» gatesnapperbho.dll
Overview
Analysis
File Details
Behaviors (1)
Programs (1)
Downloads (1)

gatesnapperbho.dll

gate snapper

Part of the Yontoo adware component, a web browser plugin that injects unwanted ads in the browser. The module gatesnapperbho.dll by gate snapper has been detected as adware by 40 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘gate snapper 1.0.0.7’. This file is typically installed with the program gate snapper by Yontoo Technology, Inc. which is a potentially unwanted software program. It will plug into the web browser and display context-based advertisements by overwriting existing ads or by inserting new ones on various web pages.

File name:

gatesnapperbho.dll

Publisher:

gate snapper (signed and verified)

Product:

gate snapper

Version:

1.0.0.7

MD5:

ffc9829c5fc897192f2c71188f12bd1a

SHA-1:

bbb8783f8a8ac30d5be59acccd2a70f0614c4e8b

SHA-256:

01b776b2b254678806071249124e734b344da22f474db939e4379ed72fcdab2b

Scanner detections:

40 / 68

Status:

Adware

Explanation:

Injects advertising in the web browser in various formats.

Analysis date:

6/24/2025 1:43:55 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Gen:Variant.Adware.Mikey.11547

589

Agnitum Outpost

Riskware.Agent

7.1.1

AhnLab V3 Security

PUP/Win32.BrowseFox

2015.05.07

Avira AntiVirus

ADWARE/BrowseFox.Gen2

7.11.209.134

Arcabit

Adware.BrowseFox.CY

1.0.0.425

avast!

MSIL:BrowseFox-BE [PUP]

2014.9-150626

AVG

AdPlugin

2016.0.3067

Baidu Antivirus

Adware.Win32.BrowseFox

4.0.3.15626

Bitdefender

Adware.BrowseFox.CY

1.0.20.885

Bkav FE

W32.HfsAdware

1.3.0.6379

Clam AntiVirus

Win.Adware.Browsefox-536

0.98/21511

Comodo Security

Application.Win32.BrowseFox.JM

20860

Dr.Web

Trojan.Yontoo.1734

9.0.1.0177

Emsisoft Anti-Malware

Adware.BrowseFox.CY

8.15.06.26.04

ESET NOD32

Win32/BrowseFox.AE potentially unwanted (variant)

9.11590

Fortinet FortiGate

Riskware/BrowseFox

6/26/2015

F-Prot

W32/S-9c4b2ea6

v6.4.7.1.166

F-Secure

Gen:Variant.Adware.Mikey

11.2015-26-06_6

G Data

Adware.BrowseFox.CY

15.6.25

IKARUS anti.virus

PUA.BrowseFox

t3scan.1.8.9.0

K7 AntiVirus

Trojan

13.203.15832

Kaspersky

not-a-virus:AdWare.Win32.Agent

14.0.0.1829

Malwarebytes

PUP.Optional.GateSnapper.A

v2015.06.26.04

McAfee

Artemis!FFC9829C5FC8

5600.6723

MicroWorld eScan

Adware.BrowseFox.CY

16.0.0.531

NANO AntiVirus

Trojan.Win32.Yontoo.dnkubo

0.30.24.1357

Norman

Gen:Variant.Adware.BetterBrowse.1

11.20150626

nProtect

Adware.BrowseFox.BJ

15.01.26.01

Panda Antivirus

PUP/BrowserFox

15.06.26.04

Qihoo 360 Security

HEUR/QVM30.1.Malware.Gen

1.0.0.1015

Quick Heal

PUA.MSJDGBTIR.OD5

6.15.14.00

Reason Heuristics

PUP.Yontoo.gatesnapper (M)

15.6.26.4

Rising Antivirus

PE:Adware.BrowseFox!6.1D8B

23.00.65.15624

Sophos

Generic PUA LL

4.98

SUPERAntiSpyware

Adware.BrowseFox/Variant

9791

Trend Micro House Call

TROJ_GEN.R02SC0ODA15

7.2.177

Trend Micro

TROJ_GEN.R02SC0ODA15

10.465.26

Vba32 AntiVirus

AdWare.MSIL.Agent

3.12.26.3

VIPRE Antivirus

Yontoo

40024

Zillya! Antivirus

Backdoor.PePatch.Win32.58304

2.0.0.2033

File size:

262.7 KB (269,048 bytes)

Product version:

1.0.0.7

File type:

Dynamic link library (Win32 DLL)

Language:

English (United States)

Common path:

C:\Program Files\gate snapper\gatesnapperbho.dll

Digital Signature

Signed by:

gate snapper

Authority:

VeriSign, Inc.

Valid from:

11/20/2014 8:00:00 AM

Valid to:

11/21/2015 7:59:59 AM

Subject:

CN=gate snapper, O=gate snapper, L=Santa Monica, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

133A7A0373BA5F8F11B450D044B92146

File PE Metadata

Compilation timestamp:

4/4/2015 11:13:19 AM

OS version:

6.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

CTPH (ssdeep):

3072:4miYckxqEbUViVqUsVNXBB+/nFK3wY+lx9ZKT8hKj7cEFv:4miYckziiVMrXFdI9ZrYo0v

Entry address:

0xF515

Entry point:

55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, EA, 7E, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, D8, 21, 03, 10, E8, 4C, 02, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 4C, 77, 03, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, C4, 93, 02, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4... 
[+]

Entropy:

6.0736

Developed / compiled with:

Microsoft Visual C++

Code size:

159 KB (162,816 bytes)

Internet Explorer BHO

Display name:

gate snapper 1.0.0.7

CLSID:

{4a532aa9-cf26-4fd4-b245-cb4e3b401af9}

The file gatesnapperbho.dll has been discovered within the following program.

gate snapper by Yontoo Technology, Inc.

This is browser adware. It installs in the user's web browser and while running will display unwanted ads from malicious software and other adware. It is bundled through download managers.

gatesnapper.com/support

87% remove it

The file gatesnapperbho.dll has been seen being distributed by the following URL.

http://install-cdn.gatesnapper.com/bed?r=2015040415&bet=3

Remove gatesnapperbho.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.