Should I remove “Win32/Adware.YoBrowser.BM”?

The Win32/Adware.YoBrowser.BM is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Adware.YoBrowser.BM virus can do?

Executable code extraction
Creates RWX memory
Reads data out of its own binary image
Drops a binary and executes it
Network activity detected but not expressed in API logs

How to determine Win32/Adware.YoBrowser.BM?


File Info:
crc32: 762174F2
md5: 09ca807265b83f358e8a6d78e4deaa9f
name: 09CA807265B83F358E8A6D78E4DEAA9F.mlw
sha1: 385183f54cfc010d169b6fc53c0c929d9fc39c4b
sha256: d53f6e365362dc87fdd6f63b5cdccb8067285a41907f5afe6436d1f2c3eaf101
sha512: 1707b118653f17b9f9a70a1ba6d568120cd09076e09b09e910abf2a8744fb4fb94d50deb8ad96342627d066375698dc670b3a099730665c44c973685943a6f6c
ssdeep: 12288:z7blMtsFOSKI5/rdz/pBfD3U67azlqqnHTEknjMxIoYlnlz:z7blWwOSKcjtTLk67aRq8Imj4Y3
type: PE32 executable (GUI) Intel 80386, for MS Windows

Version Info:
LegalCopyright:                                                                                                     
FileVersion:                     
CompanyName:                                                             
Comments: This installation was built with Inno Setup.
ProductName: unmeditatively                                              
ProductVersion: 1.0                                               
FileDescription: unmeditatively Setup                                        
Translation: 0x0000 0x04b0

Win32/Adware.YoBrowser.BM also known as:

Cynet	Malicious (score: 99)
Cylance	Unsafe
Sangfor	Riskware.Win32.Wacapew.C
CrowdStrike	win/malicious_confidence_100% (D)
Alibaba	AdWare:Win32/YoBrowser.d6befd45
Symantec	Trojan.Gen.MBT
ESET-NOD32	Win32/Adware.YoBrowser.BM
APEX	Malicious
Avast	Win32:Adware-gen [Adw]
ClamAV	Win.Trojan.Agent-6415129-0
NANO-Antivirus	Riskware.Win32.YoBrowser.ewxomi
Sophos	Generic PUA DI (PUA)
BitDefenderTheta	Gen:NN.ZedlaF.34294.2u8@aSDEUxji
McAfee-GW-Edition	BehavesLike.Win32.AdwareFileTour.hc
SentinelOne	Static AI – Suspicious PE
Avira	HEUR/AGEN.1126925
Microsoft	Trojan:Win32/Wacatac.A!ml
GData	Win32.Application.Agent.N8AHVA
McAfee	RDN/Generic PUP.x
MAX	malware (ai score=96)
Rising	Malware.Heuristic!ET#78% (RDMK:cmRtazpBKxNZa0iWgxfyKxzFLonx)
Ikarus	PUA.YoBrowser
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/Generic_PUA_DI.BM
AVG	Win32:Adware-gen [Adw]
Paloalto	generic.ml

How to remove Win32/Adware.YoBrowser.BM?

Win32/Adware.YoBrowser.BM removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X