Home Malware Programs Potentially Unwanted Programs (PUPs) Browser Protector

Browser Protector

Posted: May 18, 2015

Threat Metric

Ranking: 7,910
Threat Level: 2/10
Infected PCs: 2,717
First Seen: May 5, 2015
Last Seen: October 11, 2023
OS(es) Affected: Windows

Browsers Protector is a Potentially Unwanted Program (PUP) that leaves the majority of its clients dissatisfied. It is promoted as a tool that can detect and block malicious web pages. This feature may seem very helpful as there are many threats in the cyberspace nowadays. Unfortunately, Browser Protector cannot accomplish the task properly as its real intentions are quite different. The PUP is associated with aggressive advertisements in the form of pop-ups, banners and hyperlinked keywords. For this reason, the cyber security experts define it as adware. For each successful redirection, the developer of Browser Protector ‒ a company named Bit89 Inc, receives a referral commission. In order to increase their profits, the creators of the PUP rely on an extensive partner network. Some of the promoted sites may be dangerous for your system, so you should ignore the ads. Browser Protector may appear in your system when you install freeware. To avoid giving access to unreliable additions, perform the process solely through the "Custom" option and opt-out of the suspicious elements. If it is already present, you should consider removing the adware with the help of a real anti-malware program. In addition, the security software will grant you a reliable real-time shield that can prevent malicious files from reaching your system.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files\browsers protector\regmon32.exe File name: C:\Program Files\browsers protector\regmon32.exe
MD5: 4d933fc2da1c1d5137c6213a4f8580d9
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
C:\Program Files\Browsers Protector\uninstall.exe File name: C:\Program Files\Browsers Protector\uninstall.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

Registry Modifications

The following newly produced Registry Values are:

CLSID{5A0A46CE-6EE1-4D2E-80A6-B75CEB82DC37}{5FAD746E-258C-4C50-BEBF-14D8FD2A82A1}{5FD27410-257D-4CEB-A56F-97D8472AA1A1}{804E1B08-EA5D-4546-8B63-9F574BAB5AA3}{80E71B1D-EA50-45CF-8498-4C57E8ABEAA3}{EAA81D3F-2285-411B-A270-1E8D7DA8D05E}{F3208757-E861-417F-B689-D0AFB7D939BD}{F34787E5-E8EE-4148-A424-11AFA7D989BD}HKEY..\..\..\..{RegistryKeys}SOFTWARE\BrowserProtectorSOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EAA81D3F-2285-411B-A270-1E8D7DA8D05E}SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{804E1B08-EA5D-4546-8B63-9F574BAB5AA3}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{804E1B08-EA5D-4546-8B63-9F574BAB5AA3}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{804E1B08-EA5D-4546-8B63-9F574BAB5AA3}SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{804E1B08-EA5D-4546-8B63-9F574BAB5AA3}Software\Proxy\installations\BrowserProtectorSOFTWARE\Wow6432Node\BrowserProtectorSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EAA81D3F-2285-411B-A270-1E8D7DA8D05E}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{804E1B08-EA5D-4546-8B63-9F574BAB5AA3}SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID\{804E1B08-EA5D-4546-8B63-9F574BAB5AA3}SOFTWARE\Wow6432Node\Proxy\Installations\BrowserProtector

Additional Information

The following directories were created:
%APPDATA%\Microsoft\Windows\Start Menu\Programs\BrowserProtector%LOCALAPPDATA%\BrowserProtector%PROGRAMFILES%\BrowserProtector%PROGRAMFILES(x86)%\BrowserProtector%USERPROFILE%\AppData\LocalLow\{804E1B08-EA5D-4546-8B63-9F574BAB5AA3}
The following URL's were detected:
www.bit89.com/contact.html
Loading...