home

WebexpEnhancedV1alpha305.dll

Webexp Enhanced alpha 305

The module WebexpEnhancedV1alpha305.dll has been detected as adware by 10 anti-malware scanners. It is installed within the context of Internet Explore as a BHO (Browser Helper Object) under the name ‘WebexpEnhancedV1alpha305’. This file is typically installed with the program Webexp Enhanced by BetterSurf which is a potentially unwanted software program. BetterSurf is a program that comes with software bundlers that offer free applications and will add a plugin to Internet Explorer, Firefox, and Chrome which displays advertisements on websites and search engines. In addition it will redirct various web browsing to various malvertisng sites.
Product:
Webexp Enhanced alpha 305

Description:
Webexp Enhanced

Version:
1.0.0.1

MD5:
63b33e7efe19402553115c28c6fa2df1

SHA-1:
d6feae68d1c99a1f178c845bbb00d6bdea8e7f58

SHA-256:
e16ebdc1fda9d1697d639666543ecab6bdeb0ab6b387aa91fbd28c4feb3c8e86

Scanner detections:
10 / 68

Status:
Adware

Explanation:
Installed with software bundlers that offer free applications or games and adds a plugin to Internet Explorer, Firefox, and Chrome and will display ads as the user browses the Internet, both in websites and on search engine results

Analysis date:
4/23/2024 11:33:04 PM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Avira AntiVirus
ADWARE/Adware.Gen
7.11.121.222

AVG
Skodna.Generic_r
2015.0.3501

Baidu Antivirus
Adware.Win32.BetterSurf
4.0.3.14417

Comodo Security
Application.Win32.BetterSurf.B
17495

ESET NOD32
Win32/AdWare.BetterSurf (variant)
8.9190

Kaspersky
not-a-virus:AdWare.Win32.BetterSurf
14.0.0.4000

NANO AntiVirus
Riskware.Win32.BetterSurf.crmmub
0.28.0.57029

Reason Heuristics
Adware.MediaWatch.Y
14.4.17.23

Sophos
Generic PUA NG
4.96

Trend Micro House Call
TROJ_GEN.R00JH07LO13
7.2.107

File size:
85.5 KB (87,552 bytes)

Product version:
1.0.0.1

Copyright:
(c) 2012-2014. All rights reserved.

Original file name:
WebexpEnhancedV1alpha305.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\Program Files\webexpenhancedv1\webexpenhancedv1alpha305\ie\webexpenhancedv1alpha305.dll

File PE Metadata
Compilation timestamp:
12/19/2013 10:40:59 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
1536:h/fNScAkcsJ3t/1bhk8DkmiJc8lQs5Jz2:RNCkcsJd/1bhXiJBakJi

Entry address:
0x7A77

Entry point:
8B, FF, 55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 3B, 38, 00, 00, FF, 75, 08, 8B, 4D, 10, 8B, 55, 0C, E8, EC, FE, FF, FF, 59, 5D, C2, 0C, 00, 8B, FF, 55, 8B, EC, 68, EC, EE, 00, 10, FF, 15, 5C, E0, 00, 10, 85, C0, 74, 15, 68, DC, EE, 00, 10, 50, FF, 15, 60, E0, 00, 10, 85, C0, 74, 05, FF, 75, 08, FF, D0, 5D, C3, 8B, FF, 55, 8B, EC, FF, 75, 08, E8, C8, FF, FF, FF, 59, FF, 75, 08, FF, 15, D4, E0, 00, 10, CC, 6A, 08, E8, 57, 3D, 00, 00, 59, C3, 6A, 08, E8, 75, 3C, 00, 00, 59, C3, 8B, FF, 56, E8, 0F, 19, 00, 00...
 
[+]

Entropy:
6.1161

Code size:
49 KB (50,176 bytes)

Internet Explorer BHO
Display name:
WebexpEnhancedV1alpha305

CLSID:
{f2c63605-5389-4432-be5e-c999bca4060d}

CLSID name:
Webexp Enhanced


The file WebexpEnhancedV1alpha305.dll has been discovered within the following program.

Webexp Enhanced  by BetterSurf
Webexp Enhanced is an adware program that displays advertisements on the uses PC through the web browser.
86% remove it
 
Powered by Should I Remove It?

Remove WebexpEnhancedV1alpha305.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.