Exterminate It! Antimalware

malpedia

Known threats:699,742 Last Update:October 27, 11:19

Testimonials

I am currently evaluating Exterminate It!. I had no problems with downloading and activating the software. It’s easy to navigate and follow. Would recommend giving it a trial.

Jon R D.

File: MyStart Search.xml

Location of MyStart Search.xml and Associated Malware

Check whether MyStart Search.xml is present in the following locations:

Windows 2000, Windows XP, Windows Server 2003 specific MyStart Search.xml file locations:

  • C:\Documents And Settings\USER_NAME\Application Data\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\MyStart Search.xml
  • C:\Documents And Settings\USER_NAME\Application Data\Mozilla\Firefox\Profiles\1crgqdf1.default\searchPlugins\MyStart Search.xml
  • C:\Documents And Settings\USER_NAME\Application Data\Mozilla\Firefox\Profiles\12sq8u2m.default\searchPlugins\MyStart Search.xml

Windows Vista, Windows Server 2008, Windows 7, Windows 8 specific MyStart Search.xml file locations:

  • C:\Users\USER_NAME\AppData\Roaming\mozilla\firefox\profiles\[%PROFILE_FOLDER%]\searchPlugins\MyStart Search.xml
  • C:\Users\USER_NAME\AppData\Roaming\Mozilla\Firefox\Profiles\1crgqdf1.default\searchPlugins\MyStart Search.xml
  • C:\Users\USER_NAME\AppData\Roaming\Mozilla\Firefox\Profiles\12sq8u2m.default\searchPlugins\MyStart Search.xml

If you find MyStart Search.xml file in any of these locations, your computer is very likely to be infected with the following malware:

IMPORTANT: Malware files can be camouflaged with the same file names as legitimate files. The MyStart Search.xml file is associated with malware only if found in the locations listed above.

Notes:

Different Variations of MyStart Search.xml File^

File SizeFile Md5Last Seen
21153BC25BDD9591D217B5EB88F2A6A6CA88Mar 28, 2014
212099A0FF2FA9CA2C4EB44289B14957E1E5Mar 28, 2014
21203DA55F20BC5864D44161B168B5D977F9Apr 2, 2014
2115BFD7DBDEC4D9470C26CE328B842547BDApr 2, 2014
2203185E1245D68A7DDAC29FA55BE5AD3954Apr 6, 2014
2133C49A1804F9A4893E7FB673D278B0C1C7Apr 7, 2014
21157483013DC61C2824B971FD4F45879732Apr 8, 2014
220351BBB246CDE21D54E55854ED72AFB629Apr 8, 2014
2144E1F93831370B407084B9351EC4A4FB91Apr 8, 2014
21153C519D4BEDB23F105CCD0FD8D2EF073CApr 12, 2014
212011C759E4CB645B6339E3F1B9A6EA4685Apr 12, 2014
2115F086CA9D63DB0E8A51F69CD64A484C7BApr 12, 2014
2130AADB2098A54172066DB621B8CC6D65CDApr 14, 2014
21177FF4AAE39038C0400E23DDCD060EDABEApr 15, 2014
2203F88A865A6D444E603F3D6B50A6049F43Apr 16, 2014
2144B01B4C7160A71B5314C2C92335DE8283Apr 17, 2014
2120B245D6C71E5733CA020264182A8015B0Apr 18, 2014
21157CA9AB2441A694D3884BE5DBCAF48E03Apr 22, 2014
2115AB745E82A9D7ADD9DB9C218E05D84377Apr 22, 2014
2185179B28052BD7B34B8A7B5D4AE49E8901Apr 24, 2014
2165DFC72A94B5F43119329CBCFFD5766021Apr 25, 2014
21443BB4353DF38C83C7D5C677E08746B419May 3, 2014
2133420AA8138FC6F0BF45F517873C1E5889May 4, 2014
21449EE28795BB4BB50A23F1A323477841F6May 6, 2014
213362DE6C4FFAA6E9E6670C87A3484F279EMay 7, 2014
22033D519FFEB31C4E1ADDA2CD4E9365D4DFMay 7, 2014
2144D311B426627562DA7095A9E61AD43A66May 7, 2014
21151C9E79D0592594E1057778315DC01BD5May 8, 2014
21338E3A94443636D2BFE72E6E4AE088CB81May 11, 2014
21871ACB82F0BFDE03AC842C973E971D445EMay 14, 2014
21934E584CB564BE4F8A09955ACD34E5F055May 14, 2014
2115C2141C7E259CF787A60498FC794CEEFFMay 19, 2014
21975EB128DA00CB39AE610D8E33BEACF1F4May 19, 2014
2115B070B2A2BEAF5DE1F6104E369FF5345BMay 20, 2014
21339E28270E5D6B66208F649D1872BF5010May 21, 2014
2133980498D620DEE91332F9B1FEB03DAA16May 27, 2014
220387D858FDCA2AF445EB7D4C1BF6693180May 28, 2014
219749FA47B58886C5ADA52BA6E4D00647AFMay 28, 2014
2203032487CED9F915BD32AEA425FBAD666EMay 31, 2014
2203FA70E19206E8ACF0E47870B8D57C64C7Jun 4, 2014
21725F436A9FB6555C6F761AC5A269A34170Jun 7, 2014
22033D297EBDB1AC08F8C31ECDF608A0B3FFJun 8, 2014
213326C1968867D74E9D4DC67B9FE98127F4Jun 10, 2014
21159FEA16E7DAD5811C6A212DDF5A578AC1Jun 22, 2014
2115E13555550746BEE3017C93D62B4E9C4BJun 22, 2014
2133A1799C0C07387F023005337C071DF07EJun 22, 2014
2120B9B0A6F74A08C21A3380E73D0017AB58Jun 25, 2014
220384027C8D2CD359D343BE7897A7269516Jun 27, 2014
2203516AEBC24B648E669A1837BC4CB25AA8Jun 28, 2014
21303AE391D9B5A7251CEFE9EBFE70D8099AJul 6, 2014
21331B3AC80D5D25A62D86FE6F5D62CAA4A4Jul 6, 2014
2133F7E2D98E1DC4D0D3E16101B119276715Jul 6, 2014
22037C6AD947781E07CE104E21E8029B14C9Jul 6, 2014
22032D4ACC693E90622C91376F8FD0AC6B70Jul 9, 2014
2133CE241AF782295B2AD20C86746915FC74Jul 12, 2014
21155489171F746C0D7D34C0451A7074B048Jul 12, 2014
211561B1CD908EAEAEEBEF4D01081F7C1D77Jul 27, 2014
21157F1AAC93E3C808000C29B89E3A2F03B0Jul 28, 2014
214406B19F9F32520EF8D2C240BFDB31354EJul 29, 2014
2179DD4B280441A696F81B59F0B7E3DBCFE1Jul 31, 2014
2203025E1DD23F62870069C56C64110AC26BAug 4, 2014
2115BB864020EA8EB9BCF6C6D5B9610DA5CEAug 6, 2014
211595452ECA85E949FB83B8C50FA1520E97Aug 6, 2014
213165FAB3255E5EB1501E0BA4DFAACB61EEAug 9, 2014
22030DCC647D57168B10CBC0822A5402118DAug 9, 2014
22036F624154A26B16E48E91071699B083DDAug 11, 2014
2185669C5102F3816C3FDC13EBD538E4620DAug 12, 2014
