BetterSurf

BetterSurf Description

ScreenshotBetterSurf pop-ups target computers affected by PUPs (Potentially Unwanted Programs). PUPs associated with BetterSurf may affect most Web browsers on Windows, such as Google Chrome, Mozilla Firefox and Internet Explorer. BetterSurf pop-ups are usually associated with Web browser toolbars, adware or browser hijackers. There are numerous problems that may be associated with BetterSurf, including pop-up windows, browser redirects, performance issues and changes to the affected Web browsers. Problems related to BetterSurf indicate that it is necessary to remove a PUP infection from the affected computer as soon as possible.

Using BetterSurf, marketers may generate revenue using some of the tactics listed below:
  • BetterSurf may cause pop-up advertisements on affected computers. BetterSurf has also been associated with several other forms of marketing on affected Web browsers. Some of the advertisements associated with BetterSurf may include sliding advertisements, banners and pop-up advertisements. In-text links associated with BetterSurf may consist in highlighted words on unrelated websites that display BetterSurf pop-ups whenever computer users pass their mouse cursor over the highlighted text.
  • BetterSurf uses browser hijacking tactics to take over the victim's Web browser and force it to visit certain low-quality websites. These browser redirects are designed to promote certain Web pages, increasing their page ranking and Web traffic. The increase in these stats translates directly into higher advertising revenues at the expense of victims of BetterSurf.
  • BetterSurf can keep track of your online activities, save your browsing and search history and gather data about your computer settings. This information may be sold to marketers to generate advertisement revenue, carry out marketing research and deliver advertisements to your Web browser.

BetterSurf should be removed with the help of a reliable anti-malware application. Although BetterSurf may be uninstalled using Windows, some components associated with BetterSurf may remain behind, making it important to scan the affected computer to remove any unwanted components associated with BetterSurf.
Aliases: Generic5.AKJO [AVG], ADWARE/BetterSurf.C [AntiVir], Generic PUA GI [Sophos], AdWare/BetterSurf.a [Jiangmin], Win32.Troj.Generic.a.(kcloud) [Kingsoft], Adware:Win32/BetterSurf [Microsoft], Win32.Trojan.Agent.A4HQGO [GData], AdWare.BetterSurf [VBA32], Adware.Win32.BetterSurf.AF [Baidu-International], JS.BetterSurf [Ikarus], Adware/BetterSurf [Fortinet], Trojan.Win32.Generic!BT [VIPRE], Trojan.Siggen6.1379 [DrWeb], Riskware.Win32.BetterSurf.cqshnf [NANO-Antivirus] and not-a-virus:AdWare.Win32.BetterSurf.b [Kaspersky].

Infected with BetterSurf? Scan Your PC for Free

Download SpyHunter’s Spyware Scanner
to Detect BetterSurf

Security Doesn't Let You Download SpyHunter or Access the Internet?


Solutions: Your computer may have malware hiding in memory that prevents any program, including SpyHunter, from executing on your computer. Follow to download SpyHunter and gain access to the Internet:
  • Use an alternative browser. Malware may disable your browser. If you're using IE, for example, and having problems downloading SpyHunter, you should open Firefox, Chrome or Safari browser instead.
  • Use a removable media. Download SpyHunter on another clean computer, burn it to a USB flash drive, DVD/CD, or any preferred removable media, then install it on your infected computer and run SpyHunter's malware scanner.
  • Start Windows in Safe Mode. If you can not access your Window's desktop, reboot your computer in 'Safe Mode with Networking' and install SpyHunter in Safe Mode.
  • IE Users: Disable proxy server for Internet Explorer to browse the web with Internet Explorer or update your anti-spyware program. Malware modifies your Windows settings to use a proxy server to prevent you from browsing the web with IE.

If you still can't install SpyHunter? View other possible causes of installation issues.

Technical Information

Infection Statistics


Our MalwareTracker shows malware activity across the world. Explore real-time data of BetterSurf outbreaks and other threats from global to local level.

File System Details

BetterSurf creates the following file(s):
# File Name Size MD5 Detection Count
1 %LOCALAPPDATA%\Google\Chrome\User Data\Default\Extensions\mmifolfpllfdhilecpdpmemhelmanajl 94
2 %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\mmifolfpllfdhilecpdpmemhelmanajl 93
3 %UserProfile%\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\dedmngkbaffkenlfdcbganndoghblmap 85
4 %LocalAppData%\Google\Chrome\User Data\Default\Extensions\dedmngkbaffkenlfdcbganndoghblmap 84
5 %ProgramFiles%\BetterSurf 83
6 %ProgramFiles(x86)%\BetterSurf 82
7 %PROGRAMFILES%\BetterSurf\ie\BetterSurf.dll 86,016 25fb9b7ebeb89d813ac671c6c7db4d96 2,051
8 %TEMP%\Better-Surf.exe 490,385 8ea615058f2fd5b7781e2da47d1e7978 11
9 %PROGRAMFILES%\Better-Surf\ie\BetterSrf.dll 174,949 6504d88bb3b08c4bb070c5ee9c7aab60 N/A

Registry Details

BetterSurf creates the following registry entry or registry entries:
HKEY..\..\..\..{RegistryKeys}
SOFTWARE\Wow6432Node\BetterSurf
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions, value: xz123@ya456.com
SOFTWARE\Mozilla\Firefox\Extensions, value: xz123@ya456.com
Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
Software\Microsoft\Internet Explorer\Approved Extensions, value: {6E3C6B04-08FE-43BC-8E50-F90285024DEA}
SOFTWARE\Wow6432Node\Better Surf Plus
SOFTWARE\Better Surf Plus
Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1824FF90-C98E-48A6-838F-E3B6572B0C77}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{1824FF90-C98E-48A6-838F-E3B6572B0C77}
SOFTWARE\Microsoft\Windows\CurrentVersion\explorer\Browser Helper Objects\{1824FF90-C98E-48A6-838F-E3B6572B0C77}
SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Better Surf Plus
Software\Microsoft\Internet Explorer\Approved Extensions, value: {1824FF90-C98E-48A6-838F-E3B6572B0C77}
SOFTWARE\Wow6432Node\Mozilla\Firefox\Extensions, value: ext@bettersurfplus.com
SOFTWARE\Mozilla\Firefox\Extensions, value: ext@bettersurfplus.com
HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}
Better Surf Plus
The following CLSID's were found:
HKEY..\..\{CLSID Path}
{0113A098-06EA-4776-A011-D75590778F1E}
{1824FF90-C98E-48A6-838F-E3B6572B0C77}
{462862BE-9A5C-49A5-9CBD-A649EAC63645}
{6E3C6B04-08FE-43BC-8E50-F90285024DEA}
{881E49A1-8325-4B19-AE6F-B889A40D073A}
{DD3A66B9-8A7C-4C3C-8D60-DB225A60D69C}

More Details on BetterSurf

The following cookies were found:
  • rvzr2-a.akamaihd

Site Disclaimer

Leave a Reply

IMPORTANT! To be able to proceed, you need to solve the following simple math.
Please leave these two fields as-is:
What is 2 + 4 ?