BetterSurf (PUA) (file analysis)

The BetterSurf (PUA) is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BetterSurf (PUA) virus can do?

• Anomalous file deletion behavior detected (10+)
• Dynamic (imported) function loading detected
• Reads data out of its own binary image
• Drops a binary and executes it
• Authenticode signature is invalid
• Steals private information from local Internet browsers
• Creates a copy of itself

How to determine BetterSurf (PUA)?

File Info:
name: 56C8532317E001875EFE.mlw
path: /opt/CAPEv2/storage/binaries/b31badd41553594a0d8527ef387e45790a69c7b44d933b3312bee8ce35ff8bbb
crc32: F610B3F3
md5: 56c8532317e001875efe2fcf375e9a84
sha1: ea07fa0d1fa0d121311e69197997982b450818d6
sha256: b31badd41553594a0d8527ef387e45790a69c7b44d933b3312bee8ce35ff8bbb
sha512: 8fdf16de6b1312f67e3cd54401ac506d4c068f37fae8d9ed5cde859b15ecc57fdf9bde48467474edfc0e86dcefdaf983c0a635cc6df2605d54751213798ab507
ssdeep: 6144:Ee34pjpeZH+zpyuuz6GZkDOJ/7OafSH5KmrWym09x1k:steZHkwuPikQ7lKH5p5H9x1k
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T13254229F2FD155B3D9CB703A0630EFBDDBF2E49940D3568B4F5A1EAA3DA22876600140
sha3_384: f92e92ad4ea1d16f25ea1342ad417789207bee7cfe6b053050c7f67cd96185071d07c758f9dafcb8b01c813d0b39e262
ep_bytes: 81ec8001000053555633db57895c2418
timestamp: 2009-12-05 22:50:52

Version Info:
CompanyName: Media Watch
CompanyWebsite: 
FileDescription: 
FileVersion: 1.1
LegalCopyright: 
ProductName: Media Watch home 4447
ProductVersion: 1.1
Translation: 0x0000 0x04e4

BetterSurf (PUA) also known as:

How to remove BetterSurf (PUA)?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.