BetterSurf

BetterSurf Description

ScreenshotBetterSurf is adware that may be installed onto Google Chrome, Mozilla Firefox and Internet Explorer. BetterSurf may embed an unwanted browser plug-in or add-on that shows a variety of random pop-up adverts and messages while the PC user is browsing the web. BetterSurf may also show a variety of irritating pop-up adverts that carry coupons with discounts and other offers. BetterSurf may press Internet users to click on random pop-up ads. BetterSurf may try to increase traffic of advertising websites and benefit from associated links. BetterSurf may reroute computer users to doubtful commercial websites and disturb the web user's work with continuous pop-up ads and messages. BetterSurf may also threaten the target computer user's privacy and security. BetterSurf may trace the web user's surfing activities, that is what websites he is visiting, what information he enters while surfing on the net and other details. Then, BetterSurf may transmit this data to third-parties.
Aliases: Generic5.AKJO [AVG], ADWARE/BetterSurf.C [AntiVir], Generic PUA GI [Sophos], AdWare/BetterSurf.a [Jiangmin], Win32.Troj.Generic.a.(kcloud) [Kingsoft], Adware:Win32/BetterSurf [Microsoft], Win32.Trojan.Agent.A4HQGO [GData], AdWare.BetterSurf [VBA32], Adware.Win32.BetterSurf.AF [Baidu-International], JS.BetterSurf [Ikarus], Adware/BetterSurf [Fortinet], Trojan.Win32.Generic!BT [VIPRE], Trojan.Siggen6.1379 [DrWeb], Riskware.Win32.BetterSurf.cqshnf [NANO-Antivirus] and not-a-virus:AdWare.Win32.BetterSurf.b [Kaspersky].

Infected with BetterSurf? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect BetterSurf

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of BetterSurf outbreaks and other threats from global to local level.

File System Details

BetterSurf creates the following file(s):
# File Name Size MD5 Detection Count
1 %LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\mmifolfpllfdhilecpdpmemhelmanajl 94
2 %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\mmifolfpllfdhilecpdpmemhelmanajl 93
3 %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dedmngkbaffkenlfdcbganndoghblmap 85
4 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\dedmngkbaffkenlfdcbganndoghblmap 84
5 %ProgramFiles%\BetterSurf 83
6 %ProgramFiles(x86)%\BetterSurf 82
7 %PROGRAMFILES%\BetterSurf\ie\BetterSurf.dll 86,016 25fb9b7ebeb89d813ac671c6c7db4d96 2,051
8 %TEMP%\Better-Surf.exe 490,385 8ea615058f2fd5b7781e2da47d1e7978 11
9 %PROGRAMFILES%\Better-Surf\ie\BetterSrf.dll 174,949 6504d88bb3b08c4bb070c5ee9c7aab60 N/A

Registry Details

BetterSurf creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
SOFTWARE\Better Surf Plus
Software\Microsoft\Internet Explorer\Approved Extensions, value: {6E3C6B04-08FE-43BC-8E50-F90285024DEA}
Software\Microsoft\Internet Explorer\Approved Extensions, value: {1824FF90-C98E-48A6-838F-E3B6572B0C77}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{1824FF90-C98E-48A6-838F-E3B6572B0C77}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1824FF90-C98E-48A6-838F-E3B6572B0C77}
SOFTWARE\Mozilla\Firefox\Extensions, value: xz123@ya456.com
SOFTWARE\Mozilla\Firefox\Extensions, value: ext@bettersurfplus.com
SOFTWARE\Wow6432Node\Better Surf Plus
SOFTWARE\Wow6432Node\BetterSurf
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{1824FF90-C98E-48A6-838F-E3B6572B0C77}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Better Surf Plus
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions, value: xz123@ya456.com
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions, value: ext@bettersurfplus.com
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
Better Surf Plus
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{1824FF90-C98E-48A6-838F-E3B6572B0C77}
{DD3A66B9-8A7C-4C3C-8D60-DB225A60D69C}
{881E49A1-8325-4B19-AE6F-B889A40D073A}
{462862BE-9A5C-49A5-9CBD-A649EAC63645}
{0113A098-06EA-4776-A011-D75590778F1E}
{6E3C6B04-08FE-43BC-8E50-F90285024DEA}

More Details on BetterSurf

The following cookies were found:
  • rvzr2-a.akamaihd

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 2 + 13 ?