home

fassurunbho.dll

fassurun

Part of the Yontoo adware component, a web browser plugin that injects unwanted ads in the browser. The module fassurunbho.dll by fassurun has been detected as adware by 22 anti-malware scanners. This file is typically installed with the program fassurun by Yontoo Technology, Inc. which is a potentially unwanted software program. It will plug into the web browser and display context-based advertisements by overwriting existing ads or by inserting new ones on various web pages.
Publisher:
fassurun  (signed and verified)

Product:
fassurun

Version:
1.0.0.3

MD5:
63dac95b2691d100ac853eb2d6926bb5

SHA-1:
eb0d0bec381dd4481605964a20a7365467abfd31

SHA-256:
843d16d0c6ed1bef51b27b49299a43aae8d3a54f500a1bd30a8d2c00ebd387a3

Scanner detections:
22 / 68

Status:
Adware

Explanation:
Injects advertising in the web browser in various formats.

Analysis date:
4/25/2024 4:55:38 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
PUA.Agent
7.1.1

Avira AntiVirus
APPL/BrowseFox.Gen2
7.11.145.12

AVG
Agent.W
2017.0.2847

Baidu Antivirus
Adware.Win32.Agent
4.0.3.16131

Comodo Security
Application.Win32.Altbrowse.AK
18102

Dr.Web
Trojan.BPlug.28
9.0.1.031

ESET NOD32
Win32/BrowseFox (variant)
10.9672

Fortinet FortiGate
Adware/Agent
1/31/2016

G Data
Win32.Application.BrowseFox
16.1.24

IKARUS anti.virus
not-a-virus:AdWare.Win32.Agent
t3scan.1.6.1.0

K7 AntiVirus
Unwanted-Program
13.176.11737

Kaspersky
not-a-virus:AdWare.Win32.Agent
14.0.0.730

Malwarebytes
PUP.Optional.Fassurun.A
v2016.01.31.10

McAfee
Artemis!7348D9622C07
5600.6503

NANO AntiVirus
Riskware.Win32.Agent.cuenda
0.28.0.59048

Quick Heal
AdWare.Agent.r5 (Not a Virus)
1.16.12.00

Reason Heuristics
Adware.Yontoo.fassurun (M)
16.1.31.22

Sophos
Generic PUA PD
4.98

SUPERAntiSpyware
Adware.BrowseFox/Variant
9351

Trend Micro House Call
TROJ_GEN.F47V0317
7.2.31

Vba32 AntiVirus
AdWare.Agent
3.12.26.0

VIPRE Antivirus
Yontoo
28214

File size:
243.8 KB (249,624 bytes)

Product version:
1.0.0.3

Copyright:
(c) fassurun. All rights reserved.

Original file name:
fassurunIEClient.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\fassurun\fassurunbho.dll

Digital Signature
Signed by:
fassurun

Authority:
VeriSign, Inc.

Valid from:
8/21/2013 8:00:00 AM

Valid to:
8/21/2015 7:59:59 AM

Subject:
CN=fassurun, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=fassurun, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
6EA3A2D62F7379560AF4974E60282338

File PE Metadata
Compilation timestamp:
3/12/2014 12:10:06 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
3072:e7u3txDcB0bP0Thk+BClRz545M21m+2KIaIGQnnncMIK:e7ujpQC+Z6JKIBnNIK

Entry address:
0x12844

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 41, 8D, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 20, 2D, 03, 10, E8, BD, 01, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 04, 68, 03, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 7C, A1, 02, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4...
 
[+]

Entropy:
6.3658

Developed / compiled with:
Microsoft Visual C++

Code size:
159 KB (162,816 bytes)

The file fassurunbho.dll has been discovered within the following program.

fassurun  by Yontoo Technology, Inc.
This adware program injects advertisements with its affiliate ad providers in order to serve a number of ad types including banner, inline text links and popups.
fassurun.co/support
85% remove it
 
Powered by Should I Remove It?

Remove fassurunbho.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.