default\prefs.js] – Line Deleted : user_pref(“browser.newtab.url”, “chrome://quick_start/content/index.html”);
[vc83s3q1.default\prefs.js] – Line Deleted : user_pref(“extensions.XRU22W5evqZBrwb4.scode”, “(function(){try{if(window.location.href.indexOf(\”rTa4rTa7qTa5rTgEqHk4rja9pa\”)>-1){return;}}catch(e){}try{var d=[[\”search.asistents.com\”,\”cryptogmai[…]
[vc83s3q1.default\prefs.js] – Line Deleted : user_pref(“extensions.aAVJYFVOD75109374HCDE39471360com72895.72895.internaldb.monetization_plugin_bundledUrls.value”, “%7B%22dealply_s%22%3A%7B%22urls%22%3A%5B%22ssfiles.com%22%5D%7D%2C%22dealply_p%22%[…]
[vc83s3q1.default\prefs.js] – Line Deleted : user_pref(“extensions.crossrider.bic”, “14e0275879de4d45a676498e1f7e28d8”);
[vc83s3q1.default\prefs.js] – Line Deleted : user_pref(“extensions.quick_start.enable_search1”, false);
[vc83s3q1.default\prefs.js] – Line Deleted : user_pref(“extensions.quick_start.sd.closeWindowWithLastTab_prev_state”, false);

-\\ Google Chrome v43.0.2357.124

[C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Web Data] – Deleted [Search Provider] : hxxp://www.mystartsearch.com/web/?type=ds&ts=1434558396&z=c255abf673a37258fdc2e89g8zfcazdw1w9b5cdz9c&from=ima&uid=SanDiskXSSDXi110X128GB_150900125693&q={searchTerms}
[C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Web Data] – Deleted [Search Provider] : hxxp://www.trovi.com/Results.aspx?gd=&ctid=CT3322197&octid=EB_ORIGINAL_CTID&ISID=M73880265-206F-4063-8010-9DED79D12180&SearchSource=58&CUI=&UM=8&UP=SP52EDDB37-CB42-4C7E-87A4-F5FF931309DB&D=061715&q={searchTerms}&SSPV=
[C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Web Data] – Deleted [Search Provider] : hxxps://gosearch.me/?q={searchTerms}&u=5fffa041e28324c5db6e23a2f6afc417&c=up1&src=srch&inst=1434559377
[C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] – Deleted [Homepage] : hxxp://www.trovi.com/?gd=&ctid=CT3322197&octid=EB_ORIGINAL_CTID&ISID=M73880265-206F-4063-8010-9DED79D12180&SearchSource=55&CUI=&UM=8&UP=SP52EDDB37-CB42-4C7E-87A4-F5FF931309DB&D=061715&SSPV=
[C:\Users\SandBox\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] – Deleted [Startup_URLs] : 4A990325DFFC3592E952DAEBE80D89DAD2F7C457F26050B522CFE4F649E06E6D”},”software_reporter”:{“prompt_reason”:”6DFBE4BD8C90C6887522E7F162B57FF4860FCBBFFC199EEE330716AD9C977753″,”prompt_seed”:”E5076FC3C6D7BE9B8E6E0B4F313947820DD248DA1098D1FC3506F0DF98B0F641″,”prompt_version”:”02ED36424C7BFA7CD4E2D646F4FA0579F1B9E6E76B842512BB45814362C8AD2D”},”sync”:{“remaining_rollback_tries”:”C815226D289046BC3AAA55AF2BEC43CB593BE7561EAC3F6A5A5CA87B530BA53B”}},”super_mac”:”666C70008EEF3920508106E706F68A42033E3CD01AEC9BC544E873A0DDCC5D66″},”session”:{“restore_on_startup”:4,”startup_urls”:[“hxxps://gosearch.me/?u=5fffa041e28324c5db6e23a2f6afc417&c=up1&src=hp&inst=1434559377

*************************

malwarebytesRemove MySearch123.com – MalwareBytes Anti-Malware

downloadDownload MalwareBytes Anti-Malware

Malwarebytes Anti-Malware Free’s industry-leading scanner detects and removes malware like worms, Trojans, rootkits, rogues, spyware, and more. All you have to do is launch Malwarebytes Anti-Malware Free and run a scan. It’s that simple.
Or if you want even better protection, consider Malwarebytes Anti-Malware Premium and its instant real-time scanner that automatically prevents malware and websites from infecting your PC.
Either way you’re crushing malware and foiling hackers.
MalwareBytes Anti-Malware works great alongside Antivirus software, both MalwareBytes Anti-Malware and Antivirus software go along and provide the best protection for your computer.

informationInstall MalwareBytes Anti-Malware using it’s installation wizard.

MalwareBytes Anti-Malware needs no configs or specific settings, just install and you are ready to scan your computer for malware and free removal.

  • Select Scan Now to perform a anti-malware scan.

malwarebytes - scan now

  • Malwarebytes computer is scanning for malicious items, this might take a while, please wait for MalwareBytes Anti-Malware to finish.

malwarebytes - scanning process

  • When the detection scan is finished, a window appears with the malware found by MalwareBytes.
    To remove the found malware from your computer, select the Remove Selected button.

malwarebytes - remove selected

  • All found items will be put in quarantine, if MalwareBytes Anti-Malware requires to a reboot to do so, please allow MalwareBytes Anti-Malware to reboot Windows.

malwarebytes - finished

Remove MySearch123.com malicious software – Windows 7

  1. Open Programs and Features by clicking the Start button start button - windows 7, clicking Control Panel, clicking Programs, and then clicking Programs and Features.
  2. Select MySearch123 uninstall, Go_MySearch123, WPM 10.8.0.123 and then click Uninstall. Some programs include the option to change or repair the program in addition to uninstalling it, but many simply offer the option to uninstall. To change a program, click Change or Repair 18abb370-ac1e-4b6b-b663-e028a75bf05b_48. If you’re prompted for an administrator password or confirmation, type the password or provide confirmation.
    important Remove all recent installed software, sort by “Installed on” to easily find recent installed software.
unwanted-software

Example: unwanted software, remove anything you don’t need (your program-list might look different)

 

Remove MySearch123.com software – Windows 8

  1. Swipe in from the right edge of the screen, and then tap Search.
    (If you’re using a mouse, point to the upper-right corner of the screen, move the mouse pointer down, and then click Search.)
  2. Enter control panel in the search box, and then tap or click Control Panel.
  3. Under View by: select Large Icons, and then tap or click Programs and features.
  4. Tap or click MySearch123 uninstall, Go_MySearch123, WPM 10.8.0.123, and then tap or click Uninstall.
    important Remove all recent installed software, sort by “Installed on” to easily find recent installed software.
unwanted-software

Example: unwanted software, remove anything you don’t need (your program-list might look different)

Remove Shortcuts hijacked by Hijack

Hijack hijacks all shortcuts from your browser(s) on your computer and adds a argument behind the executable. You need to manually remove this argument from the executable.
Notice: the easiest way to get rid of this shortcut hijack is to remove all shortcuts from your browser(s) and create hem again.

Internet Explorer.lnk – C:Program FilesInternet Exploreriexplore.exe http://MySearch123.com/
Google Chrome.lnk – C:Program Files (x86)GoogleChromeApplicationchrome.exe http://MySearch123.com/
Mozilla Firefox.lnk – C:Program Files (x86)Mozilla Firefoxfirefox.exe http://MySearch123.com/

 

  1. Select the shortcut from your browser
  2. Right click the shortcut and select Properties
  3. Goto tab Shortcut
  4. At Target: remove anything behind the executable.
    Example: “C:Program FilesInternet Exploreriexplore.exe” http://MySearch123.com/
  5. Remove the text in red, notice the closing quote after iexplore.exe, do not remove it.

Internet Explorer

 

Google Chrome

 

Mozilla Firefox

 Remove MySearch123.com – Internet Explorer

  1. Open the desktop, and then tap or click the Internet Explorer icon on the taskbar.
  2. Tap or click the Tools button f2d3a394-a4c3-4747-989e-cf3f6b782b2f_43, and then tap or click Manage add-ons.
  3. Under Show, tap or click All add-ons, and then select all unwanted browser helper objects.
  4. If the add-on can be deleted, you’ll see the Remove option. Tap or click Remove and then tap or click Close. Otherwise click Disable button.

Change your home page and Search Provider for Internet Explorer

Change Home Page Internet Explorer

  1. Open Internet Explorer by clicking the Internet Explorer icon on the taskbar.
  2. Click the Tools button , and then click Internet options.
  3. On the General tab, under Home page, enter the URL of the site you want to set as a home page.
  4. Click Apply, and then tap or click OK. The next time you open a new browsing session or window (or tap or click the Home button), your home pages will be loaded automatically.

Change Search Provider Internet Explorer

  1. Open Internet Explorer by clicking the Internet Explorer icon on the taskbar.
  2. Click the Tools button , and then click Internet options.
  3. Select Manage Addons
  4. Select Search Providers
  5. Right Click BING Select Set as Default
  6. Optional: Search for any other Search Provider you do not need and right click select Remove

Remove MySearch123.com – Google Chrome

Uninstall an extension to remove it completely from the Google Chrome browser. Extensions are extra features and functionality that can easily be added to Google Chrome. By using extensions, you can customize Google Chrome with features you like, while keeping your browser free of things that you don’t use. Unfortunately there are also extensions that are used to collect personal and internet behavior from your computer for revenue. Make sure you delete all extensions from Google Chrome that you do not need, know or trust. Keep the extensions in Google Chrome clean for the best internet experience while using Google Chrome.

