Home Malware Programs Browser Hijackers Vosteran

Vosteran

Posted: December 14, 2015

Threat Metric

Ranking: 1,812
Threat Level: 5/10
Infected PCs: 172,140
First Seen: October 13, 2014
Last Seen: October 17, 2023
OS(es) Affected: Windows

Vosteran is a cyber threat that may modify available browsers in a way that may cause inconvenience to their users. This parasite functions as a browser hijacker that may change the configuration of all available Web clients. It may set Vosteran.com as the default homepage and search engine of Google Chrome, Mozilla Firefox and Internet Explorer. This platform is known to deliver highly manipulated results to boost the incoming Web traffic towards affiliate sites. It copies part of its results straight from Yahoo but also may add a series of sponsored links. It is not prudent to go to the promoted pages because some of them may pose a risk to the functionality of your PC. Vosteran also may include various pop-ups, banners and interstitial ads in the Web pages. The process may slow down the operating speed of the browsers. In some instances, the presence of so many commercial materials may even cause crashes and freezes. Vosteran managed to draw the attention of the security specialists because it may be closely associated with threats. Some of the users whose computers were affected admitted that they had downloaded fake Adobe Flash Player Updates from questionable platforms.

These bogus updates brought various parasites in addition to Vosteran. Some of them may cripple the Operating System (OS), and you may be unable to launch the PC properly. Others may substitute the legit Google Chrome browser with a Web client that imitates it. It may be unsafe for you to type your account credentials through such a compromised browser because some hackers may obtain them. Also, the fake version of Google Chrome may promote other Potentially Unwanted Programs (PUPs). If you find Vosteran in the list of installed applications, you should proceed with a full scan of the PC to check for unsafe tools and delete them efficiently.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%APPDATA%\WSE_Vosteran\UpdateProc\bkup.dat File name: bkup.dat
Size: 17.47 KB (17474 bytes)
MD5: 1f032b23dadb1e50c84beef698d49713
Detection count: 129
File type: Data file
Mime Type: unknown/dat
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: July 7, 2017
%APPDATA%\WSE_Vosteran\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 450.56 KB (450560 bytes)
MD5: 81714713107c861bdecb16ff5e150763
Detection count: 129
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: September 14, 2017
%APPDATA%\WSE_Vosteran\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 475.64 KB (475648 bytes)
MD5: 1e6eca0bc6a58c9dac3dd93628228080
Detection count: 105
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: September 14, 2017
%APPDATA%\WSE_Vosteran\UpdateProc\bkup.dat File name: bkup.dat
Size: 18.27 KB (18275 bytes)
MD5: 9bb829d43653349012133f5c13479436
Detection count: 96
File type: Data file
Mime Type: unknown/dat
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: July 7, 2017
%LOCALAPPDATA%\Vosteran\Application\vosteran.exe File name: vosteran.exe
Size: 1.15 MB (1152927 bytes)
MD5: 4f570dc695159d5a895d78ed0b0174ee
Detection count: 92
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Vosteran\Application
Group: Malware file
Last Updated: March 19, 2016
%LOCALAPPDATA%\Vosteran\Application\vosteran.exe File name: vosteran.exe
Size: 3.24 MB (3242496 bytes)
MD5: 6253b94773983ec33085b19c111183ed
Detection count: 70
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Vosteran\Application
Group: Malware file
Last Updated: March 19, 2016
%APPDATA%\WSE_Vosteran\UpdateProc\bkup.dat File name: bkup.dat
Size: 18.26 KB (18269 bytes)
MD5: 606b76ec1bc1c07dc2225631df15c234
Detection count: 66
File type: Data file
Mime Type: unknown/dat
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: July 7, 2017
%APPDATA%\WSE_Vosteran\UpdateProc\bkup.dat File name: bkup.dat
Size: 19.37 KB (19379 bytes)
MD5: a109c316b7d28ce552cd4a79bc47fb68
Detection count: 66
File type: Data file
Mime Type: unknown/dat
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: July 7, 2017
%LOCALAPPDATA%\Vosteran\Application\vosteran.exe File name: vosteran.exe
Size: 1.04 MB (1041920 bytes)
MD5: 80326c7c52d474dfc2586f3d0287fc24
Detection count: 62
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Vosteran\Application
Group: Malware file
Last Updated: March 19, 2016
%APPDATA%\WSE_Vosteran\UpdateProc\bkup.dat File name: bkup.dat
Size: 19.82 KB (19825 bytes)
MD5: 1db2c76685ab9be965a623ea52cf3d0d
Detection count: 44
File type: Data file
Mime Type: unknown/dat
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: July 7, 2017
%APPDATA%\WSE_Vosteran\UpdateProc\bkup.dat File name: bkup.dat
Size: 16.35 KB (16355 bytes)
MD5: 9d5e0f13243766e6d11d1a0a1460755a
Detection count: 42
File type: Data file
Mime Type: unknown/dat
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: July 7, 2017
%APPDATA%\WSE_Vosteran\UpdateProc\bkup.dat File name: bkup.dat
Size: 18.64 KB (18647 bytes)
MD5: b8e05d78a75eadf2cad33f5ae8675040
Detection count: 30
File type: Data file
Mime Type: unknown/dat
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: July 7, 2017
%APPDATA%\WSE_Vosteran\UpdateProc\bkup.dat File name: bkup.dat
Size: 16.7 KB (16704 bytes)
MD5: 318948ab544a9b45916c205c98093e9e
Detection count: 30
File type: Data file
Mime Type: unknown/dat
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: July 7, 2017
%APPDATA%\WSE_Vosteran\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 500.41 KB (500417 bytes)
MD5: 6695bc2a98d91d49386af14d52d0e9a2
Detection count: 26
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%SystemDrive%\Users\<username>\AppData\Roaming\WSE_Vosteran\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 517.99 KB (517991 bytes)
MD5: 6311c9f5fdb5a5c300084f353b39ea77
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: %SystemDrive%\Users\<username>\AppData\Roaming\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%APPDATA%\WSE_Vosteran\UpdateProc\UpdateTask.exe File name: UpdateTask.exe
Size: 517.73 KB (517736 bytes)
MD5: a8540eda05b58ac73e2ef6983f1a20cb
Detection count: 14
File type: Executable File
Mime Type: unknown/exe
Path: %APPDATA%\WSE_Vosteran\UpdateProc
Group: Malware file
Last Updated: March 22, 2016
%LOCALAPPDATA%\Vosteran\Application\vosteran.exe File name: vosteran.exe
Size: 1.31 MB (1311619 bytes)
MD5: dc5bc01095d32e9409fbd82c09721378
Detection count: 12
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Vosteran\Application
Group: Malware file
Last Updated: March 19, 2016
%LOCALAPPDATA%\Vosteran\Application\vosteran.exe File name: vosteran.exe
Size: 2.12 MB (2128384 bytes)
MD5: 9b986c9f99a099605471b05e1fadf61f
Detection count: 9
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Vosteran\Application
Group: Malware file
Last Updated: March 19, 2016
%LOCALAPPDATA%\Vosteran\Application\vosteran.exe File name: vosteran.exe
Size: 1.01 MB (1014272 bytes)
MD5: ae8f905d39ca149695accaca6864db25
Detection count: 7
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Vosteran\Application
Group: Malware file
Last Updated: March 19, 2016
%USERPROFILE%\Local Settings\Application Data\Vosteran\Application\vosteran.exe File name: vosteran.exe
Size: 1.08 MB (1083904 bytes)
MD5: 123f683c6e79bc559f95e863a241a398
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %USERPROFILE%\Local Settings\Application Data\Vosteran\Application
Group: Malware file
Last Updated: March 19, 2016
%LOCALAPPDATA%\Vosteran\Application\vosteran.exe File name: vosteran.exe
Size: 1.19 MB (1191902 bytes)
MD5: b2914b18c9c179fff894e42544b64e8c
Detection count: 5
File type: Executable File
Mime Type: unknown/exe
Path: %LOCALAPPDATA%\Vosteran\Application
Group: Malware file
Last Updated: March 19, 2016
C:\Users\<username>\appdata\local\vosteran\application\vosteran.exe File name: C:\Users\<username>\appdata\local\vosteran\application\vosteran.exe
MD5: 944a91af08bbed92bd0abc81203042a9
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
"C:\Users\<username>\appdata\Local\Vosteran\Application\31.0.1650.23\Installer\setup.exe" --uninstall File name: "C:\Users\<username>\appdata\Local\Vosteran\Application\31.0.1650.23\Installer\setup.exe" --uninstall
Mime Type: unknown/exe" --uninstall
Group: Malware file
chrome.dll File name: chrome.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
chrome_child.dll File name: chrome_child.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
npchrome_frame.dll File name: npchrome_frame.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
am.dll File name: am.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
ar.dll File name: ar.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
bg.dll File name: bg.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
bn.dll File name: bn.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
ca.dll File name: ca.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
chrome_frame_helper.dll File name: chrome_frame_helper.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
chrome_frame_helper.exe File name: chrome_frame_helper.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
chrome_launcher.exe File name: chrome_launcher.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
cs.dll File name: cs.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
d3dcompiler_46.dll File name: d3dcompiler_46.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
da.dll File name: da.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
de.dll File name: de.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
delegate_execute.exe File name: delegate_execute.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
el.dll File name: el.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
en-GB.dll File name: en-GB.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
en-US.dll File name: en-US.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
es.dll File name: es.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
es-419.dll File name: es-419.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
et.dll File name: et.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
fa.dll File name: fa.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
ffmpegsumo.dll File name: ffmpegsumo.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
fi.dll File name: fi.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
fil.dll File name: fil.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
fr.dll File name: fr.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
gu.dll File name: gu.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
he.dll File name: he.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
hi.dll File name: hi.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
hr.dll File name: hr.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
icudt.dll File name: icudt.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
id.dll File name: id.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
it.dll File name: it.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
ja.dll File name: ja.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
kn.dll File name: kn.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
libegl.dll File name: libegl.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
libglesv2.dll File name: libglesv2.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
metro_driver.dll File name: metro_driver.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
nacl64.exe File name: nacl64.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file
ppgooglenaclpluginchrome.dll File name: ppgooglenaclpluginchrome.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
hu.dll File name: hu.dll
File type: Dynamic link library
Mime Type: unknown/dll
Group: Malware file
wow_helper.exe File name: wow_helper.exe
File type: Executable File
Mime Type: unknown/exe
Group: Malware file

