84,488,480 programs installed

Should I remove ConstaSurf?

What percent of users and experts removed it?
87% remove it13% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Global Rank #13,288
United States Rank #13,423
Reach 0.0230%
Lifespan of installation (until removal)
< 5.55 days
163.64 days >
Average installed length: 85.98 days

Versions

VersionDistribution
2014.06.19.061052 0.22%
2014.06.18.141041 0.66%
2014.06.18.061036 0.44%
2014.06.18.021035 0.22%
2014.06.17.221033 0.22%
2014.06.17.101030 0.66%
2014.06.17.061030 0.22%
2014.06.16.221023 0.44%
2014.06.16.181022 0.22%
2014.06.16.141022 0.44%
2014.06.16.101021 0.66%
2014.06.16.061018 0.22%
2014.06.15.181014 0.22%
2014.06.15.141012 0.44%
2014.06.14.181006 0.88%
2014.06.14.101004 0.22%
2014.06.14.061000 0.44%
2014.06.13.224637 1.54%
2014.06.13.224614 0.44%
2014.06.13.180955 0.22%
2014.06.13.140954 0.88%
2014.06.13.100952 0.66%
2014.06.13.060952 0.22%
2014.06.13.020953 0.44%
2014.06.12.220954 0.22%
2014.06.12.205711 0.88%
2014.06.12.205657 0.22%
2014.06.12.180950 0.88%
2014.06.12.140948 1.10%
2014.06.12.100946 0.44%
2014.06.12.020940 0.66%
2014.06.11.215937 0.22%
2014.06.11.210202 0.22%
2014.06.11.170159 0.22%
2014.06.11.130158 0.44%
2014.06.11.090156 0.66%
2014.06.11.050154 0.22%
2014.06.10.220116 0.88%
2014.06.10.170150 0.88%
2014.06.10.130151 1.10%
2014.06.10.010142 0.22%
2014.06.09.210141 0.66%
2014.06.09.170140 1.10%
2014.06.09.130142 0.44%
2014.06.08.210132 0.44%
2014.06.08.170131 1.10%
2014.06.08.090127 0.44%
2014.06.07.170120 0.22%
2014.06.07.130119 0.66%
2014.06.07.050116 0.44%
2014.06.07.010114 0.44%
182 versions

ConstaSurf

What is ConstaSurf?

ConstaSurf is an adware web browser extension designed to take control of the user's browser in order to redirect web searches and inject advertising. In Internet Explorer the program run as a Browser Helper Object. The add-in performs a number of behaviors that will hijack advertising on non-associated web sites as well as inject its own advertising in the form of contextual link ads, banner ads, popups and pop-overs including the hijacking of known ad serving sites. This adware is typically bundled with various third party unwanted applications as well as through web browser exploits.

Functionality of the extension includes:
- Injects advertising in the form of context ads, links and pop-ups.

About  (from Yontoo Technology)