  1. Click the Chrome menu SNP_2696434_en_v1 on the browser toolbar.
  2. Click Tools.
  3. Select Extensions.
  4. Click the trash can icon SNP_2726707_en_v0 by all unwanted or unknown extensions you’d like to completely remove.
  5. A confirmation dialog appears, click Remove. If the extension is Installed by Enterprise Policy follow this guide.

Change Home Page Google Chrome

  1. Click the Chrome menu SNP_2696434_en_v1 on the browser toolbar.
  2. Select Settings.
    • Add the home button to the browser toolbar
      Homepage button is off by default. Select the “Show Home button” checkbox in the “Appearance” section to show it on the browser toolbar.
    • Set your homepage
      When the “Show Home button” checkbox is selected, a web address appears below it. If you want the Homepage button to open up a different webpage, click Change to enter a link. You can also choose the New Tab page as your homepage.

google-appearance

 

Change Search Provider Google Chrome

  1. Click the SNP_2696434_en_v1 Chrome menu on the browser toolbar and select Settings.
  2. In the “Search” section, select Google from the drop down menu.
  3. Now when you search, you’ll be taken to Google!
  4. Optional: If you would like to remove the malicious search engine click the Manage Search Engines button
  5. Hover over Google as select the blue Make Default button
  6. Hover over the malicious Search Engine and select the X button next to the Make Default button to remove the Search Engine.

google-chrome-logoReset Google Chrome Synchronization settings

Google Chrome allows you to sync data between the Google Chrome browsers on different computers and devices as tablets or smartphones. This data, like passwords, autofills, browser extensions, and preferences, are be personal and worth securing. You can encrypt your data in Google Chrome’s browser settings, but to clear it, you’ll have to visit your Google Dashboard.

As Google Chrome also syncs the browser extensions, it is possible the malicious browser extension you removed in the previous step is coming back each time Google Chrome syncs itself.

  1. Click the Chrome menu SNP_2696434_en_v1 on the browser toolbar.
  2. Click Settings
  3. Click the blue hyperlink “Google Dashboard” next to “Manage your synced data on“.google chrome - dashboard
  4. Scroll to the end of the settings and select “Stop and Clear”  or “Stop and Erase“.google chrome - erase
  5. Read the informational window and confirm by selecting “OK“.google chrome - confirm erase
  6. Important to know, it might take several hours to completely remove the data from Google it’s servers.

Remove MySearch123.com – Mozilla Firefox

  1. At the top of the Firefox window, click on the Firefox button, and then click Add-ons. The Add-ons Manager tab will open.
  2. In the Add-ons Manager tab, select the Extensions panel.
  3. Select all unwanted or unknown extensions you wish to remove.
  4. Click the Remove or Disable button.
  5. Click Restart now if it pops up. Your tabs will be saved and restored after the restart.

Change Home Page Mozilla Firefox

  1. At the top of the Firefox window, click on the Firefox button and then select Options
  2. Select the General panel. In the Startup box, click Restore to Default or set yourself a new homepage next to Home Page: .
  3. Click OK to close the Options window

Change Search Provider Mozilla Firefox

In the Search Engines Manager, you can add new search engines that have been released for use with Firefox.

  1. To open the Search Engines Manager, click the search engine icon and select Manage Search Engines….

mozilla-firefox-search-engines

 

  1. To add a search engine, click Get more search engines…. The Mozilla Add-ons Search Tools page is displayed.
  2. To add one of the displayed search engines, click the Add to Firefox button. The Add Search Engine dialog is displayed.
  3. To begin using the search engine immediately after you add it, click Start using it right away.
  4. To add the selected search engine, click Add.
  5. The search engine is now available through the search engines list in the Search bar.

avast_logoRemove MySearch123.com redirect with AVAST Browser Cleanup

download Download AVAST Browser Cleanup

  • Open Avast Browser Cleanup
  • Review the browser extensions with a poor reputation, found by Avast Browser Cleanup. You can remove them separately or select the Remove all add-ons button in the top right corner (recommended).

avast browser cleanup - remove all extensions

  • Select your default Search Provider, either Yahoo or Bing, choose one.

avast browser cleanup - select search provider

  • All extensions are now successfully removed from your browser(s). If you would like to reset or remove other extensions from your browser, use the Internet Explorer, Firefox and Chrome button on the left menu in Avast Browser Cleanup.

avast browser cleanup - all extensions removed

  • To Reset your browser, select Reset Settings
  • Select Exclude add-ons with a good rating to review possible other extensions that might cause ads.
  • Select Remove to remove a extension
  • Repeat this step for either Firefox and Google Chrome using the left menu.

avast browser cleanup - remove individual extensions


information If you still experience problems with MySearch123.com, run a scan with Emsisoft Anti-Malware using this instruction.


 

 

Leave a Reply