Vosteran.com

By CagedTech in Browser Hijackers

Translate To:

Threat Scorecard

Popularity Rank:	666
Threat Level:	50 % (Medium)
Infected Computers:	76,117

First Seen:	October 13, 2014
Last Seen:	February 6, 2026
OS(es) Affected:	Windows

Vosteran.com is a search engine and associated with browser hijacker. A browser hijacker may change your browser settings and replace your Web browser's home page with a website like Vosteran.com. This means that, no matter if you open Mozilla Firefox, Internet Explorer or other browser, what will appear on your screen will always be Vosteran.com as your home page. The browser hijacker that promises to provide superior search results is called Vosteran Search. The only goal Vosteran.com intends to achieve is to get your attention displaying its numerous advertisements. If it wasn't you who downloaded a browser hijacker on your machine, a browser hijacker may have come included on the installation of a freeware program downloaded from the Internet. The removal of a browser hijacker is a little more complicated than removing an adware. Therefore, it is recommended that the computer user borrows the expertize of a good anti-malware tool to help him to uninstall Vosteran.com entirely and for good.

Allowing the Vosteran.com site the constantly load on your system as the default home page may lead to other issues. As such, the Vosteran.com site may eventually load up random sponsored links or advertisements. If used, those ads or links could cause additional redirects to other annoying sites that could be designed to extort money or collect your page impressions and clicks for payment through an advertising campaign. The designers of Vosteran.com may have created the page for the purpose of earning money by CPC or CPM campaigns. Such campaigns rely on your clicks and site views for generating money for its publishers.

The Vosteran.com site may also load up on other web browsers as the default home page thus making it even more annoying for surfing the internet. In most given situations Vosteran.com and its assocaited plugins or add-on components may be removed easily. In the case that those components related to Vosteran.com cannot be found or removed, it may be necessary to use an antispyware applicaiton to automatically remove Vosteran.com and its files to stop the constant redirects and unwanted home page loads.

