Removal instructions for Browser Enhancements

[Metallica]

What is Browser Enhancements?

 

The Malwarebytes research team has determined that Browser Enhancements is adware. These adware applications display advertisements not originating from the sites you are browsing.

 

How do I know if my computer is affected by Browser Enhancements?

 

You may see this entry in your list of installed programs:

 

and this warning during install:

 

How did BrowserEnhancements get on my computer?

 

Adware applications use different methods for distributing themselves. This particular one was bundled with other software.

 

How do I remove BrowserEnhancements?

 

Our program Malwarebytes Anti-Malware can detect and remove this potentially unwanted program.

• Please download Malwarebytes Anti-Malware to your desktop.
• Double-click mbam-setup-version.exe and follow the prompts to install the program.
• At the end, be sure a check-mark is placed next to the following:
  • Enable free trial of Malwarebytes Anti-Malware Premium
  • Launch Malwarebytes Anti-Malware
• Then click Finish.
• If an update is found, you will be prompted to download and install the latest version.
• Once the program has loaded, select Scan now. Or select the Threat Scan from the Scan menu.
• When the scan is complete , make sure that everything is set to "Quarantine", and click Apply Actions.
• Reboot your computer if prompted.

Is there anything else I need to do to get rid of Browser Enhancements?

• No, Malwarebytes' Anti-Malware removes Browser Enhancements completely.

How would the full version of Malwarebytes Anti-Malware help protect me?

 

We hope our application and this guide have helped you eradicate this hijacker.  

 

As you can see below the full version of Malwarebytes Anti-Malware would have protected you against the Browser Enhancements adware.  It would have warned you before the rogue could install itself, giving you a chance to stop it before it became too late.

 

Technical details for experts

 

You will see these signs in a HijackThis log:

O4 - HKLM\..\Run: [Browser Enhancements] C:\Program Files\Browser Enhancements\WManager.exeO4 - HKLM\..\Run: [WManager] C:\Program Files\Browser Enhancements\WManager.exe

 

 

Alterations made by the installer:

File system details  ---------------------------------------------    Adds the folder C:\Program Files\Browser Enhancements       Adds the file sqlite3.dll"="3/14/2014 9:25 PM, 236544 bytes, A       Adds the file unins000.dat"="10/9/2014 9:26 AM, 1416 bytes, A       Adds the file unins000.exe"="10/9/2014 9:25 AM, 719521 bytes, A       Adds the file UpDlg.exe"="9/23/2014 9:03 PM, 395264 bytes, A       Adds the file WManager.exe"="9/3/2014 12:51 PM, 888832 bytes, A    Adds the folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browser Enhancements       Adds the file Browser Enhancements.lnk"="10/9/2014 9:26 AM, 1114 bytes, ARegistry details  ------------------------------------------    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run}       "Browser Enhancements"="REG_SZ", "C:\Program Files\Browser Enhancements\WManager.exe"       "WManager"="REG_SZ", "C:\Program Files\Browser Enhancements\WManager.exe"    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B92711A1-DAA6-464C-BC35-AB43E048136F}}_is1}       "DisplayName"="REG_SZ", "Browser Enhancements version 3.17"       "DisplayVersion"="REG_SZ", "3.17"       "EstimatedSize"="REG_DWORD", 2176       "Inno Setup: App Path"="REG_SZ", "C:\Program Files\Browser Enhancements"       "Inno Setup: Icon Group"="REG_SZ", "Browser Enhancements"       "Inno Setup: Language"="REG_SZ", "english"       "Inno Setup: Setup Version"="REG_SZ", "5.5.5 (a)"       "Inno Setup: User"="REG_SZ", "Malwarebytes"       "InstallDate"="REG_SZ", "20141009"       "InstallLocation"="REG_SZ", "C:\Program Files\Browser Enhancements\"       "MajorVersion"="REG_DWORD", 3       "MinorVersion"="REG_DWORD", 17       "NoModify"="REG_DWORD", 1       "NoRepair"="REG_DWORD", 1       "Publisher"="REG_SZ", "Browser Enhancements"       "QuietUninstallString"="REG_SZ", ""C:\Program Files\Browser Enhancements\unins000.exe" /SILENT"       "UninstallString"="REG_SZ", ""C:\Program Files\Browser Enhancements\unins000.exe""    [HKEY_CURRENT_USER\Software\UpdateFiles]       "ID"="REG_SZ", "LVuMtJPyPqW9Hqne"       "Key"="REG_SZ", "bcx2b0"