The Software is supported by various types of advertising displayed in your browser, including, without
limitation, search-related ads, banner and video ads, in-text ads and links, transitional, interstitial and
full page ads. Ads and features that appear on websites by using the Software are not associated with ...  Read more
Overview
  • Possible malware installed by this program
  • Loads into the web browser
  • Installs a Windows Service
  • Typically distributed through a pay-per-install bundle
  • Generally known to have a low reputation
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in ConstaSurf.
71A8372B-B4E5-4463-B982-39E380902274.dll (0924f3764acf7efd13df34bb9dee8fd4) has been flagged by the following 30 scanners:
Anti-Virus softwareVersionDetection
Lavasoft Ad-Aware 959 Adware.SwiftBrowse.N
Agnitum Outpost 7.1.1 PUA.Agent
Avira AntiVir 7.11.155.202 APPL/BrowseFox.Gen2
Antiy-AVL 1.0.0.1 GrayWare[AdWare:not-a-virus]/Win32.Agent
AVG 2015.0.3437 BrowseFox.F
Baidu-International 4.0.3.14620 Adware.Win32.BrowseFox.bF
Bitdefender 1.0.20.855 Adware.SwiftBrowse.N
Comodo Security 18602 Application.Win32.Altbrowse.AK
Dr.Web 9.0.0.0171 Trojan.BPlug.17
Emsisoft Anti-Malware 8.14.06.20.04 Adware.SwiftBrowse.N
ESET-NOD32 8.9971 a variant of Win32/BrowseFox.F
Fortinet FortiGate 6/20/2014 Adware/Agent
G Data 14.6.24 Adware.SwiftBrowse
IKARUS anti.virus t3scan.1.6.1.0 not-a-virus:AdWare.Win32.Agent
K7 AntiVirus 13.180.12463 Unwanted-Program
K7GW 13.180.12463 Unwanted-Program ( 00454f261 )
Kaspersky 14.0.0.3682 not-a-virus:AdWare.Win32.Agent
Kingsoft AntiVirus 331020.49267 Win32.Troj.Agent.ah.(kcloud)
Malwarebytes v2014.06.20.04 PUP.Optional.ConstaSurf.A
McAfee 5600.7093 Artemis!0924F3764ACF
McAfee-GW-Edition 7.7093 Artemis!0924F3764ACF
MicroWorld-eScan 15.0.0.513 Adware.SwiftBrowse.N
NANO AntiVirus 0.28.0.60253 Riskware.Win32.Agent.cqycvd
nProtect 14.06.19.01 Adware.SwiftBrowse.N
Panda Antivirus 14.06.20.04 Trj/CI.A
Sophos 4.98 Generic PUA IF
SUPERAntiSpyware 10532 Adware.BrowseFox/Variant
TrendMicro-HouseCall 7.2.171 Suspicious_GEN.F47V0614
Vba32 AntiVirus 3.12.26.3 AdWare.Agent
VIPRE Antivirus 30468 Yontoo (fs)
ConstaSurfBHO.dll (52cf76ff95902cf8f4b0992e8b2290a5) has been flagged by the following 43 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Adware.SwiftBrowse.N
Agnitum Outpost 5.5.1.3 Riskware.Agent!
AhnLab-V3 2015.08.14.00 PUP/Win32.BrowseFox
ALYac 1.0.1.4 Adware.SwiftBrowse.N
Arcabit 1.0.0.425 Adware.SwiftBrowse.N
avast! 8.0.1489.320 Win32:BrowseFox-AC [PUP]
AVG 15.0.0.4392 AdPlugin.DIY
Avira 8.3.1.6 ADWARE/BrowseFox.apf
AVware 1.5.0.21 Yontoo (fs)
Baidu-International 3.5.1.41473 Adware.Win32.BrowseFox.AE
Bitdefender 7.2 Adware.SwiftBrowse.N
Bkav FE 1.3.0.7062 W32.BrowseFoxAC.Adware
CAT-QuickHeal 14.00 PUA.Constasurf.Gen