More files

Registry Modifications

The following newly produced Registry Values are:

CLSID{0A6B3C37-2EC3-508F-435B-7567673389FF}{4CB3598A-82E8-4D1F-983F-061238AE696E}File name without pathVosteran.lnkHKEY..\..\..\..{RegistryKeys}Software\Microsoft\Internet Explorer\DOMStorage\vosteran.comSoftware\Microsoft\Internet Explorer\SearchScopes\{9E20EB26-0B53-4159-9FC6-F2ACA85DF167}SOFTWARE\Microsoft\MediaPlayer\ShimInclusionList\vosteran.exeSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WSE_VosteranSOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\vosteran.exeSoftware\Microsoft\Windows\CurrentVersion\RunOnce\WSE_VosteranSOFTWARE\RegisteredApplications\Vosteran.NSJA6BHDA3NCFCFMXW3QSCUYUQSoftware\VosteranSoftware\Vosteran BrowserSOFTWARE\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\vosteran.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\vosteran.exeSOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\WSE_VosteranSOFTWARE\Wow6432Node\RegisteredApplications\Vosteran.NSJA6BHDA3NCFCFMXW3QSCUYUQSoftware\wse_vosteranHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}http://vosteran.com/?a=&qVosteranWSE_Vosteran

Additional Information

The following directories were created:
%APPDATA%\Microsoft\Windows\Start Menu\Programs\Vosteran%APPDATA%\Vosteran%APPDATA%\WSE_Vosteran%LOCALAPPDATA%\Vosteran%PROGRAMFILES%\WSE_Vosteran%PROGRAMFILES(x86)%\WSE_Vosteran%UserProfile%\Local Settings\Application Data\Vosteran
The following URL's were detected:
http://vosteran.com/?http://vosteran.com/?a=&q

Related Posts

Loading...