Malwarebytes Anti-Malware log:

Malwarebytes Anti-Malwarewww.malwarebytes.orgScan Date: 10/9/2014Scan Time: 9:31:29 AMLogfile: mbamBrowserEnhancements.txtAdministrator: YesVersion: 2.00.3.1024Malware Database: v2014.10.09.04Rootkit Database: v2014.10.08.01License: FreeMalware Protection: DisabledMalicious Website Protection: DisabledSelf-protection: DisabledOS: Windows 7 Service Pack 1CPU: x86File System: NTFSUser: MalwarebytesScan Type: Threat ScanResult: CompletedObjects Scanned: 267801Time Elapsed: 3 min, 7 secMemory: EnabledStartup: EnabledFilesystem: EnabledArchives: EnabledRootkits: DisabledHeuristics: EnabledPUP: EnabledPUM: EnabledProcesses: 1PUP.Optional.BrowserEnhancements.A, C:\Program Files\Browser Enhancements\WManager.exe, 4056, Delete-on-Reboot, [7533c84a6e0e4ceae55fd937ed16c43c]Modules: 0(No malicious items detected)Registry Keys: 1PUP.Optional.BrowserEnhancements.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{B92711A1-DAA6-464C-BC35-AB43E048136F}}_is1, Quarantined, [7533c84a6e0e4ceae55fd937ed16c43c], Registry Values: 2PUP.Optional.BrowserEnhancements.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|Browser Enhancements, C:\Program Files\Browser Enhancements\WManager.exe, Quarantined, [7533c84a6e0e4ceae55fd937ed16c43c]PUP.Optional.BrowserEnhancements.A, HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN|WManager, C:\Program Files\Browser Enhancements\WManager.exe, Quarantined, [7533c84a6e0e4ceae55fd937ed16c43c]Registry Data: 0(No malicious items detected)Folders: 2PUP.Optional.BrowserEnhancements.A, C:\Program Files\Browser Enhancements, Delete-on-Reboot, [7533c84a6e0e4ceae55fd937ed16c43c], PUP.Optional.BrowserEnhancements.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browser Enhancements, Quarantined, [2a7e7d95d3a952e481c479977e85728e], Files: 7PUP.Optional.BrowserEnhancements.A, C:\Users\{username}\Desktop\ADK-New-Java3.exe, Quarantined, [8424c052ee8e37ffede18ccbb54b54ac], PUP.Optional.BrowserEnhancements.A, C:\Program Files\Browser Enhancements\unins000.dat, Quarantined, [7533c84a6e0e4ceae55fd937ed16c43c], PUP.Optional.BrowserEnhancements.A, C:\Program Files\Browser Enhancements\sqlite3.dll, Quarantined, [7533c84a6e0e4ceae55fd937ed16c43c], PUP.Optional.BrowserEnhancements.A, C:\Program Files\Browser Enhancements\unins000.exe, Quarantined, [7533c84a6e0e4ceae55fd937ed16c43c], PUP.Optional.BrowserEnhancements.A, C:\Program Files\Browser Enhancements\UpDlg.exe, Quarantined, [7533c84a6e0e4ceae55fd937ed16c43c], PUP.Optional.BrowserEnhancements.A, C:\Program Files\Browser Enhancements\WManager.exe, Delete-on-Reboot, [7533c84a6e0e4ceae55fd937ed16c43c], PUP.Optional.BrowserEnhancements.A, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Browser Enhancements\Browser Enhancements.lnk, Quarantined, [2a7e7d95d3a952e481c479977e85728e], Physical Sectors: 0(No malicious items detected)(end)

 

As mentioned before the full version of Malwarebytes Anti-Malware could have protected your computer against this threat.

We use different ways of protecting your computer(s):

• Dynamically Blocks Malware Sites & Servers
• Malware Execution Prevention

Save yourself the hassle and get protected.