214522FD9137C05FE9E49BDCB01C555B094AAug 17, 2014
2115924A3CC673CB6A4D3C2050A4182963F6Aug 17, 2014
2115A6BDFD512A30434A7C9630B99D6BCADDAug 17, 2014
22032F3F991FB5B2A1048E2AE7BCC06ADD93Aug 24, 2014
2115705D177051CEE93A45803333017DF3EFAug 24, 2014
214452913CA5329E69DE85B8E1AA4FE5123DAug 26, 2014
21831551B581957EC917335CE17DD3BF9CDCAug 26, 2014
21837E940C635BFB32BDD2639415FF41129EAug 30, 2014
22078221CFB78AD1DB13DA4970F0C8517D10Aug 30, 2014
220375EFF4E636E6DBBD14A9E3ABA61B1E0FSep 1, 2014
2120CB144FC3B72BCB302ECF453AE8945415Sep 7, 2014
2195B4567BFEB34A17AC68D3AAA84D67CAB9Sep 7, 2014
2133AA9AC434B2E25AA505F5EB1BE38B8D3FSep 10, 2014
218572B3BBCABC16FB33B0D963008EC52955Sep 13, 2014
2115D84BD9549DA7D5761F7B05A5B2BC9A7CSep 15, 2014
2115B51CB7BE79F16632B9CEAE35AF3A4BFCSep 16, 2014
2120C447007BB8009D8D4C7C8B2229407DBBSep 18, 2014
21134F96EEC3110864F07034EE109D51B03CSep 18, 2014
21150CDBAB59E4EC4BB06F26ED4727420E5FSep 23, 2014
21201664E064F39B4D08CB1CA2C3668B5A95Sep 23, 2014
212034E7D2AAD4FA7702947DABAC82943574Oct 17, 2014
211596B39C0CDB6F5CE761B94B6E7ACA67A3Oct 19, 2014
2203F3E1E826E594A4019A490FCA14D700C2Oct 20, 2014
2115036169E18B3369F566D5D1DE5B3BF782Oct 20, 2014
2144FCCA0E5EC1A026EC1D859CD5E1246CF4Oct 23, 2014
220307945397432E2AF568E8CC9C71AC1DFAOct 24, 2014
220309C0BA129650950750CEDFCB8F5B977BOct 25, 2014
2203F57262EC4A8EE5806B50C0F92B53658FNov 3, 2014
21496AA9578B7FFF06A49E845A8D994D88FCNov 3, 2014
213583D21B8FB80FE381E758EFD039004984Nov 4, 2014
22030D1159C0CC06A5CE66B49B9AFF452126Nov 6, 2014
22034037647FCC71F382FCBA3849A72CB799Nov 6, 2014
21151B0FF1EAB7CE1926B19B35F67472BEBFNov 6, 2014
2115095E4351C3FCA17CB987113705297ED1Nov 10, 2014
2133B35519AA801335D50FE0A3FFD72D2592Nov 10, 2014
211563E620126ECFCDE207AB514B19AD8EE3Nov 10, 2014
213335ED398528EE607894CB61528A484475Nov 10, 2014
211520B60854DAB0FCA0D453F312D927C3A1Nov 13, 2014
21201211B1B92364134941D9ADCC64D54D3BNov 14, 2014
2133A87F128D860D3ACCDEF3491763F4FA51Dec 2, 2014
21338B2D35AB5696F5944562B9CD8054FEDDJan 16, 2015
21150CC809D3A16EBE552FE375D2062CD68CJan 25, 2015
21150C969B74A379381958697C8F665EE0D6Feb 11, 2015
2133450321B19F900FDBBC452DB3788AED55Mar 19, 2015
21339623772959311F2FB3931151C7C7176CMar 25, 2015
22037AB4A6C47E3BA77AE23A1691C63AE8E0Apr 1, 2015
2144CA7DBEE198DBD1CBBC892102E5FAF6ECApr 30, 2015
2115CCE25F7BB8B0F2D37869F44CE7FDE435May 2, 2015
2203D9B3282B745C82C947369C7AE7549966May 8, 2015
2137D70F847C7188FF59E420AB05BC63AA90Jun 2, 2015
20403DAFB7AE54386D0FA447D31E8DB73861Jun 22, 2015
220326F1D2F94CF87E6FF8843D3C5A982C22Jul 14, 2015
22037AB5DA0902084A1ED8868B70B7F828FCJul 31, 2015
2126B57A511531C6C3F0076BF6666024B096Aug 2, 2015
216114C1FECE8684C81CB1DF443C91864D62Aug 14, 2015
2144B6623C0AEA3EAFD18C21BBD7AF375EB0Aug 30, 2015
2133F24AA4C63D08DF6543603D18E07546D6Aug 31, 2015
21830E49E4A4CCAB912E2A09B7E8F9044CB4Sep 9, 2015
2207A34524444511F8737CC2EC838DA85872Oct 17, 2015
21332D3C3A864B5FFFD828F593894FF54D13Nov 30, 2015
2203E14D36D5A3027EB4D4B37C35ECE5F0F0Dec 12, 2015
2161C2F72C4E0A83C803EE2E7069CB1ECC07Dec 19, 2015
22036714976D5DF3AE34F384567A734467BBDec 19, 2015
2161D3516BCDD14706AA5FF0CA949166AEC4Dec 24, 2015
2115EC8C16AEE9AA8F7DE63D5152DC931E08Dec 27, 2015
2203F9436FB4CB04DCD8D6932A820F973112Dec 31, 2015
2133E8063610F9AC8AEDCB9AE515D32A8B9CJan 2, 2016
22031D8912F1D48DF1FB964A2F13AF7FA7E4Jan 4, 2016
21337F9C8DB98BCEE86653BECA15AE83C10EJan 5, 2016
