home

bprotector-11.0.dll

The module bprotector-11.0.dll has been detected as a potentially unwanted program by 23 anti-malware scanners.
MD5:
6ab6424905b8024ed7e8af3d10b70fb9

SHA-1:
dee58aa6ab598ed3632193b02ac98c9f34144e04

Scanner detections:
23 / 68

Status:
Potentially unwanted

Explanation:
This service will prevent resources from modifying the web browser's home and search pages as well as the search provider set by the product, an affiliate search engine partner.

Analysis date:
5/10/2024 5:37:41 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
APPL/BProtector.Gen
7.11.114.86

avast!
Win32:Adware-gen [Adw]
2014.9-150331

AVG
Dropper.Generic8
2016.0.3153

Baidu Antivirus
Trojan.Win32.Rotbrow
4.0.3.15331

Bitdefender
Trojan.Generic.10453236
1.0.20.450

Emsisoft Anti-Malware
Trojan.Generic.10453236
8.15.03.31.11

ESET NOD32
Win32/bProtector.I potentially unwanted (variant)
9.11249

Fortinet FortiGate
Adware/Bprotect
3/31/2015

F-Secure
Trojan.Generic.10453236
11.2015-31-03_3

G Data
Trojan.Generic.10453236
15.3.25

herdProtect (fuzzy)
variant of bprotector-12.0.dll
2015.7.5.23

IKARUS anti.virus
Trojan-Dropper.Win32.Rotbrow
t3scan.1.8.6.0

K7 AntiVirus
Riskware
13.1915119

McAfee
Artemis!9FDF4D02FC42
5600.6809

Microsoft Security Essentials
TrojanDropper:Win32/Rotbrow.B
1.163.1557.0

MicroWorld eScan
Trojan.Generic.10453236
16.0.0.270

NANO AntiVirus
Trojan.Win32.BProtector.dodthw
0.30.0.296

nProtect
Trojan.Generic.10453236
15.02.27.01

Reason Heuristics
Threat.Win.Reputation.IMP
15.4.1.0

Sophos
BProtector
4.94

SUPERAntiSpyware
Trojan.Agent/Gen-Rotbrow
9963

Trend Micro House Call
TROJ_GEN.R047H01KI13
7.2.186

VIPRE Antivirus
Trojan.Win32.Generic
38008

File size:
413 KB (422,912 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Documents and Settings\{user}\Application data\bprotectorforwindows\2.2.448.52\firefoxextension\components\bprotector-11.0.dll

File PE Metadata
Compilation timestamp:
6/4/2012 9:04:11 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:jX7c5THDtk2S61mQ9NTRMRLG7m4L/PvmVN2YeOC6SWTBx/Ivh5NU:74C2SamQ9NTRAL5CPeV6OC6SWTXMN

Entry address:
0x1DFCB

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 42, 7A, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, CC, CC, 8B, 4C, 24, 04, F7, C1, 03, 00, 00, 00, 74, 24, 8A, 01, 83, C1, 01, 84, C0, 74, 4E, F7, C1, 03, 00, 00, 00, 75, EF, 05, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8D, A4, 24, 00, 00, 00, 00, 8B, 01, BA, FF, FE, FE, 7E, 03, D0, 83, F0, FF, 33, C2, 83, C1, 04, A9, 00, 01, 01, 81, 74, E8, 8B, 41, FC, 84, C0, 74, 32, 84, E4, 74, 24, A9, 00, 00, FF, 00, 74, 13, A9...
 
[+]

Code size:
287 KB (293,888 bytes)

Remove bprotector-11.0.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.