Home Malware Programs Adware KingBrowse

KingBrowse

Posted: March 27, 2014

Threat Metric

Ranking: 12,368
Threat Level: 2/10
Infected PCs: 2,351
First Seen: March 27, 2014
Last Seen: October 2, 2023
OS(es) Affected: Windows


KingBrowse is adware that may show disturbing pop-up advertisements, messages and banners including various deals and offers when computer users are using the well-known search service websites. KingBrowse may embed pop-up ads, messages and banners in search results of any genuine search provider and a variety of other websites that may be created for commercial intentions. Websites associated with KingBrowse may be produced to possibly generate advertising income from clicks on pop-up ads and raised web traffic. KingBrowse may integrate itself as a plug-in or add-on in Internet Explorer and Mozilla Firefox and as a browser extension in Google Chrome. In the Internet Explorer Web browser, KingBrowse may also run as a process and a Browser Helper Object (BHO).

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES%\KingBrowse\updateKingBrowse.exe File name: updateKingBrowse.exe
Size: 350.49 KB (350496 bytes)
MD5: ddc7181234a589853e130e8cb812ab3d
Detection count: 83
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\KingBrowse
Group: Malware file
Last Updated: April 24, 2014
%PROGRAMFILES(x86)%\KingBrowse\KingBrowse.FirstRun.exe File name: KingBrowse.FirstRun.exe
Size: 1.12 MB (1122592 bytes)
MD5: ddb71c8bc136b854359a57330288fece
Detection count: 42
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\KingBrowse
Group: Malware file
Last Updated: April 24, 2014
%PROGRAMFILES%\KingBrowse\KingBrowse.FirstRun.exe File name: KingBrowse.FirstRun.exe
Size: 1.12 MB (1121568 bytes)
MD5: a48b79ac0c9a66f387cce382290112ec
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\KingBrowse
Group: Malware file
Last Updated: April 24, 2014
%PROGRAMFILES(x86)%\KingBrowse\KingBrowse.FirstRun.exe File name: KingBrowse.FirstRun.exe
Size: 1.12 MB (1122592 bytes)
MD5: 687a4b4e8a1333d4bd8a43985ef60482
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\KingBrowse
Group: Malware file
Last Updated: April 24, 2014
%PROGRAMFILES%\KingBrowse\KingBrowse.FirstRun.exe File name: KingBrowse.FirstRun.exe
Size: 1.12 MB (1121568 bytes)
MD5: 2b8e5b0af273cf6d2dcd88114ee3c754
Detection count: 2
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\KingBrowse
Group: Malware file
Last Updated: April 24, 2014

Registry Modifications

The following newly produced Registry Values are:

CLSID{2A55F1F3-5240-489B-B4CA-1B4FCFA22D7A}{74B203BC-A913-4FCD-A659-F4404C1E1C70}{a5915ec9-2613-45fc-931c-229a142d396c}{AC9F8055-F1D1-4B8E-B084-8B589FCA7981}HKEY..\..\..\..{RegistryKeys}Software\KingBrowseSOFTWARE\Microsoft\Tracing\updateKingBrowse_RASAPI32SOFTWARE\Microsoft\Tracing\updateKingBrowse_RASMANCSSoftware\Microsoft\Windows\CurrentVersion\Ext\Settings\{A5915EC9-2613-45FC-931C-229A142D396C}Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{F7B841C2-39C5-4B60-93C3-1C7A31D21F30}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A5915EC9-2613-45FC-931C-229A142D396C}Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F7B841C2-39C5-4B60-93C3-1C7A31D21F30}SOFTWARE\Wow6432Node\KingBrowseSOFTWARE\Wow6432Node\Microsoft\Tracing\updateKingBrowse_RASAPI32SOFTWARE\Wow6432Node\Microsoft\Tracing\updateKingBrowse_RASMANCSSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{a5915ec9-2613-45fc-931c-229a142d396c}SYSTEM\ControlSet001\services\eventlog\Application\Update KingBrowseSYSTEM\ControlSet001\services\Update KingBrowseSYSTEM\ControlSet002\services\eventlog\Application\Update KingBrowseSYSTEM\ControlSet002\services\Update KingBrowseSYSTEM\CurrentControlSet\services\eventlog\Application\Update KingBrowseSYSTEM\CurrentControlSet\services\Update KingBrowseHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}KingBrowse

Additional Information

The following directories were created:
%PROGRAMFILES%\KingBrowse%PROGRAMFILES(x86)%\KingBrowse%TEMP%\KingBrowse
Loading...