home

spext.dll

BrowserProtect

Bit89 Inc.

The module spext.dll has been detected as a potentially unwanted program by 9 anti-malware scanners.
Publisher:
Bit89 Inc.

Product:
BrowserProtect

Version:
2,5,980,60

MD5:
1b13ebb4ea882b54bc413a214be4b602

SHA-1:
1602aaf908abc99cbd837086b899e501407678e3

SHA-256:
1e3b3eb39bc4591f3b04184d3c52345eff331bf2fbc897d7cbfdabc689685ebb

Scanner detections:
9 / 68

Status:
Potentially unwanted

Explanation:
This service will prevent resources from modifying the web browser's home and search pages as well as the search provider set by the product, an affiliate search engine partner.

Analysis date:
5/10/2024 12:35:39 PM UTC  (today)

Scan engine
Detection
Engine version

AVG
Dropper.Generic9
2015.0.3556

Baidu Antivirus
Trojan.Win32.Rotbrow
4.0.3.14222

Dr.Web
Adware.BGuard.5
9.0.1.053

ESET NOD32
Win32/bProtector
8.9371

Fortinet FortiGate
Riskware/BProtector
2/22/2014

K7 AntiVirus
Trojan
13.175.11028

Microsoft Security Essentials
TrojanDropper:Win32/Rotbrow.F
1.165.247.01

Trend Micro House Call
TROJ_GEN.R0CBH01L813
7.2.53

VIPRE Antivirus
Trojan.Win32.Generic
26060

File size:
68.5 KB (70,144 bytes)

Product version:
2,5,980,60

Copyright:
Copyright 2012

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\google\chrome\user data\default\extensions\pgafcinpmmpklohkojmllohdhomoefph\1.0_0\spext.dll

File PE Metadata
Compilation timestamp:
12/6/2012 5:06:51 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
10.0

CTPH (ssdeep):
768:C9wmOzkMwx/zYuw+zeNIv1lwzTOyXoXghEkkIFUIYySS4Zkg6EDgnZL2vwNp9PLY:C9wpox0YzemlwlEknUIYySCZ9p9s

Entry address:
0x4CF0

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 14, 2B, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 6A, 0C, 68, 58, EF, 00, 10, E8, E1, 14, 00, 00, 6A, 0E, E8, 03, 2D, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08, 8B, 4E, 04, 85, C9, 74, 2F, A1, 88, 0C, 01, 10, BA, 84, 0C, 01, 10, 89, 45, E4, 85, C0, 74, 11, 39, 08, 75, 2C, 8B, 48, 04, 89, 4A, 04, 50, E8, 1D, EE, FF, FF, 59, FF, 76, 04, E8, 14, EE, FF, FF, 59, 83, 66, 04, 00, C7, 45, FC, FE, FF, FF, FF, E8, 0A, 00, 00, 00...
 
[+]

Code size:
37.5 KB (38,400 bytes)

Remove spext.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.