Clam AntiVirus 0.98.5.0 Win.Adware.Agent-48082
Comodo Security 23003 ApplicUnwnt
Cyren 5.4.16.7 W32/S-304afd20!Eldorado
Dr.Web 7.0.14.8060 Trojan.Yontoo.1734
Emsisoft Anti-Malware 3.5.0.642 Adware.SwiftBrowse.N (B)
ESET-NOD32 12091 a variant of Win32/BrowseFox.AE potentially unwanted
Fortinet FortiGate 5.1.220.0 Adware/BrowseFox
F-Prot 4.7.1.166 W32/S-304afd20!Eldorado
F-Secure 11.0.19100.45 Adware.SwiftBrowse.N
G Data 25 Adware.SwiftBrowse.N
IKARUS anti.virus T3.1.9.5.0 PUA.BrowseFox
Jiangmin 16.0.100 AdWare/SwiftBrowse.dxt
K7 AntiVirus 9.208.16884 Adware ( 004b8df51 )
K7GW 9.208.16885 Adware ( 004b8df51 )
Malwarebytes 2.1.1.1115 PUP.Optional.ConstaSurf.A
McAfee 6.0.5.614 BrowseFox
McAfee-GW-Edition v2015 BrowseFox
MicroWorld-eScan 12.0.250.0 Adware.SwiftBrowse.N
NANO AntiVirus 0.30.24.3079 Trojan.Win32.Yontoo.dnkubo
nProtect 2015-08-13.01 Adware.SwiftBrowse.N
Panda Antivirus 4.6.4.2 Trj/CI.A
Qihoo-360 1.0.0.1015 Win32/Virus.Adware.4f7
Rising Antivirus 25.0.0.17 PE:Trojan.Win32.Generic.180AB115!403353877
Sophos 4.98.0 Browse Fox (PUA)
SUPERAntiSpyware 5.6.0.1032 Adware.Riskware/Variant
Symantec 20141.2.0.56 PUA.Yontoo.C
Trend Micro 9.800.0.1009 TROJ_GEN.R00UC0EBB15
Vba32 AntiVirus 3.12.26.4 AdWare.MSIL.Agent
VIPRE Antivirus 42864 Yontoo (fs)
Zillya 2.0.0.2351 Adware.BrowseFox.Win32.8717
updateConstaSurf.exe (dfb0f3e9bc199415e9de334b3dc06f0c) has been flagged by the following 36 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Adware.SwiftBrowse.N
Agnitum Outpost 5.5.1.3 Riskware.Agent!
AhnLab-V3 2014.11.14.00 PUP/Win32.Generic
Antiy-AVL 1.0.0.1 GrayWare[AdWare:not-a-virus,HEUR]/MSIL.Kranet
avast! 8.0.1489.320 Win32:BrowseFox-AC [PUP]
AVG 15.0.0.4189 Consurf
Avira 7.11.185.112 ADWARE/BrowseFox.Gen7
AVware 1.5.0.21 Yontoo (fs)
Baidu-International 3.5.1.41473 Adware.Win32.BrowseFox.BI
Bitdefender 7.2 Adware.SwiftBrowse.N
CAT-QuickHeal 14.00 AdWare.MSIL.r3 (Not a Virus)
Comodo Security 20075 ApplicUnwnt
Dr.Web 7.0.10.8210 Trojan.BPlug.250
Emsisoft Anti-Malware 3.0.0.600 Adware.SwiftBrowse.N (B)
ESET-NOD32 10722 a variant of Win32/BrowseFox.H
Fortinet FortiGate 5.0.999.0 Adware/Kranet
F-Secure 11.0.19100.45 Adware.SwiftBrowse.N
G Data 24 Adware.SwiftBrowse.N
IKARUS anti.virus T3.1.8.3.0 PUA.BrowseFox
K7 AntiVirus 9.185.14007 Trojan ( 0049f7ad1 )
K7GW 9.185.14007 Trojan ( 0049f7ad1 )
Kaspersky 12.0.0.1225 not-a-virus:HEUR:AdWare.MSIL.Kranet.heur
Malwarebytes 1.75.0.1 PUP.Optional.ConstaSurf.A
McAfee 6.0.5.614 BrowseFox.c
McAfee-GW-Edition v2014.2 BrowseFox.c
MicroWorld-eScan 12.0.250.0 Adware.SwiftBrowse.N
nProtect 2014-11-13.01 Adware.SwiftBrowse.N
Panda Antivirus 4.6.4.1 Trj/Chgt.G
Qihoo-360 1.0.0.1015 Win32/Virus.Adware.708
Sophos 4.98.0 Browse Fox
Symantec 20141.1.0.330 Trojan.Gen.2
Tencent 1.0.0.1 Win32.Trojan.Falsesign.Wwea
Trend Micro 9.740.0.1012 TROJ_GEN.R047C0EJH14
