home

BrowserHelper.exe

BrowserHelper

ReSoft LTD.

The application BrowserHelper.exe by ReSoft has been detected as adware by 24 anti-malware scanners.
Publisher:
ReSoft LTD.  (signed and verified)

Product:
BrowserHelper

Version:
1.0.0.0

MD5:
e2c02d3a8eeb75ae1ade103b3433a0df

SHA-1:
b00d96ecbd0eba1c8892b2b754678d063dcc6255

SHA-256:
342a2443b342169a6fd18fc23ad6f5758b10b49a6e2a90a69b40a0bf270bd95b

Scanner detections:
24 / 68

Status:
Adware

Analysis date:
2/7/2026 5:52:40 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.Linkury.B
352

Avira AntiVirus
TR/Trash.Gen
7.11.30.172

AVG
AdInject.Resoft
2017.0.2830

Bitdefender
Adware.Linkury.B
1.0.20.245

Dr.Web
Trojan.Damaged.1
9.0.1.049

Emsisoft Anti-Malware
Adware.Linkury
8.16.02.18.01

ESET NOD32
MSIL/Toolbar.Linkury (variant)
10.9369

F-Secure
Gen:Adware.Heur.cm1@g9nf60f
11.2016-18-02_5

G Data
Adware.Linkury
16.2.24

IKARUS anti.virus
PUA.Linkury
t3scan.1.6.1.0

Kaspersky
not-a-virus:WebToolbar.MSIL.SmartBar
14.0.0.645

Malwarebytes
PUP.Optional.SnapDo.A
v2016.02.18.01

McAfee
Artemis!0E142A88AED7
5600.6486

MicroWorld eScan
Adware.Linkury.B
17.0.0.147

NANO AntiVirus
Trojan.Win32.Linkury.dijuvv
0.30.0.65070

Norman
Gen:Adware.Heur.cm1@g9nf60f
11.20160218

nProtect
Adware.Linkury.B
14.08.06.01

Panda Antivirus
PUP/LinkUry
16.02.18.01

Qihoo 360 Security
Malware.QVM03.Gen
1.0.0.1015

Reason Heuristics
PUP.Resoft (M)
16.2.18.1

SUPERAntiSpyware
Trojan.Agent/Gen-Nullo[Short]
9317

Trend Micro House Call
TROJ_GEN.F47V0828
7.2.49

VIPRE Antivirus
Adware.Linkury
26050

XVirus List
Win.Detected
2.3.31

File size:
19.6 KB (20,120 bytes)

Product version:
1.0.0.0

Original file name:
BrowserHelper.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\local\smartbar\application\browserhelper.exe

Digital Signature
Signed by:
ReSoft LTD.

Authority:
COMODO CA Limited

Valid from:
7/30/2012 2:00:00 AM

Valid to:
7/31/2013 1:59:59 AM

Subject:
CN=ReSoft LTD., O=ReSoft LTD., STREET=4th Hanevi'im, L=Tel Aviv, S=Israel, PostalCode=64356, C=IL

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
7ABDE829D4244ADA77EE42C7A70C0FA3

File PE Metadata
Compilation timestamp:
12/24/2012 2:21:33 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:O8dEBflZ0wqhnNX+BPs96Dbgkg+NCeKKSCx/xDPZ8ULOQ:O8w7s9adn9QUaQ

Entry address:
0x48AE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
10.5 KB (10,752 bytes)

Remove BrowserHelper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.