Solved! Use NP1CSTUB.DLL (Adware MyWebSearch) Removal Guide

I recommend you UnHackMe - Ultimate Malware Killer for fast malware removal:

Free Download
Fully Functional 30-day Trial. No credit card is required.
Reviews
. EULA. Privacy Policy. Uninstall.

NP1CSTUB.DLL – Adware MyWebSearch removal

FileMD5Virus Alias
NP1CSTUB.DLL efbdfbd3951445bc81ef138c55691056 Adware MyWebSearch
NP1CSTUB.DLL efbdfbd3951445bc81ef138c55691056 Trojan SuspiciousFile
NP1CSTUB.DLL efbdfbd3951445bc81ef138c55691056 Trojan Graftor
NP1CSTUB.DLL efbdfbd3951445bc81ef138c55691056 Trojan Agent

NP1CSTUB.DLL size: 48520 bytes
NP1CSTUB.DLL hash: EFBDFBD3951445BC81EF138C55691056

Created files:

%Program Files%\BringMeSports_1c\bar\1.bin\1cauxstb.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cauxstb64.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cbar.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cbarsvc.exe
%Program Files%\BringMeSports_1c\bar\1.bin\1cbprtct.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cbrmon.exe
%Program Files%\BringMeSports_1c\bar\1.bin\1cbrmon64.exe
%Program Files%\BringMeSports_1c\bar\1.bin\1cbrstub.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cbrstub64.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cdatact.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cdlghk.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cdlghk64.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cfeedmg.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1chighin.exe
%Program Files%\BringMeSports_1c\bar\1.bin\1chkstub.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1chtmlmu.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1chttpct.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cidle.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cieovr.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cmedint.exe
%Program Files%\BringMeSports_1c\bar\1.bin\1cmlbtn.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cPlugin.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cradio.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cregfft.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1creghk.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cregiet.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cscript.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cskin.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cskplay.exe
%Program Files%\BringMeSports_1c\bar\1.bin\1cSrcAs.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1cSrchMn.exe
%Program Files%\BringMeSports_1c\bar\1.bin\1csrchmr.dll
%Program Files%\BringMeSports_1c\bar\1.bin\1ctpinst.dll
%Program Files%\BringMeSports_1c\bar\1.bin\APPINTEGRATOR.EXE
%Program Files%\BringMeSports_1c\bar\1.bin\AppIntegrator64.exe
%Program Files%\BringMeSports_1c\bar\1.bin\APPINTEGRATORSTUB.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\AppIntegratorStub64.dll
%Program Files%\BringMeSports_1c\bar\1.bin\ASSISTMONITOR.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\ASSISTMONITOR64.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\assists\ie_default_search_provider\ARBITER.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\assists\ie_default_search_provider\ARBITER64.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\assists\ie_default_search_provider\ASSIST.EXE
%Program Files%\BringMeSports_1c\bar\1.bin\CREXT.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\CrExtP1c.exe
%Program Files%\BringMeSports_1c\bar\1.bin\DPNMNGR.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\EXEMANAGER.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\FF-NativeMessagingDispatcher.dll
%Program Files%\BringMeSports_1c\bar\1.bin\Hpg64.dll
%Program Files%\BringMeSports_1c\bar\1.bin\NP1cStub.dll
%Program Files%\BringMeSports_1c\bar\1.bin\T8EPMSUP.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\T8EXTEX.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\T8EXTPEX.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\T8HTML.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\T8RES.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\T8TICKER.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\TPIMANAGERCONSOLE.EXE
%Program Files%\BringMeSports_1c\bar\1.bin\UNIFIEDLOGGING.DLL
%Program Files%\BringMeSports_1c\bar\1.bin\VERIFY.DLL
%Temp%\000004d4T8SETUP.EXE
%Temp%\000004d4T8SETUP.EX_

Autostart registry keys:

HKLM\System\CurrentControlSet\Services\BringMeSports_1cService\Type: 10000000
HKLM\System\CurrentControlSet\Services\BringMeSports_1cService\Start: 02000000
HKLM\System\CurrentControlSet\Services\BringMeSports_1cService\ErrorControl: 01000000
HKLM\System\CurrentControlSet\Services\BringMeSports_1cService\DisplayName: BringMeSportsService
HKLM\System\CurrentControlSet\Services\BringMeSports_1cService\ImagePath: %Program Files%\BringMeSports_1c\bar\1.bin\1cbarsvc.exe

Detected by UnHackMe:

NP1CSTUB.DLL
Default location: %PROGRAM FILES%\BRINGMESPORTS_1C\BAR\1.BIN\NP1CSTUB.DLL

Dropper information:
MD5: 170d8e936a28560a0fafb401583efa17
File size: 6072712 bytes

Leave a Reply