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R047C0EJH14
VIPRE Antivirus 34778 Yontoo (fs)
Zillya 2.0.0.1982 Backdoor.PePatch.Win32.46235
169FEFFE-9CD8-4501-B51D-31B9ACD143C3.dll (ecf9187e7c24e3585ff9b690808e8c38) has been flagged by the following 32 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Adware.SwiftBrowse.N
Agnitum Outpost 5.5.1.3 PUA.Agent!
Avira AntiVir 7.11.155.202 APPL/BrowseFox.Gen2
Antiy-AVL 1.0.0.1 GrayWare[AdWare:not-a-virus]/Win32.Agent
AVG 14.0.0.3972 BrowseFox.F
Baidu-International 3.5.1.41473 Adware.Win32.Agent.ABHp
Bitdefender 7.2 Adware.SwiftBrowse.N
Comodo Security 18602 Application.Win32.Altbrowse.AK
Dr.Web 7.0.7.12100 Trojan.BPlug.17
Emsisoft Anti-Malware 3.0.0.600 Adware.SwiftBrowse.N (B)
ESET-NOD32 9971 a variant of Win32/BrowseFox.F
Fortinet FortiGate 5.1.152.0 Adware/Agent
F-Secure 11.0.19100.45 Adware.SwiftBrowse.N
G Data 24 Adware.SwiftBrowse.N
IKARUS anti.virus T3.1.6.1.0 not-a-virus:AdWare.Win32.Agent
K7 AntiVirus 9.180.12463 Unwanted-Program ( 00454f261 )
K7GW 9.180.12463 Unwanted-Program ( 00454f261 )
Kaspersky 12.0.0.1225 not-a-virus:AdWare.Win32.Agent.ahbx
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Agent.ah.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.ConstaSurf.A
McAfee 6.0.4.564 Artemis!ECF9187E7C24
McAfee-GW-Edition 2013 Artemis!ECF9187E7C24
MicroWorld-eScan 12.0.250.0 Adware.SwiftBrowse.N
NANO AntiVirus 0.28.0.60253 Riskware.Win32.Agent.cqycvd
nProtect 2014-06-19.01 Adware.SwiftBrowse.N
Panda Antivirus 10.0.3.5 Trj/CI.A
Qihoo-360 1.0.0.1015 Win32/Trojan.Adware.5a2
Sophos 4.98.0 Generic PUA IB
SUPERAntiSpyware 5.6.0.1032 Adware.BrowseFox/Variant
TrendMicro-HouseCall 9.700.0.1001 Suspicious_GEN.F47V0612
Vba32 AntiVirus 3.12.26.3 AdWare.Agent
VIPRE Antivirus 30468 Yontoo (fs)
4829969A-6C38-4AAB-922F-BAAC16B4614B.dll (42253ac8f46be5588c5cd9791dc51963) has been flagged by the following 32 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Adware.SwiftBrowse.N
Agnitum Outpost 5.5.1.3 PUA.Agent!
Avira AntiVir 7.11.155.202 APPL/BrowseFox.Gen2
Antiy-AVL 1.0.0.1 GrayWare[AdWare:not-a-virus]/Win32.Agent
AVG 14.0.0.3972 BrowseFox.F
Baidu-International 3.5.1.41473 Adware.Win32.BrowseFox.BF
Bitdefender 7.2 Adware.SwiftBrowse.N
Comodo Security 18602 Application.Win32.Altbrowse.AK
Dr.Web 7.0.7.12100 Trojan.BPlug.17
Emsisoft Anti-Malware 3.0.0.600 Adware.SwiftBrowse.N (B)
ESET-NOD32 9971 a variant of Win32/BrowseFox.F
Fortinet FortiGate 5.1.152.0 Adware/Agent
F-Secure 11.0.19100.45 Adware.SwiftBrowse.N
G Data 24 Adware.SwiftBrowse.N
IKARUS anti.virus T3.1.6.1.0 not-a-virus:AdWare.Win32.Agent
K7 AntiVirus 9.180.12463 Unwanted-Program ( 00454f261 )
K7GW 9.180.12463 Unwanted-Program ( 00454f261 )
Kaspersky 12.0.0.1225 not-a-virus:AdWare.Win32.Agent.ahbx