21157F0EF3BFB096E7A08AEFE7ECEDC120B8Jan 5, 2016
2185D858F19BD7106A7908300871153B638AJan 6, 2016
21852538D78F410445AB5B1E06FD188FA4AEJan 11, 2016
2161931E9470EFF2FE68DCEDBF9466DDB9EAJan 21, 2016
2115750E1BDFFB839E4B60315A2545676796Feb 2, 2016
220340ACF7C196B4EB5C553740E44B7CB64BFeb 11, 2016
2115F2DB90CB25A3395B318A00242BFBB179Feb 13, 2016
2203116B8E6979F8BB5CD0FD1667C7FDC86BFeb 15, 2016
21177300F11A856FD75728CAF4C622B44B66Mar 21, 2016
21154FD20C7971F21084971723D63A3390D1Mar 28, 2016
21203E21B61D0845B2B835C00927EE4FF80EApr 12, 2016
22033F6EF13D63E0B40280F840EAAEA6BB04Apr 26, 2016
220320BF532E1B220A9C3C5554E946C9FF89May 2, 2016
2130A81D6095E8B3502B715FE2C2BCC94CCAMay 7, 2016
2207E36589D58D01135888CE5339139323B5May 21, 2016
2133E409F98B134DB224AF0BD7EFB3B70BB8May 21, 2016
2120CFDC94F258E30FB51B06FE9BB16AF0A0May 24, 2016
2203017CB1ACE57D089FEC94EEC66ED8F06DMay 30, 2016
22032413CCBB8E473EBB1012A40FFDEFDEA0Jun 21, 2016
2133085E0D0213786DFBD1234DD37FE5DFF8Jun 30, 2016
2203E219A304B5A2F71C07DFA0940415A2FCJul 8, 2016
2115602E4BCAAEA45C32E4896273E65AB4B2Jul 13, 2016
217390E0FE9C6C2974EEF6B979282C92B7F0Jul 15, 2016
2161C3A36ED25C45A79C15C6F7D0A5B2C82AJul 21, 2016
2203C07A7DEF999A40EFBDE137C2BFD9570FJul 23, 2016
21619046ACA20016D90F7D592D16FD51C6F3Jul 26, 2016
2161BFCC92E50668043DCDAD4B1A7ED1AF5BJul 26, 2016
2203D649642B3F418D6D2DC0FEF7E31D65E8Aug 7, 2016
2115B3BF94D314F0DC5587C1C5249C7955E6Aug 14, 2016
2203872FE2D4C87156F22AC21F22CF43E83DAug 17, 2016
2115ECCD56C141CA8A93AA13CAD742391DA3Sep 3, 2016
220369BFFBC1C97CE8D12E99B9E0BBBCADA4Sep 4, 2016
2203939300D48A9D279A6E56A6748100A44ESep 7, 2016
2203C81E431EB0CBE011B4A1F9D9223D1226Sep 25, 2016
2209D828C3E6878105F3656B589C9A84CC03Sep 28, 2016
2115BB5FB245FC3DC1284F44F292D1A694F4Oct 23, 2016
216116D2794F11D93A2BB43987C36DD40FC2Oct 29, 2016
22033864BB8179C6B72868C2C136E6408C33Nov 13, 2016
212019ED6196D98D2C84078E6FBACE96B160Nov 18, 2016
220316D16566DAD71CF66F094156A2195304Nov 21, 2016
2203A70F251C11FBD4ED70EAAED932B7CA3CDec 2, 2016
2030B70241A9183A5312F4A18F8614F508ABDec 16, 2016
2161894C3020BFDC783D7639C58559879742Dec 20, 2016
21150A181B6597EC3643636040B2D3A36C3CDec 21, 2016
2161B4C3C076284C09F23DB3E85ECDC8A4B6Jan 4, 2017
22036FA8C3CDDC40D7815405FA75909AB033Jan 27, 2017
2133F2681EE4569B245D7DC896ABCC680075Jan 27, 2017
2133E9817F3673E08BF034B969CE55491692Feb 2, 2017
220307F61159A69A4AB3D9134DD0292149F1Feb 13, 2017
2115380F7672C5A572E5E15A9DA7634B7506Feb 15, 2017
22031E331F3144EFC45B5ABE49DC972F2DB5Feb 25, 2017
2203BFBA04A869458907C33BB21FAD2FB715Feb 26, 2017
21613ADC4827BCA27FD5C384FDE76FE9C298Mar 1, 2017
21448EBD2A5992F8D828C1DB778A71C30472Mar 16, 2017
2060341EC168B0C5225DF6C7EC18A71C9F60Apr 3, 2017
203849A81D77A63D74B7391A4901FF16FF1CApr 7, 2017
21614B87D98BE57A91DA24421F7AB66B7A8DApr 15, 2017
2161627DE230FABEA276C66DE4A83337BB34Apr 18, 2017
2115907BF4264C03948A6FD65741B46C50EFMay 5, 2017
2149FFD768597ADB213029B22582EB2137B5May 21, 2017
2133800D0F49F2B3301269A1328CCEB9DDD2Jun 7, 2017
21337F7973AA434C3B67CABA2DD1F32B002AJun 13, 2017
2115D3429C205F7995F3FEFE7364BC427D3DJun 13, 2017
218574E1147CD8BB0C11F90A6C50A26ACF00Jun 14, 2017
211533569B9AE9C8C010FAB3E6AC0AB3DBC0Jun 16, 2017
211550D8A6ABFAF9F94796DEBDCABCEEF9EFJun 24, 2017
2203246E4D4DA1448511341DF3FB8AE54B89Jul 8, 2017
213391FA874887F4AD0762483F2EE86BF080Aug 29, 2017

Why Is It Important to Remove Malware Files?^

It is imperative that you delete malware-associated files as soon as possible because they can be used - or are already being used - to inflict serious damage on your PC, including:

  • Disrupting the normal functioning of the operating system or rendering it completely useless.
  • Hijacking valuable private information (credit card numbers, passwords, PIN codes, etc.)
  • Directing all your Web searches to the same unwanted or malicious sites.
  • Dramatically slowing down your computer.
  • Gaining total control of your PC to spread viruses and trojans and send out spam.

How to Remove MyStart Search.xml^

  1. To enable deleting the MyStart Search.xml file, terminate the associated process in the Task Manager as follows:
    • Right-click in the Windows taskbar (a bar that appears along the bottom of the Windows screen) and select Task Manager on the menu.
    • In the Tasks Manager window, click the Processes tab.
    • On the Processes tab, select MyStart Search.xml and click End Process.
  2. Using your file explorer, browse to the file using the paths listed in Location of MyStart Search.xml and Associated Malware.
  3. Select the file and press SHIFT+Delete on the keyboard.
  4. Click Yes in the confirm deletion dialog box.
  5. Repeat steps 2-4 for each location listed in Location of MyStart Search.xml and Associated Malware.
  6. Notes:

    • The deletion of MyStart Search.xml will fail if it is locked; that is, it is in use by some application (Windows will display a corresponding message). For instructions on deleting locked files, see Deleting Locked Files.
    • The deletion of MyStart Search.xml will fail if your Windows uses the NT File System (NTFS) and you have no write rights for the file. Request your system administrator to grant you write rights for the file.

Deleting Locked Files^

You can delete locked files with the RemoveOnReboot utility. You can install the RemoveOnReboot utility from here.

After you delete a locked file, you need to delete all the references to the file in Windows registry.

To delete a locked file:

  1. Right-click on the file and select Send To -> Remove on Next Reboot on the menu.
  2. Restart your computer.

The file will be deleted on restart.

Note: In the case of complex viruses that can replicate themselves, malware files can reappear in the same locations even after you have deleted those files and restarted your computer. Exterminate It! Antimalware can effectively eradicate such viruses from your computer.

To remove all registry references to a MyStart Search.xml malware file:

  1. On the Windows Start menu, click Run.
  2. In the Open box, type regedit and click OK. The Registry Editor window opens.
  3. On the Edit menu, select Find.
  4. In the Find dialog box, type MyStart Search.xml. The name of the first found registry value referencing MyStart Search.xml is highlighted in the right pane of the Registry Editor window.
  5. Right-click the registry value name and select Delete on the menu.
  6. Click Yes in the Confirm Value Delete dialog box.
  7. To delete all other references to MyStart Search.xml, repeat steps 4-6.
IMPORTANT: Malware files can masquerade as legitimate files by using the same file names. To avoid deleting a harmless file, ensure that the Value column for the registry value displays exactly one of the paths listed in Location of MyStart Search.xml and Associated Malware.