Table of Contents

SpyHunter Detects & Remove Vosteran.com

File System Details

Vosteran.com may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	A0035742.exe	6a29bbb10b6149f6aa0df401173e6ddc	1,758
Name: A0035742.exe MD5: 6a29bbb10b6149f6aa0df401173e6ddc Size: 1.01 MB (1014272 bytes) Detections: 1,758 Type: Executable File Path: %SYSTEMDRIVE%\System Volume Information\_restore{06689D21-058A-4446-B0E2-E90A6A353332}\RP87\A0035742.exe Group: Malware file Last Updated: August 25, 2020
2.	helper.exe	3f8e1057e2a4730421976e0918c9542a	1,024
Name: helper.exe MD5: 3f8e1057e2a4730421976e0918c9542a Size: 88.06 KB (88064 bytes) Detections: 1,024 Type: Executable File Path: %LOCALAPPDATA%\Vosteran\Application\Vosteran Group: Malware file Last Updated: November 23, 2019
3.	delegate_execute.exe.vir	af2592a7ac952a4c006dd455e963ca99	436
Name: delegate_execute.exe.vir MD5: af2592a7ac952a4c006dd455e963ca99 Size: 1.46 MB (1462784 bytes) Detections: 436 Path: I:\C\AdwCleaner\Quarantine\C\Users\<username>\AppData\Local\Vosteran\Application\31.0.1650.23\delegate_execute.exe.vir Group: Malware file Last Updated: February 6, 2026
4.	UpdateTask.exe	81714713107c861bdecb16ff5e150763	55
Name: UpdateTask.exe MD5: 81714713107c861bdecb16ff5e150763 Size: 450.56 KB (450560 bytes) Detections: 55 Type: Executable File Path: %APPDATA%\WSE_Vosteran\UpdateProc Group: Malware file Last Updated: September 14, 2017
5.	bkup.dat	318948ab544a9b45916c205c98093e9e	13
Name: bkup.dat MD5: 318948ab544a9b45916c205c98093e9e Size: 16.7 KB (16704 bytes) Detections: 13 Type: Data file Path: %APPDATA%\WSE_Vosteran\UpdateProc Group: Malware file Last Updated: July 7, 2017
6.	vosteran.exe	dc5bc01095d32e9409fbd82c09721378	1
Name: vosteran.exe MD5: dc5bc01095d32e9409fbd82c09721378 Size: 1.31 MB (1311619 bytes) Detections: 1 Type: Executable File Path: %LOCALAPPDATA%\Vosteran\Application Group: Malware file Last Updated: March 19, 2016
7.	%Allusersprofile%\[Vosteran Search]
Name: %Allusersprofile%\[Vosteran Search] Group: Malware file
8.	%Programfiles%\Vosteran Search
Name: %Programfiles%\Vosteran Search Group: Malware file
9.	%LocalAppdata%\Vosteran Search\uninstall\Vosteran Search.lnk
Name: %LocalAppdata%\Vosteran Search\uninstall\Vosteran Search.lnk Type: Shortcut Group: Malware file
10.	%Allusersprofile%\Microsoft\Windows\Start Menu\Programs\Startup\Vosteran Search.lnk
Name: %Allusersprofile%\Microsoft\Windows\Start Menu\Programs\Startup\Vosteran Search.lnk Type: Shortcut Group: Malware file
11.	C:\Users\\AppData\Roaming\WSE_Vosteran\UpdateProc\bkup.dat	9ada22373d38f902a574dfefd4bd2df9
Name: C:\Users\<username>\AppData\Roaming\WSE_Vosteran\UpdateProc\bkup.dat MD5: 9ada22373d38f902a574dfefd4bd2df9 Size: 16.37 KB (16378 bytes) Type: Data file Group: Malware file
12.	C:\Users\\AppData\Roaming\WSE_Vosteran\UpdateProc\config.dat	20c603a2ade796477d1836f0bfc642f4
Name: C:\Users\<username>\AppData\Roaming\WSE_Vosteran\UpdateProc\config.dat MD5: 20c603a2ade796477d1836f0bfc642f4 Size: 92B (92 bytes) Type: Data file Group: Malware file
13.	C:\Users\\AppData\Roaming\WSE_Vosteran\UpdateProc\info.dat	617e52ab0d60b06660b248d63c677be9
Name: C:\Users\<username>\AppData\Roaming\WSE_Vosteran\UpdateProc\info.dat MD5: 617e52ab0d60b06660b248d63c677be9 Size: 56B (56 bytes) Type: Data file Group: Malware file
14.	C:\Users\\AppData\Roaming\WSE_Vosteran\UpdateProc\UpdateTask.exe	56989f64bf74bacbc7271dbfe8d368c8
Name: C:\Users\<username>\AppData\Roaming\WSE_Vosteran\UpdateProc\UpdateTask.exe MD5: 56989f64bf74bacbc7271dbfe8d368c8 Size: 457.72 KB (457728 bytes) Type: Executable File Group: Malware file
15.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\install.rdf
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\install.rdf Group: Malware file
16.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\icon64.png
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\icon64.png Group: Malware file
17.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\icon.png
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\icon.png Group: Malware file
18.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\external\underscore-min.js
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\external\underscore-min.js Type: JavaScript file Group: Malware file
19.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\external\string.min.js
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\external\string.min.js Type: JavaScript file Group: Malware file
20.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\external\md5.js
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\external\md5.js Type: JavaScript file Group: Malware file
21.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\external\jsencrypt.min.js
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\external\jsencrypt.min.js Type: JavaScript file Group: Malware file
22.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\external\hmac-md5.js
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\external\hmac-md5.js Type: JavaScript file Group: Malware file
23.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\external\aes.js
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\external\aes.js Type: JavaScript file Group: Malware file
24.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\browser\vstr.1.0.2h.jsm
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\browser\vstr.1.0.2h.jsm Group: Malware file
25.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\browser\vstr.1.0.2.jsm
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\browser\vstr.1.0.2.jsm Group: Malware file
26.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\browser\timer.jsm
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\browser\timer.jsm Group: Malware file
27.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\browser\header.js
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\browser\header.js Type: JavaScript file Group: Malware file
28.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\browser\browser.js
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\browser\browser.js Type: JavaScript file Group: Malware file
29.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\browser\background.js
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\content\browser\background.js Type: JavaScript file Group: Malware file
30.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\chrome.manifest
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\chrome.manifest Group: Malware file
31.	C:\Users\\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\bootstrap.js
Name: C:\Users\<username>\AppData\Roaming\Mozilla\Firefox\Profiles\36iwse76.default\extensions\{a2bff6ba-8d18-488c-853c-ad9bc29f2482}\bootstrap.js Type: JavaScript file Group: Malware file
32.	C:\Users\\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_0\_metadata\verified_contents.json
Name: C:\Users\<username>\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_0\_metadata\verified_contents.json Group: Malware file
33.	C:\Users\\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_0\_locales\
Name: C:\Users\<username>\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_0\_locales\ Group: Malware file
34.	C:\Users\\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_0\app\
Name: C:\Users\<username>\AppData\Local\Google\Chrome\User Data\Default\Extensions\oilkkkefbalmbfppgjmgjoefbclebkce\0.3.9_0\app\ Group: Malware file