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Agent.ah.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.ConstaSurf.A
McAfee 6.0.4.564 Artemis!42253AC8F46B
McAfee-GW-Edition 2013 Artemis!42253AC8F46B
MicroWorld-eScan 12.0.250.0 Adware.SwiftBrowse.N
NANO AntiVirus 0.28.0.60253 Riskware.Win32.Agent.cqycvd
nProtect 2014-06-19.01 Adware.SwiftBrowse.N
Panda Antivirus 10.0.3.5 Trj/CI.A
Qihoo-360 1.0.0.1015 Win32/Trojan.Adware.5a2
Sophos 4.98.0 Generic PUA EC
SUPERAntiSpyware 5.6.0.1032 Adware.BrowseFox/Variant
TrendMicro-HouseCall 9.700.0.1001 Suspicious_GEN.F47V0611
Vba32 AntiVirus 3.12.26.3 AdWare.Agent
VIPRE Antivirus 30468 Yontoo (fs)
6B4ED544-12FB-4E23-8808-29BE760D57FD.dll (5a64be16e215a39032ce1f7b5266bcfb) has been flagged by the following 31 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Adware.SwiftBrowse.N
Agnitum Outpost 5.5.1.3 PUA.Agent!
Avira AntiVir 7.11.155.202 APPL/BrowseFox.Gen2
AVG 14.0.0.3972 BrowseFox.F
Baidu-International 3.5.1.41473 Adware.Win32.Agent.APX
Bitdefender 7.2 Adware.SwiftBrowse.N
Comodo Security 18602 Application.Win32.Altbrowse.AK
Dr.Web 7.0.7.12100 Trojan.BPlug.17
Emsisoft Anti-Malware 3.0.0.600 Adware.SwiftBrowse.N (B)
ESET-NOD32 9971 a variant of Win32/BrowseFox.F
Fortinet FortiGate 5.1.152.0 Adware/Agent
F-Secure 11.0.19100.45 Adware.SwiftBrowse.N
G Data 24 Adware.SwiftBrowse.N
IKARUS anti.virus T3.1.6.1.0 not-a-virus:AdWare.Win32.Agent
K7 AntiVirus 9.180.12463 Unwanted-Program ( 00454f261 )
K7GW 9.180.12463 Unwanted-Program ( 00454f261 )
Kaspersky 12.0.0.1225 not-a-virus:AdWare.Win32.Agent.ahbx
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Agent.ah.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.ConstaSurf.A
McAfee 6.0.4.564 Artemis!5A64BE16E215
McAfee-GW-Edition 2013 Artemis!5A64BE16E215
MicroWorld-eScan 12.0.250.0 Adware.SwiftBrowse.N
NANO AntiVirus 0.28.0.60253 Riskware.Win32.Agent.cqycvd
nProtect 2014-06-19.01 Adware.SwiftBrowse.N
Panda Antivirus 10.0.3.5 Trj/CI.A
Qihoo-360 1.0.0.1015 Win32/Trojan.Adware.5a2
Sophos 4.98.0 Generic PUA CD
SUPERAntiSpyware 5.6.0.1032 Adware.BrowseFox/Variant
TrendMicro-HouseCall 9.700.0.1001 Suspicious_GEN.F47V0610
Vba32 AntiVirus 3.12.26.3 AdWare.Agent
VIPRE Antivirus 30468 Yontoo (fs)
08C75169-3847-4DEA-9147-017B9BBE8573.dll (9c336c994072742ec48799745ae16dac) has been flagged by the following 31 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Adware.SwiftBrowse.N
Agnitum Outpost 5.5.1.3 PUA.Agent!
Avira AntiVir 7.11.155.202 APPL/BrowseFox.Gen2
Antiy-AVL 1.0.0.1 GrayWare[AdWare:not-a-virus]/Win32.Agent
AVG 14.0.0.3972 BrowseFox.F
Baidu-International 3.5.1.41473 Adware.Win32.BrowseFox.bF
Bitdefender 7.2 Adware.SwiftBrowse.N
Comodo Security 18602 Application.Win32.Altbrowse.AK
Dr.Web 7.0.7.12100 Trojan.BPlug.17
Emsisoft Anti-Malware 3.0.0.600 Adware.SwiftBrowse.N (B)
