Malware

What is “MSIL:BrowseFox-EU [Adw]”?

Malware Removal

The MSIL:BrowseFox-EU [Adw] is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What MSIL:BrowseFox-EU [Adw] virus can do?

  • Executable code extraction
  • Attempts to connect to a dead IP:Port (1 unique times)
  • Presents an Authenticode digital signature
  • Creates RWX memory
  • At least one IP Address, Domain, or File Name was found in a crypto call
  • Drops a binary and executes it
  • HTTP traffic contains suspicious features which may be indicative of malware related traffic
  • Performs some HTTP requests
  • Creates a copy of itself

Related domains:

ocsp.verisign.com
sf.symcd.com
install.anyangle.net

How to determine MSIL:BrowseFox-EU [Adw]?


File Info:

crc32: 630F1805
md5: 9e173d3ce55b7061f91ad623b337fb34
name: AnyAngleUninstaller.exe
sha1: 2071a1cca167da908eec643f4376a9b13ee7a311
sha256: 076d36c99461b3e9077abdf1e26bb97b3ddb480a66c29c136841a36b7f4e8d4a
sha512: c3dfb2e378a49a412de1633eaee2373f6f929c2ef9eb7cfeba725a97a9df7d262910a079649eeab39ab2b33bbf24dfc36183516299a46ca0c0fe9e25ee5c7659
ssdeep: 12288:ykENKhRFWoVYexFB5BfddYDt+yq8WzQr5ImpETu:ceVdqUyIzQr5Impl
type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows

Version Info:

Translation: 0x0000 0x04b0
LegalCopyright:
Assembly Version: 1.0.0.0
InternalName: Any Angle Uninstaller.exe
FileVersion: 1.0.0.0
ProductVersion: 1.0.0.0
FileDescription:
OriginalFilename: Any Angle Uninstaller.exe

MSIL:BrowseFox-EU [Adw] also known as:

MicroWorld-eScanGen:Variant.Adware.MSILPerseus.210671
CAT-QuickHealPUA.AdwareFC.S7914100
Qihoo-360Generic/Virus.Adware.d0c
CylanceUnsafe
VIPREAdware.BrowseFox
K7AntiVirusAdware ( 004c4ced1 )
BitDefenderGen:Variant.Adware.MSILPerseus.210671
K7GWAdware ( 004c4ced1 )
Cybereasonmalicious.ce55b7
ArcabitTrojan.Adware.MSILPerseus.D336EF
F-ProtW32/S-4623373a!Eldorado
SymantecML.Attribute.HighConfidence
ESET-NOD32a variant of MSIL/Adware.BrowseFox.O
AvastMSIL:BrowseFox-EU [Adw]
Kasperskynot-a-virus:HEUR:AdWare.MSIL.BrowseFox.gen
NANO-AntivirusRiskware.Win32.Yontoo.eqyaot
AegisLabAdware.MSIL.BrowseFox.2!c
Endgamemalicious (high confidence)
EmsisoftApplication.BrowserExt (A)
ComodoApplication.MSIL.BrowseFox.AO@60es5y
F-SecureAdware.ADWARE/BrowseFox.Gen7
DrWebTrojan.Yontoo.4985
ZillyaAdware.BrowseFoxCRTD.Win32.3479
Invinceaheuristic
McAfee-GW-EditionArtemis!PUP
SentinelOneDFI – Malicious PE
FireEyeGeneric.mg.9e173d3ce55b7061
SophosBrowse Fox (PUA)
APEXMalicious
CyrenW32/S-4623373a!Eldorado
WebrootPua.Gen
AviraADWARE/BrowseFox.Gen7
FortinetAdware/BrowseFox
Antiy-AVLGrayWare[AdWare]/Win32.AGeneric
MicrosoftBrowserModifier:Win32/Foxiebro
SUPERAntiSpywarePUP.AnyAngle/Variant
AhnLab-V3PUP/Win32.BrowseFox.R179344
ZoneAlarmnot-a-virus:HEUR:AdWare.MSIL.BrowseFox.gen
VBA32TScope.Trojan.MSIL
ALYacGen:Variant.Adware.MSILPerseus.210671
MAXmalware (ai score=67)
Ad-AwareGen:Variant.Adware.MSILPerseus.210671
MalwarebytesAdware.Yontoo
PandaTrj/CI.A
TencentMalware.Win32.Gencirc.10b4ca3a
YandexRiskware.Agent!
IkarusPUA.Multiplug
eGambitUnsafe.AI_Score_99%
GDataGen:Variant.Adware.MSILPerseus.210671
AVGMSIL:BrowseFox-EU [Adw]
CrowdStrikewin/malicious_confidence_80% (D)
MaxSecureTrojan.Malware.10229412.susgen

How to remove MSIL:BrowseFox-EU [Adw]?

MSIL:BrowseFox-EU [Adw] removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment