home

BrowserProtect.dll

Application Manager

Bit89 Inc.

This is the Performersoft setup installer. The module BrowserProtect.dll by Bit89 has been detected as adware by 32 anti-malware scanners. The program is a setup application that uses the InstallBrain installer. This file is typically installed with the program BrowserProtect by Bit89 Inc which is a potentially unwanted software program. This web browser add-on will claim to protect the web browser but will instead hijack it by modifying the home and search pages.
Publisher:
PerformerSoft LLC  (signed by Bit89 Inc.)

Product:
Application Manager

Description:
Protector

Version:
2,5,1005,80

MD5:
08b95f5a221bc1f184d2ac9223a6dddf

SHA-1:
24b606b32dc66d815f162cffc4f6c5a201db94d7

SHA-256:
b20f813a5a61c6dd8302249bcb79234802bdd65d1e9b00294286e6a2de5ca9e5

Scanner detections:
32 / 68

Status:
Adware

Explanation:
This service will prevent resources from modifying the web browser's home and search pages as well as the search provider set by the product, an affiliate search engine partner.

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
4/26/2024 5:13:05 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.BHO.Bprotector.1
1022

AhnLab V3 Security
Adware/Win32.Agent
2013.12.11

Avira AntiVirus
TR/BProtector.Gen
7.11.125.140

avast!
Win32:BProtect-D [Trj]
2014.9-140418

AVG
Generic5
2015.0.3500

Baidu Antivirus
Adware.WIn32.bProtector
4.0.3.14418

Bitdefender
Gen:Variant.Adware.BHO.Bprotector.1
1.0.20.540

Bkav FE
W32.Clodd14.Trojan
1.3.0.4677

Clam AntiVirus
Win.Adware.BProtector
0.98/18155

Comodo Security
UnclassifiedMalware
17625

Dr.Web
Adware.BGuard.5
9.0.1.0108

Emsisoft Anti-Malware
Gen:Variant.Adware.BHO.Bprotector
8.14.04.18.01

ESET NOD32
Win32/bProtector (variant)
8.9301

Fortinet FortiGate
Riskware/BProtector
4/18/2014

F-Secure
Application:W32/BProtector.A
11.2014-18-04_6

G Data
Gen:Variant.Adware.BHO.Bprotector
14.4.24

K7 AntiVirus
Unwanted-Program
13.175.10867

Kaspersky
Trojan.Win32.Bromngr
14.0.0.3997

Malwarebytes
PUP.Optional.BProtector
v2014.04.18.01

McAfee
Adware-Bprotect.a
5600.7156

Microsoft Security Essentials
TrojanDropper:Win32/Rotbrow.A
1.165.247.01

MicroWorld eScan
Gen:Variant.Adware.BHO.Bprotector.1
15.0.0.324

NANO AntiVirus
Trojan.Win32..bocbfk
0.28.0.56692

nProtect
Trojan-Clicker/W32.Bromngr.2212304
13.12.11.01

Quick Heal
Trojan.Rotbrow.KK6
4.14.12.00

Reason Heuristics
PUP.Bit89.O
14.8.7.17

Sophos
BProtector
4.96

Trend Micro House Call
ADW_BPROTECT
7.2.108

Trend Micro
ADW_BPROTECT
10.465.18

Vba32 AntiVirus
AdWare.Bromngr
3.12.24.3

VIPRE Antivirus
Bprotector
25500

ViRobot
Adware.Agent.2212304
2011.4.7.4223

File size:
2.1 MB (2,162,280 bytes)

Product version:
2,5,1005,80

Copyright:
Copyright 2012

File type:
Dynamic link library (Win32 DLL)

Bundler/Installer:
InstallBrain

Language:
English (United States)

Common path:
C:\ProgramData\browserprotect\2.5.1005.80\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\browserprotect.dll

Digital Signature
Signed by:
Bit89 Inc.

Authority:
GoDaddy.com, Inc.

Valid from:
9/4/2012 11:00:34 PM

Valid to:
9/4/2015 11:00:34 PM

Subject:
CN=Bit89 Inc., O=Bit89 Inc., L=Beaverton, S=OR, C=US

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
4F179649BA374C

File PE Metadata
Compilation timestamp:
12/14/2012 3:02:24 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
49152:ngw/F5kD4uR9vCJHNdV9ygcwg7y0oKTRKeylFlzPt/1ho:gwN04umJZ9ynwg7/

Entry address:
0x13B965

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, E4, E4, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 83, EC, 14, 56, 8B, 75, 08, 57, 33, FF, 89, 7D, F8, 89, 7D, F4, 89, 7D, FC, 3B, F7, 75, 13, E8, D8, 1F, 00, 00, 6A, 16, 5E, 89, 30, E8, 8B, 83, 00, 00, 8B, C6, EB, 54, 53, 6A, 24, 68, FF, 00, 00, 00, 56, E8, 9B, F1, FF, FF, 8B, 5D, 0C, 83, C4, 0C, 3B, DF, 75, 11, E8, AD, 1F, 00, 00, 6A, 16, 5E, 89, 30, E8, 60, 83, 00, 00, EB, 28, 8B, 43, 04, 8B, 0B...
 
[+]

Code size:
1.5 MB (1,542,656 bytes)

The file BrowserProtect.dll has been discovered within the following program.

BrowserProtect  by Bit89 Inc
PerformerSoft BrowserProtect is a third party web browser add-in classified mostly as a potentially unwanted software application that used to be bundled with PerformerSoft products including PC Performer.
www.bit89.com/contact.html
88% remove it
 
Powered by Should I Remove It?

Remove BrowserProtect.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.