ESET-NOD32 9971 a variant of Win32/BrowseFox.F
Fortinet FortiGate 5.1.152.0 Adware/Agent
F-Secure 11.0.19100.45 Adware.SwiftBrowse.N
G Data 24 Adware.SwiftBrowse.N
IKARUS anti.virus T3.1.6.1.0 not-a-virus:AdWare.Win32.Agent
K7 AntiVirus 9.180.12463 Unwanted-Program ( 00454f261 )
K7GW 9.180.12463 Unwanted-Program ( 00454f261 )
Kaspersky 12.0.0.1225 not-a-virus:AdWare.Win32.Agent.ahbx
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Agent.ah.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.ConstaSurf.A
McAfee 6.0.4.564 Artemis!9C336C994072
McAfee-GW-Edition 2013 Artemis!9C336C994072
MicroWorld-eScan 12.0.250.0 Adware.SwiftBrowse.N
NANO AntiVirus 0.28.0.60253 Riskware.Win32.Agent.cqycvd
nProtect 2014-06-19.01 Adware.SwiftBrowse.N
Panda Antivirus 10.0.3.5 Trj/CI.A
Sophos 4.98.0 Generic PUA LN
SUPERAntiSpyware 5.6.0.1032 Adware.BrowseFox/Variant
TrendMicro-HouseCall 9.700.0.1001 Suspicious_GEN.F47V0612
Vba32 AntiVirus 3.12.26.3 AdWare.Agent
VIPRE Antivirus 30468 Yontoo (fs)
6580EF5E-A748-4AD0-998E-01DFE09286D2.dll (c7985194e9c9646b0569e1ce4c9b0f52) has been flagged by the following 30 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Adware.SwiftBrowse.N
Agnitum Outpost 5.5.1.3 PUA.Agent!
Avira AntiVir 7.11.150.188 APPL/BrowseFox.Gen2
Antiy-AVL 0.1.0.1 GrayWare[AdWare:not-a-virus]/Win32.Agent
AVG 14.0.0.3950 BrowseFox.F
Bitdefender 7.2 Adware.SwiftBrowse.N
CAT-QuickHeal 14.00 AdWare.Agent.r5 (Not a Virus)
Comodo Security 18306 Application.Win32.Altbrowse.AK
Dr.Web 7.00.9.04080 Trojan.BPlug.17
Emsisoft Anti-Malware 3.0.0.599 Adware.SwiftBrowse.N (B)
ESET-NOD32 9827 a variant of Win32/BrowseFox.F
Fortinet FortiGate 4 Adware/Agent
F-Secure 11.0.19100.45 Adware.SwiftBrowse.N
G Data 24 Adware.SwiftBrowse.N
IKARUS anti.virus T3.1.6.1.0 not-a-virus:AdWare.Win32.Agent
K7 AntiVirus 9.178.12140 Unwanted-Program ( 00454f261 )
K7GW 9.178.12140 Unwanted-Program ( 00454f261 )
Kaspersky 12.0.0.1225 not-a-virus:AdWare.Win32.Agent.ahbx
Kingsoft AntiVirus 2013.04.09.267 Win32.Troj.Agent.ah.(kcloud)
Malwarebytes 1.75.0001 PUP.Optional.ConstaSurf.A
McAfee 6.0.4.564 Artemis!C7985194E9C9
McAfee-GW-Edition 2013 Artemis!C7985194E9C9
MicroWorld-eScan 12.0.250.0 Adware.SwiftBrowse.N
NANO AntiVirus 0.28.0.59921 Riskware.Win32.Agent.cqycvd
Panda Antivirus 10.0.3.5 Trj/CI.A
Sophos 4.98.0 Generic PUA AK
SUPERAntiSpyware 5.6.0.1032 Adware.BrowseFox/Variant
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0501
Vba32 AntiVirus 3.12.26.0 AdWare.Agent
VIPRE Antivirus 29442 Yontoo (fs)
       View all 265 all detections
ConstaSurf has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: ConstaSurf
URL: constasurf.info/support
Help link: mailto:[email protected]
Installation folder: C:\Program Files\ConstaSurf
Uninstaller: C:\Program Files\ConstaSurf\ConstaSurfuninstall.exe
Estimated size: 2.39 MB

