AdWare.Win32.BrowseFox malicious file

The AdWare.Win32.BrowseFox is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What AdWare.Win32.BrowseFox virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.

How to determine AdWare.Win32.BrowseFox?


File Info:
name: DA891455C4A9C5B44CBB.mlw
path: /opt/CAPEv2/storage/binaries/a131ac42605cf88c24a34bc1a02524a1a37ef043d1caa1e7cc2f31e8c12a6692
crc32: A43D5497
md5: da891455c4a9c5b44cbb870ffd138701
sha1: 90f429f0c474d34755230d0dc4a5b00647d06c0d
sha256: a131ac42605cf88c24a34bc1a02524a1a37ef043d1caa1e7cc2f31e8c12a6692
sha512: b99f49c73803270ec5d7831f20b5c0e6e6b3ccd4afdfb2e6d328e1a44355fa6df06a37035f69ee50858264ece0b7929ef8eadc8648504372e0ed6a452a638f60
ssdeep: 24576:odcyXpT6K9gd+hJI/9uASG67IUi0uz+KwRbuqcUijhReWkvV:Xym/luVG67xw+VtTcUuhUj
type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windows
tlsh: T11935F18577E84512CA9EB37582A6036C6B758107BA038793D8B410BC0DB73DB794EDBB
sha3_384: e3e41a1f648630faa8a4cd4a2b0c2d255a00d10eb8d9de05d83a346cdfc41be579876f1edb702c093ad8fbda9d3b1572
ep_bytes: ff250020400000000000000000000000
timestamp: 2017-03-10 05:38:26

Version Info:
Translation: 0x0000 0x04b0
FileDescription:  
FileVersion: 1.0.6277.38950
InternalName: 2017031005.dll
LegalCopyright:  
OriginalFilename: 2017031005.dll
ProductVersion: 1.0.6277.38950
Assembly Version: 1.0.6277.38950

AdWare.Win32.BrowseFox also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Application.BrowseFox.1
FireEye	Generic.mg.da891455c4a9c5b4
Skyhigh	PUP-FPI
McAfee	PUP-FPI
Cylance	unsafe
Zillya	Adware.TpynCRTD.Win32.10288
Sangfor	PUA.Win32.Sign.a
CrowdStrike	win/grayware_confidence_100% (W)
Alibaba	Malware:Win32/BrowseFox.c8a0518f
K7GW	Trojan ( 00543e461 )
K7AntiVirus	Trojan ( 00543e461 )
Symantec	PUA.Yontoo.C
tehtris	Generic.Malware
ESET-NOD32	a variant of MSIL/Adware.BrowseFox.G
APEX	Malicious
Kaspersky	not-a-virus:HEUR:AdWare.Win32.BrowseFox.gen
BitDefender	Gen:Variant.Application.BrowseFox.1
NANO-Antivirus	Riskware.Win32.Yontoo.eevffi
Avast	Win32:AdwareSig [Adw]
Tencent	Win32.AdWare.Browsefox.Dflw
Emsisoft	Application.BrowserExt (A)
Baidu	Win32.Adware.BrowseFox.q
F-Secure	WebToolbar:W32/Foxiebro.A
DrWeb	Trojan.Yontoo.6012
VIPRE	Gen:Variant.Application.BrowseFox.1
TrendMicro	PUA_BROWSEFOX.SME2
Sophos	Browse Fox (PUA)
Ikarus	AdWare.BrowseFox
GData	Gen:Variant.Application.BrowseFox.1
Jiangmin	AdWare.BrowseFox.ggow
Varist	W32/S-29358fef!Eldorado
Avira	ADWARE/BrowseFox.Gen7
Antiy-AVL	GrayWare[AdWare]/MSIL.BrowseFox.g
Kingsoft	malware.kb.c.1000
Xcitium	Application.MSIL.BrowseFox.R@76jnac
Arcabit	Trojan.Application.BrowseFox.1
ZoneAlarm	not-a-virus:HEUR:AdWare.Win32.BrowseFox.gen
Microsoft	BrowserModifier:Win32/Foxiebro
Google	Detected
AhnLab-V3	PUP/Win32.BrowseFox.R160624
ALYac	Gen:Variant.Application.BrowseFox.1
MAX	malware (ai score=74)
VBA32	Adware.MSIL.BrowseFox.Heur
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/CI.A
TrendMicro-HouseCall	PUA_BROWSEFOX.SME2
Yandex	Riskware.Agent!GVMdZzEF52I
SentinelOne	Static AI – Malicious PE
Fortinet	Adware/BrowseFox
AVG	Win32:AdwareSig [Adw]
DeepInstinct	MALICIOUS

How to remove AdWare.Win32.BrowseFox?

AdWare.Win32.BrowseFox removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X