Home Malware Programs Trojans BrowserModifier.Kerlofost

BrowserModifier.Kerlofost

Posted: November 8, 2011

Threat Metric

Threat Level: 8/10
Infected PCs: 14
First Seen: September 19, 2011
OS(es) Affected: Windows

BrowserModifier.Kerlofost is a browser hijacker known to modify ones web browser settings. A PC infected with BrowserModifier.Kerlofost will commonly redirect users to unwanted or malicious sites. Some of the sites that BrowserModifier.Kerlofost sends users too have been known to peddle malware in addition to collecting personal data. BrowserModifier.Kerlofost may also display misleading pop-up messages leading to other unwanted redirects to malicious sites. It is important to eliminate the threat of BrowserModifier.Kerlofost the instant that it is detected.

Aliases

Generic Trojan [Panda]Generic4.GQL [AVG]Adware/BHO [Fortinet]not-a-virus:AdWare.Win32.Reklosoft [Ikarus]BrowserModifier:Win32/Kerlofost [Microsoft]AdWare/Win32.Reklosoft.gen [Antiy-AVL]Win32/SillyBHO.FW [eTrust-Vet]Troj/BHO-MN [Sophos]ADSPY/Reklosoft.A [AntiVir]Adware.Reklosoft.4 [DrWeb]Application.Win32.Adware.Reklosoft.~OSO [Comodo]Trojan.Generic.5430833 [BitDefender]not-a-virus:AdWare.Win32.Reklosoft.v [Kaspersky]Trojan.Adwareloader [Symantec]Win32/BHO.NQT [NOD32]
More aliases (26)

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%WINDIR%\system32\win32pipe.dll File name: win32pipe.dll
Size: 155.64 KB (155648 bytes)
MD5: 7cdf12a1d85c972f39c23564de4dc3eb
Detection count: 14
File type: Dynamic link library
Mime Type: unknown/dll
Path: %WINDIR%\system32
Group: Malware file
Last Updated: September 19, 2011
3rs23562.dll File name: 3rs23562.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

HKEY..\..\{CLSID Path}HKCR\CLSID\{71E59D37-D7FC-4ED6-BC1D-D13BE02FE6C5}HKCR\CLSID\{FFFFE708-B832-42F1-BAFF-247753B5E452}HKCR\TypeLib\{2552632F-867D-4052-B836-7F83A5302534}HKCR\Interface\{E743CF05-181C-4D72-B4EE-95435ED4B86B}HKCR\Interface\{F1287389-B2FE-4315-8484-540B2033646D}HKCR\AppID\{D96FA298-1BB6-47FC-AD21-72781B744DC3}HKEY..\..\..\..{Subkeys}HKCR\AppID\rs_adw.DLLHKCR\reklosoft_adw.Helper_BarHKCR\rs_adw.Helper_bho
Loading...