How to remove Adware.MyWebSearch using spyware blockers

Adware.MywebSearch is a harmful spyware and is represented by a toolbar on Internet Explorer. If you have been infected by Adware.MywebSearch then you will see a genuine looking search bar called My Web Search. This is misrepresented as there is a malicious code which sends information about the user’s computer activity to a remote MyWay Server. You will also get the occasional ads from spyware infected websites such as Smiley Central and Cursor Mania. Using a normal spyware removal procedure may not always work in removing Adware.MywebSearch because it has been coded to stay stealthy, avoiding detection of some spyware blockers. It executes automatically by attaching itself to a browser helping objects or system executable files like winlogon.exe.

The above screen shot shows what the Mywebsearch toolbar looks like. You may have different versions but one thing you should definitely notice is the text saying ‘mywebsearch’ and the smiley button which would lead you to a site like Smiley Central.

About Adware.Mywebsearch

To verify whether you have Adware.Mywebsearch or not, you can also look for the following files and directories. You may manually remove them but they are likely to reappear after you delete them.

Potential directories

C:\Program Files\FunWebProducts
C:\Program Files\MyWebSearch

Potential System files

C:\WINNT\system32\f3PSSavr.scr

Potential registry keys

HKEY_CLASSES_ROOT\FunWebProducts.DataControl.1
HKEY_CLASSES_ROOT\FunWebProducts.DataControl
HKEY_CLASSES_ROOT\FunWebProducts.HistoryKillerScheduler.1
HKEY_CLASSES_ROOT\FunWebProducts.HistoryKillerScheduler
HKEY_CLASSES_ROOT\FunWebProducts.HistorySwatterControlBar.1
HKEY_CLASSES_ROOT\FunWebProducts.HistorySwatterControlBar
HKEY_CLASSES_ROOT\FunWebProducts.HTMLMenu.1
HKEY_CLASSES_ROOT\FunWebProducts.HTMLMenu.2
HKEY_CLASSES_ROOT\FunWebProducts.HTMLMenu
HKEY_CLASSES_ROOT\FunWebProducts.IECookiesManager.1
HKEY_CLASSES_ROOT\FunWebProducts.IECookiesManager
HKEY_CLASSES_ROOT\FunWebProducts.KillerObjManager.1
HKEY_CLASSES_ROOT\FunWebProducts.KillerObjManager
HKEY_CLASSES_ROOT\FunWebProducts.PopSwatterBarButton.1
HKEY_CLASSES_ROOT\FunWebProducts.PopSwatterBarButton
HKEY_CLASSES_ROOT\FunWebProducts.PopSwatterSettingsControl.1
HKEY_CLASSES_ROOT\FunWebProducts.PopSwatterSettingsControl
HKEY_CLASSES_ROOT\FunWebProducts.ShellViewControl.1
HKEY_CLASSES_ROOT\FunWebProducts.ShellViewControl
HKEY_CLASSES_ROOT\MyWebSearch.HTMLPanel.1
HKEY_CLASSES_ROOT\MyWebSearch.HTMLPanel
HKEY_CLASSES_ROOT\MyWebSearch.OutlookAddin.1
HKEY_CLASSES_ROOT\MyWebSearch.OutlookAddin
HKEY_CLASSES_ROOT\MyWebSearch.PseudoTransparentPlugin.1
HKEY_CLASSES_ROOT\MyWebSearch.PseudoTransparentPlugin
HKEY_CLASSES_ROOT\MyWebSearchToolBar.SettingsPlugin.1
HKEY_CLASSES_ROOT\MyWebSearchToolBar.SettingsPlugin
HKEY_CLASSES_ROOT\MyWebSearchToolBar.ToolbarPlugin.1
HKEY_CLASSES_ROOT\MyWebSearchToolBar.ToolbarPlugin
HKEY_CLASSES_ROOT\ScreenSaverControl.ScreenSaverInstaller.1
HKEY_CLASSES_ROOT\ScreenSaverControl.ScreenSaverInstaller
HKEY_LOCAL_MACHINE\SOFTWARE\FocusInteractive
HKEY_LOCAL_MACHINE\SOFTWARE\Fun Web Products
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Outlook\Addins\MyWebSearch.OutlookAddin
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\Word\Addins\MyWebSearch.OutlookAddin
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{00A6FAF1-072E-44cf-8957-5838F569A31D}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{07B18EA1-A523-4961-B6BB-170DE4475CCA}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MyWebSearch bar Uninstall
HKEY_LOCAL_MACHINE\SOFTWARE\MyWebSearch
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Media\WMSDK\sources [f3PopularScreensavers = "C:\Program Files\MyWebSearch\bar\1.bin\F3SCRCTR.DLL"]

Spyware removal instructions

#1 Use your spyware blocker to scan for Adware.MyWebSearch. If Adware.MyWebSearch stops you from opening the spyware blocker then try loading your Computer in Safe mode  and attempt to open your spyware blocker again. If this fails then move on to the next step.

#2 If your spyware blocker is not working then it is time to use an executable DOS file called Smitfraudfix.exe. This spyware removal tool is different to the likes of Spyware Doctor and Malwarebytes Anti-malware because there is no installation required. You can find instructions for Smitfraudfix.exe here.

#3 If none of the two steps above work in removing Adware.MyWebSearch then your next step is to get help from the many experts and security professionals. The majority of them will offer their service for free in forums. Before you prompt them about your spyware problem, you first need to create a log about your computer so that they can analyze where the problem lies with Adware.MyWebSearch. To create a log, you will be using a program called Combofix. Again, you can find instructions for Combofix here.