Solved! Use CREXTP9T.EXE (Adware MyWebSearch) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Download UnHackMe
Fully Functional 30-day Trial. No credit card is required. Reviews. EULA. Privacy Policy.

CREXTP9T.EXE – Adware MyWebSearch removal

File MD5 Virus Alias
CREXTP9T.EXE c9fecbc3ec683b4b60cf45ebae9abfcd Adware MyWebSearch

CREXTP9T.EXE size: 1386056 bytes
CREXTP9T.EXE hash: C9FECBC3EC683B4B60CF45EBAE9ABFCD

Created files:

%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tauxstb.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tauxstb64.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbar.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbarsvc.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbprtct.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbrmon.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbrmon64.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbrstub.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbrstub64.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tdatact.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tdlghk.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tdlghk64.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tfeedmg.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9thighin.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9thkstub.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9thtmlmu.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9thttpct.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tidle.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tieovr.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tmedint.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tmlbtn.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tPlugin.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tradio.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tregfft.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9treghk.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tregiet.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tscript.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tskin.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tskplay.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tSrcAs.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tSrchMn.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tsrchmr.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\9ttpinst.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\APPINTEGRATOR.EXE
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\AppIntegrator64.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\APPINTEGRATORSTUB.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\AppIntegratorStub64.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\ASSISTMONITOR.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\ASSISTMONITOR64.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\assists\ie_default_search_provider\ARBITER.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\assists\ie_default_search_provider\ARBITER64.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\assists\ie_default_search_provider\ASSIST.EXE
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\CREXT.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\CrExtP9t.exe
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\DPNMNGR.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\EXEMANAGER.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\FF-NativeMessagingDispatcher.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\Hpg64.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\NP9tStub.dll
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\T8EPMSUP.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\T8EXTEX.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\T8EXTPEX.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\T8HTML.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\T8RES.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\T8TICKER.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\TPIMANAGERCONSOLE.EXE
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\UNIFIEDLOGGING.DLL
%Program Files%\InternetSpeedTracker_9t\bar\1.bin\VERIFY.DLL
%Temp%\00002130T8SETUP.EXE
%Temp%\00002130T8SETUP.EX_

Autostart registry keys:

HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Internet Speed Tracker Home Page Guard 32 bit: “C:\PROGRA~1\SB~00191.D84\bar\1.bin\AppIntegrator.exe”
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\Internet Speed Tracker Search Scope Monitor: “C:\PROGRA~1\SB~00191.D84\bar\1.bin\9tsrchmn.exe” /m=2 /w /h
HKLM\Software\Microsoft\Windows\CurrentVersion\Run\InternetSpeedTracker_9t Browser Plugin Loader: C:\PROGRA~1\SB~00191.D84\bar\1.bin\9tbrmon.exe
HKLM\System\CurrentControlSet\Services\InternetSpeedTracker_9tService\Type: 10000000
HKLM\System\CurrentControlSet\Services\InternetSpeedTracker_9tService\Start: 02000000
HKLM\System\CurrentControlSet\Services\InternetSpeedTracker_9tService\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\InternetSpeedTracker_9tService\DisplayName: Internet Speed TrackerService
HKLM\System\CurrentControlSet\Services\InternetSpeedTracker_9tService\ImagePath: %Program Files%\InternetSpeedTracker_9t\bar\1.bin\9tbarsvc.exe

Detected by UnHackMe:

CREXTP9T.EXE
Default location: %PROGRAM FILES%\INTERNETSPEEDTRACKER_9T\BAR\1.BIN\CREXTP9T.EXE

Dropper information:
MD5: 4f3818032c6e5fe8c12eb40fc641c5d5
File size: 6072728 bytes

Leave a Reply