Home Malware Programs Browser Hijackers Vosteran

Vosteran

Posted: December 14, 2015

Threat Metric

Ranking: 2,523
Threat Level: 5/10
Infected PCs: 174,081
First Seen: October 13, 2014
Last Seen: March 10, 2025
OS(es) Affected: Windows

Vosteran is a cyber threat that may modify available browsers in a way that may cause inconvenience to their users. This parasite functions as a browser hijacker that may change the configuration of all available Web clients. It may set Vosteran.com as the default homepage and search engine of Google Chrome, Mozilla Firefox and Internet Explorer. This platform is known to deliver highly manipulated results to boost the incoming Web traffic towards affiliate sites. It copies part of its results straight from Yahoo but also may add a series of sponsored links. It is not prudent to go to the promoted pages because some of them may pose a risk to the functionality of your PC. Vosteran also may include various pop-ups, banners and interstitial ads in the Web pages. The process may slow down the operating speed of the browsers. In some instances, the presence of so many commercial materials may even cause crashes and freezes. Vosteran managed to draw the attention of the security specialists because it may be closely associated with threats. Some of the users whose computers were affected admitted that they had downloaded fake Adobe Flash Player Updates from questionable platforms.

These bogus updates brought various parasites in addition to Vosteran. Some of them may cripple the Operating System (OS), and you may be unable to launch the PC properly. Others may substitute the legit Google Chrome browser with a Web client that imitates it. It may be unsafe for you to type your account credentials through such a compromised browser because some hackers may obtain them. Also, the fake version of Google Chrome may promote other Potentially Unwanted Programs (PUPs). If you find Vosteran in the list of installed applications, you should proceed with a full scan of the PC to check for unsafe tools and delete them efficiently.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%SYSTEMDRIVE%\System Volume Information\_restore{06689D21-058A-4446-B0E2-E90A6A353332}\RP87\A0035742.exe File name: A0035742.exe
Size: 1.01 MB (1014272 bytes)
MD5: 6a29bbb10b6149f6aa0df401173e6ddc
Detection count: 4,117
File type: Executable File
Mime Type: unknown/exe
Path: %SYSTEMDRIVE%\System Volume Information\_restore{06689D21-058A-4446-B0E2-E90A6A353332}\RP87\A0035742.exe
Group: Malware file
Last Updated: August 25, 2020
%LOCALAPPDATA%\Vosteran\Application\Vosteran\helper.exe File name: helper.exe
Size: 88.06 KB (88064 bytes)
MD5: 3f8e1057e2a4730421976e0918c9542a
Detection count: 2,398
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Vosteran\Application\Vosteran
Group: Malware file
Last Updated: November 23, 2019
I:\C\AdwCleaner\Quarantine\C\Users\<username>\AppData\Local\Vosteran\Application\31.0.1650.23\delegate_execute.exe.vir File name: delegate_execute.exe.vir
Size: 1.46 MB (1462784 bytes)
MD5: af2592a7ac952a4c006dd455e963ca99
Detection count: 1,012
Mime Type: unknown/vir
Path: I:\C\AdwCleaner\Quarantine\C\Users\<username>\AppData\Local\Vosteran\Application\31.0.1650.23\delegate_execute.exe.vir
Group: Malware file
Last Updated: December 13, 2024
%APPDATA%\WSE_Vosteran\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 450.56 KB (450560 bytes)
MD5: 81714713107c861bdecb16ff5e150763
Detection count: 129
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: September 14, 2017
%APPDATA%\WSE_Vosteran\UpdateProc\bkup.dat File name: bkup.dat
Size: 16.7 KB (16704 bytes)
MD5: 318948ab544a9b45916c205c98093e9e
Detection count: 30
File type: Data file
Mime Type: unknown/dat
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: July 7, 2017
%LOCALAPPDATA%\Vosteran\Application\vosteran.exe File name: vosteran.exe
Size: 1.31 MB (1311619 bytes)
MD5: dc5bc01095d32e9409fbd82c09721378
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Vosteran\Application
Group: Malware file
Last Updated: March 19, 2016
C:\Users\<username>\appdata\local\vosteran\application\vosteran.exe File name: C:\Users\<username>\appdata\local\vosteran\application\vosteran.exe
MD5: 944a91af08bbed92bd0abc81203042a9
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
"C:\Users\<username>\appdata\Local\Vosteran\Application\31.0.1650.23\Installer\setup.exe" --uninstall File name: "C:\Users\<username>\appdata\Local\Vosteran\Application\31.0.1650.23\Installer\setup.exe" --uninstall
Mime Type: unknown/exe" --uninstall
Group: Malware file
chrome.dll File name: chrome.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
chrome_child.dll File name: chrome_child.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