More files

Registry Details

Vosteran.com may create the following registry entry or registry entries:

CLSID

{0A6B3C37-2EC3-508F-435B-7567673389FF}

{4CB3598A-82E8-4D1F-983F-061238AE696E}

File name without path

Vosteran.lnk

HKEY..\..\..\..{RegistryKeys}

Software\Microsoft\Internet Explorer\DOMStorage\vosteran.com

Software\Microsoft\Internet Explorer\SearchScopes\{9E20EB26-0B53-4159-9FC6-F2ACA85DF167}

SOFTWARE\Microsoft\MediaPlayer\ShimInclusionList\vosteran.exe

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\WSE_Vosteran

SOFTWARE\Microsoft\Windows\CurrentVersion\App Paths\vosteran.exe

Software\Microsoft\Windows\CurrentVersion\RunOnce\WSE_Vosteran

SOFTWARE\RegisteredApplications\Vosteran.NSJA6BHDA3NCFCFMXW3QSCUYUQ

Software\Vosteran

Software\Vosteran Browser

SOFTWARE\Wow6432Node\Microsoft\MediaPlayer\ShimInclusionList\vosteran.exe

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\App Paths\vosteran.exe

SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce\WSE_Vosteran

SOFTWARE\Wow6432Node\RegisteredApplications\Vosteran.NSJA6BHDA3NCFCFMXW3QSCUYUQ

Software\wse_vosteran

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

http://vosteran.com/?a=&q

Vosteran

WSE_Vosteran

Directories

Vosteran.com may create the following directory or directories:

%APPDATA%\Microsoft\Windows\Start Menu\Programs\Vosteran

%APPDATA%\Vosteran

%APPDATA%\WSE_Vosteran

%LOCALAPPDATA%\Vosteran

%PROGRAMFILES%\WSE_Vosteran

%PROGRAMFILES(x86)%\WSE_Vosteran

%UserProfile%\Local Settings\Application Data\Vosteran

URLs

Vosteran.com may call the following URLs:

http://vosteran.com/?a=&q

vosteran.com

EnigmaSoft’s Payment Processor Digital River GmbH Filing for Bankruptcy Does Not Impact SpyHunter Customers’ Anti-Malware Protection

Search

Change Region

Vosteran.com

Threat Scorecard

EnigmaSoft Threat Scorecard

SpyHunter Detects & Remove Vosteran.com

File System Details

Registry Details

Directories

URLs

Submit Comment

Trending

Trojan.Win32.Autoit.aks

Trojan.Gatak.A

WowCoupon

Most Viewed

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen

How to Fix 'macOS cannot verify that this app is...