Program filesFiles installed by ConstaSurf

Program module:71A8372B-B4E5-4463-B982-39E380902274.dll (Malware detected)
Name:ConstaSurf
Path:C:\Program Files\ConstaSurf\71A8372B-B4E5-4463-B982-39E380902274.dll
MD5:0924f3764acf7efd13df34bb9dee8fd4
Additional files:
  • (Malware detected) 08C75169-3847-4DEA-9147-017B9BBE8573.dll - ConstaSurf
  • (Malware detected) 169FEFFE-9CD8-4501-B51D-31B9ACD143C3.dll
  • (Malware detected) 1EA6E65B-F4A8-475C-8FA7-13092779CC38.dll
  • (Malware detected) 204A05F8-24E6-4824-8C68-12461DF2D42B.dll
  • (Malware detected) 2568B8DA-E05E-417C-87C8-098ECA365D3A.dll
  • (Malware detected) 259D97E2-28FB-4DC6-B44A-555066D769B6.dll
  • (Malware detected) 286EC949-9BF0-493A-9122-57FACD296470.dll
  • (Malware detected) 4829969A-6C38-4AAB-922F-BAAC16B4614B.dll
  • (Malware detected) 49E879EE-3FAF-49CE-BADF-E9E346AABC4D.dll
  • (Malware detected) 62909AFB-14E3-420E-900F-957524BDCAC8.dll
  • (Malware detected) 6580EF5E-A748-4AD0-998E-01DFE09286D2.dll
  • (Malware detected) 6B4ED544-12FB-4E23-8808-29BE760D57FD.dll
  • (Malware detected) 6EE4DCB4-8DC1-429B-A294-653930A7545C.dll
  • (Malware detected) 71A8372B-B4E5-4463-B982-39E380902274.dll
  • (Malware detected) 76DB8EF5-4766-4737-8873-49546CBABDC4.dll
  • (Malware detected) 87E07A19-7A2B-4314-8521-EC4E307C6AA2.dll
  • (Malware detected) 914AC8DE-C633-490B-A55F-C031FFF58FF0.dll
  • (Malware detected) 991D953C-BA9E-4BB9-B8E2-A00AA398B334.dll
  • (Malware detected) C4D1CE3E-FBAC-4D54-8373-80915C54F3CB.dll
  • (Malware detected) ConstaSurfBHO.dll
  • (Malware detected) D627DE60-A026-48F2-BB3C-91A9F33DA5D4.dll
  • (Malware detected) DF6768F9-E37D-4012-99E5-2A7EE551E805.dll
  • (Malware detected) DF88F53A-C46E-488D-A142-D5E1FFA6AF68.dll
  • (Malware detected) E35CAA7F-6350-4ED9-8349-768385469ABC.dll
  • (Malware detected) E38E1BA1-0807-4FDF-A63B-6C3584903064.dll
  • (Malware detected) E8D87163-6742-4D0F-8D9B-13A17B2F2C17.dll
  • (Malware detected) EB4DC18A-C4A3-4B74-ABEF-A51ABF92E113.dll
  • (Malware detected) FD8A2BC3-BC33-456D-85EB-C63380DA9E6C.dll
  • ConstaSurf.FirstRun.exe - FirstRun
  • 7za.exe (by Igor Pavlov) - 7-Zip (7-Zip Standalone Console)
  • ConstaSurfUn.exe
  • ConstaSurfUninstall.exe
  • imnmlgndokmgocfabbcnfnjfopjkbinb.crx
  • (Malware detected) updateConstaSurf.exe