npchrome_frame.dll File name: npchrome_frame.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
am.dll File name: am.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
ar.dll File name: ar.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
bg.dll File name: bg.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
bn.dll File name: bn.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
ca.dll File name: ca.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
chrome_frame_helper.dll File name: chrome_frame_helper.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
chrome_frame_helper.exe File name: chrome_frame_helper.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
chrome_launcher.exe File name: chrome_launcher.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
cs.dll File name: cs.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
d3dcompiler_46.dll File name: d3dcompiler_46.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
da.dll File name: da.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
de.dll File name: de.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
delegate_execute.exe File name: delegate_execute.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
el.dll File name: el.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
en-GB.dll File name: en-GB.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
en-US.dll File name: en-US.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
es.dll File name: es.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
es-419.dll File name: es-419.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
et.dll File name: et.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
fa.dll File name: fa.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
ffmpegsumo.dll File name: ffmpegsumo.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
fi.dll File name: fi.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
fil.dll File name: fil.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
fr.dll File name: fr.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
gu.dll File name: gu.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
he.dll File name: he.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
hi.dll File name: hi.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
hr.dll File name: hr.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
icudt.dll File name: icudt.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
id.dll File name: id.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
it.dll File name: it.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
ja.dll File name: ja.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
kn.dll File name: kn.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
libegl.dll File name: libegl.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
libglesv2.dll File name: libglesv2.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
metro_driver.dll File name: metro_driver.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
nacl64.exe File name: nacl64.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
ppgooglenaclpluginchrome.dll File name: ppgooglenaclpluginchrome.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
hu.dll File name: hu.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
wow_helper.exe File name: wow_helper.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{0A6B3C37-2EC3-508F-435B-7567673389FF}{4CB3598A-82E8-4D1F-983F-061238AE696E}File name without pathVosteran.lnkHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\DOMStorage\vosteran.comSoftware\Microsoft\Internet Explorer\SearchScopes\{9E20EB26-0B53-4159-9FC6-F2ACA85DF167}SOFTWARE\Microsoft\MediaPlayer\ShimInclusionList\vosteran.exeSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WSE_VosteranSOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\vosteran.exeSoftware\Microsoft\Windows\CurrentVersion\RunOnce\WSE_VosteranSOFTWARE\RegisteredApplications\Vosteran.NSJA6BHDA3NCFCFMXW3QSCUYUQSoftware\VosteranSoftware\Vosteran BrowserSOFTWARE\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\vosteran.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\vosteran.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\WSE_VosteranSOFTWARE\Wow6432Node\RegisteredApplications\Vosteran.NSJA6BHDA3NCFCFMXW3QSCUYUQSoftware\wse_vosteranHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}http://vosteran.com/?a=&qVosteranWSE_Vosteran

Additional Information

The following directories were created:
%APPDATA%\Microsoft\Windows\Start Menu\Programs\Vosteran%APPDATA%\Vosteran%APPDATA%\WSE_Vosteran%LOCALAPPDATA%\Vosteran%PROGRAMFILES%\WSE_Vosteran%PROGRAMFILES(x86)%\WSE_Vosteran%UserProfile%\Local Settings\Application Data\Vosteran
The following URL's were detected:
http://vosteran.com/?a=&qvosteran.com

Related Posts

Loading...