BrowserModifier.Fotomoto Description

BrowserModifier.Fotomoto is an adware program that is designed to pollute your screen with various pop-up advertisements. BrowserModifier.Fotomoto may install dangerous malware onto your PC when you click on a malicious advert. BrowserModifier.Fotomoto may also monitor a user’s browsing habits and pass the information on to a third-party.

Type: Adware

How Can You Detect BrowserModifier.Fotomoto?

BrowserModifier.Fotomoto Technical Report

As new BrowserModifier.Fotomoto details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following BrowserModifier.Fotomoto files with its MD5s were created in the system:

BrowserModifier.Fotomoto has typically the following processes in memory:

• nsn11.dll
• nsr290.dll
• nsi9.dll
• nsr184.dll
• nsgDC31.dll
• nst10.dll

BrowserModifier.Fotomoto creates the following registry entries:

• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{cbc50baf-6d1f-2181-3ab0-b5ef944f1adf}
• HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionExplorerBrowser HelperObjects{413d87fb-0355-02b2-90de-31c51eb229f8}
• HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionExplorerBrowser HelperObjects{63a7a458-4bd8-981e-ba39-b1c4e635e1b0}
• HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionExplorerBrowser HelperObjects{8e446334-6196-7a99-bdfb-e741b5c47ac4}
• HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser HelperObjects\{d27a1d37-61e0-a609-f7ac-07e1fcb2df93}
• HKEY_LOCAL_MACHINESoftwareMicrosoftWindowsCurrentVersionExplorerBrowser HelperObjects{6a3b91af-6fff-d9fd-36f4-d98928c66c60}

Important Article Disclaimer