» BrowserDefender.dll
Overview
Analysis
File Details
Programs (1)

BrowserDefender.dll

Application Manager

MediaTechSoft Inc.

This is the Performersoft setup installer. The module BrowserDefender.dll by MediaTechSoft has been detected as adware by 23 anti-malware scanners. The program is a setup application that uses the InstallBrain installer. This file is typically installed with the program BrowserDefender by Bit89 Inc which is a potentially unwanted software program. The setup program bundles additional offers, mostly adware, using the InstallBrain installer, a pay-per-install monetization download manager. InstallBrain will also install a background updater service that will update any installed browser add-ons and plug-ins.

File name:

BrowserDefender.dll

Publisher:

PerformerSoft LLC (signed by MediaTechSoft Inc.)

Product:

Application Manager

Description:

Protector

Version:

2,6,1562,221

MD5:

12772af938b5fb0ee25c640e69e76445

SHA-1:

be803994030dba497c48c3ce365da769a7588ebf

SHA-256:

2013a40aa2f39d1bef1a751e6bf250949083f33b6d016b0ebc43f56a3c43608d

Scanner detections:

23 / 68

Status:

Adware

Explanation:

Uses the InstallBrain monetization platform from iBario to deliver bundled adware both search toolbars and PC optimizers from Performersoft.

Description:

This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:

4/19/2024 8:44:14 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Adware.BHO.Bprotector.1

1110

Avira AntiVirus

APPL/BProtector.Gen

7.11.125.36

avast!

Win32:BProtect-D [Trj]

2014.9-131226

AVG

Generic5

2014.0.3613

Bitdefender

Gen:Variant.Adware.BHO.Bprotector.1

1.0.20.1800

Boost by Reason

Optional.MediaTechSoft.P

188838

Clam AntiVirus

Win.Adware.BProtector

0.98/18155

Comodo Security

Application.Win32.bProtector.KA

17611

Dr.Web

Adware.BGuard.27

9.0.1.0360

Emsisoft Anti-Malware

Gen:Variant.Adware.BHO.Bprotector

8.13.12.26.12

ESET NOD32

Win32/bProtector (variant)

7.9290

Fortinet FortiGate

Adware/Fam.NB

12/26/2013

F-Secure

Application:W32/BProtector.A

11.2013-26-12_5

G Data

Gen:Variant.Adware.BHO.Bprotector

13.12.24

K7 AntiVirus

Trojan

13.175.10837

Kaspersky

HEUR:Trojan.Win32.Generic

14.0.0.4562

Malwarebytes

PUP.Optional.BProtector

v2013.12.26.12

McAfee

Adware-Bprotect!12772AF938B5

5600.7269

Microsoft Security Essentials

TrojanDropper:Win32/Rotbrow.A

1.165.247.01

MicroWorld eScan

Gen:Variant.Adware.BHO.Bprotector.1

14.0.0.1080

Reason Heuristics

PUP.MediaTechSoft.P

14.8.8.2

Trend Micro House Call

TROJ_GEN.F47V0912

7.2.360

VIPRE Antivirus

InstallBrain

25432

File size:

2.6 MB (2,699,232 bytes)

Product version:

2,6,1562,221

File type:

Dynamic link library (Win32 DLL)

Bundler/Installer:

InstallBrain

Common path:

C:\ProgramData\browserdefender\2.6.1562.221\{c16c1ccb-1111-4e5c-a2f3-533ad2fec8e8}\browserdefender.dll

Digital Signature

Signed by:

MediaTechSoft Inc.

Authority:

GoDaddy.com, Inc.

Valid from:

8/4/2013 11:09:22 AM

Valid to:

3/29/2016 8:18:00 PM

Subject:

CN=MediaTechSoft Inc., O=MediaTechSoft Inc., L=Beaverton, S=Oregon, C=US

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

047346D0687AB1

File PE Metadata

Compilation timestamp:

8/30/2013 4:03:42 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows Console

Linker version:

10.0

CTPH (ssdeep):

49152:tkdb+foE6Ykqh9RP9wKn/WYQl92oFw8TAGXVIvNHpBImNSSYLk:+nskqtiKn/py92oqvXB9

Entry address:

0x16F17A

Entry point:

8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, E0, E0, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 14, 56, 8B, 75, 08, 57, 33, FF, 89, 7D, F8, 89, 7D, F4, 89, 7D, FC, 3B, F7, 75, 13, E8, 31, 11, 00, 00, 6A, 16, 5E, 89, 30, E8, 67, 7F, 00, 00, 8B, C6, EB, 54, 53, 6A, 24, 68, FF, 00, 00, 00, 56, E8, F6, EB, FF, FF, 8B, 5D, 0C, 83, C4, 0C, 3B, DF, 75, 11, E8, 06, 11, 00, 00, 6A, 16, 5E, 89, 30, E8, 3C, 7F, 00, 00, EB, 28, 8B, 43, 04, 8B, 0B... 
[+]

Code size:

1.8 MB (1,915,904 bytes)

The file BrowserDefender.dll has been discovered within the following program.

BrowserDefender by Bit89 Inc

PerformerSoft/Bit89 BrowserDefender, a variant of the Browser Protector Software is a web browser add-in classified mostly a potentially unwanted application that used to be bundled with PerformerSoft products including PC Performer.

www.bit89.com/contact.html

80% remove it

Remove BrowserDefender.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.