Program behaviorsBehaviors exhibited

6 Internet Explorer BHOs
  • ConstaSurfBHO.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'ConstaSurf 1.0.0.7' with the class of {d7356335-81bf-4769-bfbd-2e2889138641}.
  • 71A8372B-B4E5-4463-B982-39E380902274.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'ConstaSurf' with the class of {d7356335-81bf-4769-bfbd-2e2889138641}.
  • 87E07A19-7A2B-4314-8521-EC4E307C6AA2.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'ConstaSurf' with the class of {d7356335-81bf-4769-bfbd-2e2889138641}.
  • 914AC8DE-C633-490B-A55F-C031FFF58FF0.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'ConstaSurf' with the class of {d7356335-81bf-4769-bfbd-2e2889138641}.
  • 62909AFB-14E3-420E-900F-957524BDCAC8.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'ConstaSurf' with the class of {d7356335-81bf-4769-bfbd-2e2889138641}.
  • 6EE4DCB4-8DC1-429B-A294-653930A7545C.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'ConstaSurf' with the class of {d7356335-81bf-4769-bfbd-2e2889138641}.
Service
  • updateConstaSurf.exe runs as a service named 'Util ConstaSurf' (Util ConstaSurf).

How do I remove ConstaSurf?

You can uninstall ConstaSurf from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program ConstaSurf, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove ConstaSurf.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by ConstaSurf you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome
OS VERSIONS
Win 7 (SP1) 54%
Win XP 1%
  
HOW IT RUNS
Windows Service? Yes
(Installs a service)
  
USER ACTIONS
Uninstall it 87%
Keep it 13%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 59.47%
Windows 10 32.38%
Windows Vista 4.41%
Windows XP 3.74%
Which OS releases does it run on?
Windows 7 Home Premium 22.96%
Windows 7 Ultimate 21.41%
Windows 8.1 15.01%
Windows 7 Professional 11.04%
Windows 8 6.40%
Microsoft Windows XP 3.75%

Distribution by countryGeography

43.11% of installs come from the United States
Which countries install it?
  United States 43.11%
  United Kingdom 5.39%
  MA 3.79%
  DZ 2.59%
  BD 2.40%
  Australia 2.20%
  Israel 2.00%
  Saudi Arabia 2.00%
  Germany 1.80%
  IQ 1.80%
  Canada 1.60%
  Malaysia 1.60%
  France 1.60%
  Indonesia 1.60%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 29.97%
Dell 24.29%
Acer 17.03%
Toshiba 8.52%
ASUS 7.57%
Lenovo 4.42%
Samsung 3.79%
GIGABYTE 3.15%
Intel 1.26%
Common models
HP Pavilion g6 Notebook P... 5.23%
Dell Inspiron 3521 4.07%
HP PAVILION DV7 NOTEBOOK ... 2.91%
HP 2000 Notebook PC 2.91%
HP Pavilion dv6 Notebook ... 2.91%
HP 630 Notebook PC 2.33%

About Yontoo Technology

Yontoo, a subsidiary/alias of ad-hijacker Sambreel, is a publisher of ad-supported web browser extensions designed to inject and display advertisements within the browser.
Publisher URL: www.yontoo.com

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.
Back to top
Find us on Facebook   Follow us on Twitter   Find us on Google+   View our Pinterests