home

bettersrf.dll

The module bettersrf.dll has been detected as a potentially unwanted program by 29 anti-malware scanners. This file is typically installed with the program Better Surf Plus by Better Surf which is a potentially unwanted software program. BetterSurf is a program that comes with software bundlers that offer free applications and will add a plugin to Internet Explorer, Firefox, and Chrome which displays advertisements on websites and search engines..
MD5:
49d49048b30f662e4d6601af412a4438

SHA-1:
06d8176fba8c095b7d9dfce5444e3c7a92f7b78c

SHA-256:
5b89555f2aca25ccd3d3ff100663506c7f9501e615656efb9d39ec33897bb554

Scanner detections:
29 / 68

Status:
Potentially unwanted

Explanation:
Installed with software bundlers that offer free applications or games and adds a plugin to Internet Explorer, Firefox, and Chrome and will display ads as the user browses the Internet, both in websites and on search engine results

Analysis date:
4/25/2024 3:49:37 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.Graftor.125844
924

AhnLab V3 Security
Adware/Win32.BetterSurf
14.07.25

Avira AntiVirus
ADWARE/Adware.Gen
7.11.137.112

avast!
Win32:PUP-gen [PUP]
2014.9-140725

AVG
Skodna.Generic_r
2015.0.3402

Baidu Antivirus
Adware.Win32.BetterSurf
4.0.3.14725

Bitdefender
Gen:Variant.Adware.Graftor.125844
1.0.20.1030

Bkav FE
W32.RadicoO.Trojan
1.3.0.4959

Comodo Security
Application.Win32.AdWare.BetterSurf.B
17939

Dr.Web
Trojan.Damaged.1
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Adware.Graftor.125844
8.14.07.25.12

ESET NOD32
Win32/AdWare.BetterSurf (variant)
8.9548

F-Secure
Gen:Variant.Adware.Graftor.125844
11.2014-25-07_6

G Data
Gen:Variant.Adware.Graftor.125844
14.7.24

IKARUS anti.virus
not-a-virus:AdWare.Win32.BetterSurf
t3scan.2.2.29

K7 AntiVirus
Unwanted-Program
13.176.11451

Kaspersky
not-a-virus:AdWare.Win32.BetterSurf
15.0.0.494

Malwarebytes
PUP.Optional.MediaView.A
v2014.07.25.12

McAfee
Adware-BetterSurf
5600.7058

Microsoft Security Essentials
Adware:Win32/BetterSurf
1.10302

MicroWorld eScan
Gen:Variant.Adware.Graftor.125844
15.0.0.618

NANO AntiVirus
Riskware.Win32.BetterSurf.cslwri
0.28.0.58394

Panda Antivirus
Generic Malware
14.07.25.12

Qihoo 360 Security
HEUR/Malware.QVM30.Gen
1.0.0.1015

Reason Heuristics
Threat.Win.Reputation.IMP
14.7.25.12

Rising Antivirus
PE:Malware.BetterSurf!6.11BF
23.00.65.14723

Sophos
BetterSurf
4.98

Vba32 AntiVirus
AdWare.BetterSurf
3.12.24.3

VIPRE Antivirus
Adware.Win32.Better.a
27444

File size:
84.5 KB (86,528 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\bettersurf\bettersurfplus\ie\bettersrf.dll

File PE Metadata
Compilation timestamp:
12/9/2013 8:06:05 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:zJhtxEsVI9wOyEKxmKAdrST/8Qk2UnRlJllQJ6eLu:lI9wzEKIKSryYRrlaJ66

Entry address:
0x7A77

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 3B, 38, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 68, 1C, EF, 00, 10, FF, 15, 5C, E0, 00, 10, 85, C0, 74, 15, 68, 0C, EF, 00, 10, 50, FF, 15, 60, E0, 00, 10, 85, C0, 74, 05, FF, 75, 08, FF, D0, 5D, C3, 8B, FF, 55, 8B, EC, FF, 75, 08, E8, C8, FF, FF, FF, 59, FF, 75, 08, FF, 15, D4, E0, 00, 10, CC, 6A, 08, E8, 57, 3D, 00, 00, 59, C3, 6A, 08, E8, 75, 3C, 00, 00, 59, C3, 8B, FF, 56, E8, 0F, 19, 00, 00...
 
[+]

Entropy:
6.1205

Code size:
49 KB (50,176 bytes)

The file bettersrf.dll has been discovered within the following program.

Better Surf Plus  by Better Surf
Better Surf is a web browser plugin for Internet Explorer, Chrome and Firefox and is designed to hijack the user's home and search pages as well as inject contextual advertising within the pages visited by users.
83% remove it
 
Powered by Should I Remove It?

Remove bettersrf.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.