Solved! Use 9TBRMON64.EXE (Adware MyWebSearch) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

9TBRMON64.EXE – Adware MyWebSearch removal

File MD5 Virus Alias
9TBRMON64.EXE 4ba7d9e73d47039bd34396ceb679318f Adware MyWebSearch

9TBRMON64.EXE size: 71752 bytes
9TBRMON64.EXE hash: 4BA7D9E73D47039BD34396CEB679318F

Created files:

%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tauxstb.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tauxstb64.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbar.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbarsvc.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbprtct.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbrmon.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbrmon64.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbrstub.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbrstub64.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tdatact.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tdlghk.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tdlghk64.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tfeedmg.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9thighin.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9thkstub.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9thtmlmu.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9thttpct.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tidle.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tieovr.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tmedint.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tmlbtn.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tPlugin.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tradio.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tregfft.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9treghk.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tregiet.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tscript.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tskin.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tskplay.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tSrcAs.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tSrchMn.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tsrchmr.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9ttpinst.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\APPINTEGRATOR.EXE
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\AppIntegrator64.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\APPINTEGRATORSTUB.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\AppIntegratorStub64.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\ASSISTMONITOR.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\ASSISTMONITOR64.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\assists\ie_default_search_provider\ARBITER.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\assists\ie_default_search_provider\ARBITER64.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\assists\ie_default_search_provider\ASSIST.EXE
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\CREXT.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\CrExtP9t.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\DPNMNGR.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\EXEMANAGER.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\FF-NativeMessagingDispatcher.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\Hpg64.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\NP9tStub.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\T8EPMSUP.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\T8EXTEX.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\T8EXTPEX.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\T8HTML.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\T8RES.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\T8TICKER.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\TPIMANAGERCONSOLE.EXE
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\UNIFIEDLOGGING.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\VERIFY.DLL
%Temp%\00002130T8SETUP.EXE
%Temp%\00002130T8SETUP.EX_

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Internet Speed Tracker Home Page Guard 32 bit: “C:\PROGRA~1\SB~00191.D84\bar\1.bin\AppIntegrator.exe”
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Internet Speed Tracker Search Scope Monitor: “C:\PROGRA~1\SB~00191.D84\bar\1.bin\9tsrchmn.exe” /m=2 /w /h
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\InternetSpeedTracker_9t Browser Plugin Loader: C:\PROGRA~1\SB~00191.D84\bar\1.bin\9tbrmon.exe
HKLM\System\CurrentControlSet\Services\InternetSpeedTracker_9tService\Type: 10000000
HKLM\System\CurrentControlSet\Services\InternetSpeedTracker_9tService\Start: 02000000
HKLM\System\CurrentControlSet\Services\InternetSpeedTracker_9tService\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\InternetSpeedTracker_9tService\DisplayName: Internet Speed TrackerService
HKLM\System\CurrentControlSet\Services\InternetSpeedTracker_9tService\ImagePath: %Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbarsvc.exe

Detected by UnHackMe:

9TBRMON64.EXE
Default location: %PROGRAM FILES%\INTERNETSPEEDTRACKER_9T\BAR\1.BIN\9TBRMON64.EXE

Dropper information:
MD5: 4f3818032c6e5fe8c12eb40fc641c5d5
File size: 6072728 bytes

Leave a Reply