BetterMarkit

BetterMarkit Description

BetterMarkit is an adware threat that may load on a system without any indication to the PC user. Once loaded, BetterMarkit may display several advertisements as pop-ups. Some BetterMarkit ads may associate with various websites like the windows.iyogi.com site or ones attempting to advertise products and services over the internet. Additionally, BetterMarkit may render ad banners or ad blocks appearing on most popular web browser applications, including Internet Explorer, Firefox and Chrome. Stopping the BetterMarkit ads from being displayed may require finding all files related to BetterMarkit and remove each of them including any browser plugins or other components. Usually the removal process for BetterMarkit may be accomplished through the use of an updated antispyware tool.

Infected with BetterMarkit? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect BetterMarkit

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of BetterMarkit outbreaks and other threats from global to local level.

File System Details

BetterMarkit creates the following file(s):
# File Name Size MD5 Detection Count
1 %PROGRAMFILES(x86)%\bettermarkit\bettermarkit-bg.exe 738,304 cab70f3763ccdeebc5e3d98aaa5032d0 300
2 %PROGRAMFILES(x86)%\BetterMarkIt\BetterMarkIt-bho64.dll 940,544 181b79c8f8ab9139afe35cbf36ef8668 297
3 %LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\mmefamcindnohldcgdjpgfmiakjeldhm 175
4 %LOCALAPPDATA%\Google\Chrome\User Data\Default\databases\chrome-extension_mmefamcindnohldcgdjpgfmiakjeldhm_0 172
5 %USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default\databases\chrome-extension_mmefamcindnohldcgdjpgfmiakjeldhm_0 169
6 %USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\mmefamcindnohldcgdjpgfmiakjeldhm 166
7 %USERPROFILE%\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\mmefamcindnohldcgdjpgfmiakjeldhm 162
8 chrome-extension_mmefamcindnohldcgdjpgfmiakjeldhm_0.localstorage-journal 156
9 %PROGRAMFILES%\bettermarkit\150.dll 146,944 002758970f8fe5f046dda06a421d8acd 22
10 %PROGRAMFILES(x86)%\bettermarkit-soft 16
11 %PROGRAMFILES%\bettermarkit-soft 12
12 %PROGRAMFILES%\bettermarkit\markitup.exe 236,544 1af2e322647dc2ca6cf73823b0f11653 5

Registry Details

BetterMarkit creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
CrossriderApp0043544.BHO
CrossriderApp0043544.BHO.1
CrossriderApp0043544.Sandbox
CrossriderApp0043544.Sandbox.1
Software\AppDataLow\Software\BetterMarkIt
SOFTWARE\Classes\CrossriderApp0043544.BHO.1
SOFTWARE\Classes\CrossriderApp0043544.Sandbox
SOFTWARE\Classes\CrossriderApp0043544.Sandbox.1
Software\Cr_Installer\43544
Software\InstalledBrowserExtensions\re-markable
Software\Microsoft\Internet Explorer\Approved Extensions, value: {11111111-1111-1111-1111-110411351144}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{244f3702-f7ed-49ab-b8e7-58ef6de8d449}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{478532a6-4061-409f-b428-71614d823551}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{490bdbb9-7069-40b7-b72e-8afa17100fe5}
SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b16ce338-724a-4b54-b229-899d5ece5abc}
SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION, value: BetterMarkIt-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{244f3702-f7ed-49ab-b8e7-58ef6de8d449}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{478532a6-4061-409f-b428-71614d823551}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{490bdbb9-7069-40b7-b72e-8afa17100fe5}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{b16ce338-724a-4b54-b229-899d5ece5abc}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{ceb20443-3acd-4d2f-aa48-8ff079937370}
SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION, value: BetterMarkIt-bg.exe
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{11111111-1111-1111-1111-110411351144}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\BetterMarkIt
SYSTEM\ControlSet001\Services\BetterMarkIt
SYSTEM\ControlSet002\Services\BetterMarkIt
SYSTEM\CurrentControlSet\Services\BetterMarkIt
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
BetterMarkIt
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{66666666-6666-6666-6666-660466356644}
{55555555-5555-5555-5555-550455355544}
{22222222-2222-2222-2222-220422352244}
{11111111-1111-1111-1111-110411351144}
{44444444-4444-4444-4444-440444354444}

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 7 + 2 ?