Categories: PUA

How to remove “PUP.Optional.BetterSurf”?

The PUP.Optional.BetterSurf is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PUP.Optional.BetterSurf virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Behavioural detection: Executable code extraction – unpacking
Creates RWX memory
Dynamic (imported) function loading detected
Enumerates running processes
Reads data out of its own binary image
Authenticode signature is invalid
Behavioural detection: Injection (inter-process)
Steals private information from local Internet browsers
Attempts to create or modify a Browser Helper Object

How to determine PUP.Optional.BetterSurf?


File Info:
name: 02C1DCFB1E0933CF7759.mlwpath: /opt/CAPEv2/storage/binaries/7365d31533e9fee9dbd60f07cda84ba69f97f4f2a4442eab65587a57906f232ccrc32: 30F4B09Dmd5: 02c1dcfb1e0933cf7759f2ae5faba411sha1: 8668403eadefdc815b066ae215c0a6e9de05373csha256: 7365d31533e9fee9dbd60f07cda84ba69f97f4f2a4442eab65587a57906f232csha512: c67c2661e1fb8e0d7de3ae1335c79ea90082318f1aaed671cba95f6161facc857d8e27e014bbe6509f26c793f095dc59e88b9188bed1b068194d92a5a3752976ssdeep: 24576:/WxywYUG4Gdg7P+IoLCbawZ2eAArOf7UFxouObtw+EPV:ysqr+NW+wxFOfYFm15wftype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1F0252394E6C4D868C3904634A7AFFB74E1A8DECB1EF1155B83C61EE356423178EE3906sha3_384: 42841d107856096fcda6c41f3bad4eae78a5f09a75b99ca45679f4bc03224efedb48a0e23eda162a4dc3c1d190d6c6d6ep_bytes: 81ec8001000053555633db57895c2418timestamp: 2009-12-05 22:50:52
Version Info:
CompanyName: Video PlayerCompanyWebsite: FileDescription: FileVersion: 1.1LegalCopyright: ProductName: Video Player beta 897ProductVersion: 1.1Translation: 0x0000 0x04e4

PUP.Optional.BetterSurf also known as:

Lionic	Adware.Win32.BetterSurf.lVJl
Elastic	malicious (high confidence)
Cynet	Malicious (score: 100)
FireEye	Gen:Variant.Adware.BetterSurf.1
CAT-QuickHeal	Adware.BetterSurf.B5
ALYac	Adware.SwiftBrowse.DA
Cylance	Unsafe
Sangfor	Trojan.Generic-JS.Save.8ce68aae
K7AntiVirus	Unwanted-Program ( 0040f7911 )
Alibaba	AdWare:Win32/Amonetize.bc36d1f5
K7GW	Unwanted-Program ( 0040f7911 )
CrowdStrike	win/grayware_confidence_100% (D)
Baidu	Multi.Threats.InArchive
Cyren	W32/Medfos.AE.gen!Eldorado
Symantec	Adware.WebexpEnhanced
ESET-NOD32	multiple detections
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Adware.Bettersurf-24
Kaspersky	not-a-virus:AdWare.Win32.BetterSurf.b
BitDefender	Gen:Variant.Adware.BetterSurf.1
NANO-Antivirus	Riskware.Win32.BetterSurf.cslwri
SUPERAntiSpyware	Adware.BetterSurf/Variant
MicroWorld-eScan	Gen:Variant.Adware.BetterSurf.1
Avast	NSIS:Adware-MO [PUP]
Tencent	Win32.Risk.Adware.Fhx
Sophos	BetterSurf (PUA)
Comodo	Application.Win32.Amonetize.KL@56ab04
DrWeb	Adware.BetterSurf.1521
VIPRE	Adware.Bettersurf (fs)
TrendMicro	ADW_BETTERSURF.UNP
McAfee-GW-Edition	BehavesLike.Win32.AdwareBSurf.fc
Emsisoft	Application.InstallMon (A)
SentinelOne	Static AI – Malicious PE
Jiangmin	AdWare/BetterSurf.b
Webroot	Pua.Adware.Bettersurf
Avira	ADWARE/Adware.Gen7
Antiy-AVL	Trojan/Generic.ASMalwNS.28D7
Kingsoft	Win32.Troj.BetterSurf.b.(kcloud)
Microsoft	Trojan:Win32/Occamy.C
GData	Win32.Adware.Amonetize.M
AhnLab-V3	Adware/Win32.BetterSurf.C233448
McAfee	Artemis!02C1DCFB1E09
MAX	malware (ai score=99)
VBA32	BScope.Adware.Downware
Malwarebytes	PUP.Optional.BetterSurf
TrendMicro-HouseCall	ADW_BETTERSURF.UNP
Rising	Trojan.Detplock!8.4A0D (CLOUD)
Yandex	Adware.BetterSurf!lhTB4ypqqYs
MaxSecure	not-a-virus:.Adware.BetterSurf.b
Fortinet	W32/MEDFOS.AE!tr
AVG	NSIS:Adware-MO [PUP]
Cybereason	malicious.b1e093
Panda	PUP/BetterSurf