84,488,480 programs installed

Should I remove BlockAndSurf?

What percent of users and experts removed it?
82% remove it18% keep it
Overall Sentiment
What do people think about it?
(click star to rate)
How common is it?
Global Rank #5,020
United States Rank #5,200
Reach 0.1018%
Lifespan of installation (until removal)
< 10.91 days
321.81 days >
Average installed length: 169.09 days


What is BlockAndSurf?

BlockAndSurf is an adware browser extension that will display banner and text-context link ads aimed to promote the installation of additional questionable content including web browser toolbars, optimization utilities and other products. It will cause random web page text is turned into hyperlinks and may also lead to the installation of other unwanted adware programs to be installed without the user's knowledge.


It adds registry entry for the current user which will allow the program to automatically start each time it is rebooted. It adds a Browser Helper Object (BHO) to Internet Explorer. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). Once installed, it will add an extension to both the Firefox and Chrome web browsers. The primary executable is named BlockAndSurfm.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 244 files and is usually about 1.86 MB (1,951,361 bytes).
  • Malware detected in the program
  • Automatically starts with Windows
  • Adds a toolbar to IE and an extension to Chrome and Firefox
  • Typically distributed through a pay-per-install bundle
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in BlockAndSurf.
BlockAndSurfC.exe (115316316f9fa854f13ead413c974191) has been flagged by the following 30 scanners:
Anti-Virus softwareVersionDetection
Lavasoft Ad-Aware 959 Gen:Variant.Adware.Graftor.141159
Avira AntiVir Adware/Graftor.141159.39
Antiy-AVL GrayWare[AdWare:not-a-virus]/Win32.Agent
avast! 2014.9-140620 Win32:Adware-gen [Adw]
AVG 2015.0.3437 Generic5
Baidu-International Adware.Win32.Agent.aT
Bitdefender Gen:Variant.Adware.Graftor.141159
Comodo Security 18306 ApplicUnwnt
Emsisoft Anti-Malware Gen:Variant.Adware.Graftor.141159
ESET-NOD32 8.9824 a variant of Win32/AdWare.AddLyrics.AJ
Fortinet FortiGate 6/20/2014 Adware/Agent
F-Secure 11.2014-20-06_6 Gen:Variant.Adware.Graftor.141159
G Data 14.6.24 Gen:Variant.Adware.Graftor.141159
IKARUS anti.virus t3scan. Win32.SuspectCrc
K7 AntiVirus 13.178.12140 Adware
K7GW 13.178.12140 Adware ( 00498b741 )
Kaspersky not-a-virus:AdWare.Win32.Agent
Kingsoft AntiVirus 331020.49267 Win32.Troj.Agent.ak.(kcloud)
McAfee 5600.7093 Artemis!115316316F9F
McAfee-GW-Edition 7.7093 Artemis!115316316F9F
MicroWorld-eScan Gen:Variant.Adware.Graftor.141159
NANO AntiVirus Riskware.Win32.Agent.cxqfzv
Panda Antivirus Trj/Genetic.gen
Qihoo-360 HEUR/Malware.QVM10.Gen
Sophos 4.98 Generic PUA DM
Symantec 6/20/2014 rev. 6 Trojan.Gen
Tencent Win32.Risk.Adware.Dvfv
TrendMicro-HouseCall 7.2.171 TROJ_GEN.R0C1H07ED14
Vba32 AntiVirus AdWare.Agent
VIPRE Antivirus 29416 Trojan.Win32.Generic!BT
BlockNSurf.exe (db0c3035b9913c941c364dddf17e2309) has been flagged by the following 25 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware Adware.BlockAndSurf.B
AhnLab-V3 None Adware/Win32.BlockNSurf
Avira AntiVir Adware/BlockAndSurf.B.2
avast! 8.0.1489.320 Win32:Adware-gen [Adw]
AVG Generic5.ARIH
Baidu-International Adware.Win32.AddLyrics.AJ
Bitdefender 7.2 Adware.BlockAndSurf.B
Comodo Security 18313 ApplicUnwnt
Emsisoft Anti-Malware Adware.BlockAndSurf.B (B)
ESET-NOD32 9838 a variant of Win32/AdWare.AddLyrics.AJ
Fortinet FortiGate 4 Riskware/AddLyrics
F-Secure 11.0.19100.45 Adware.BlockAndSurf.B
G Data 24 Adware.BlockAndSurf.B
IKARUS anti.virus T3. AdWare.BlockAndSurf
K7 AntiVirus 9.178.12171 Adware ( 00498b741 )
K7GW 9.178.12171 Adware ( 00498b741 )
McAfee Artemis!DB0C3035B991
McAfee-GW-Edition 2013 Artemis!DB0C3035B991
MicroWorld-eScan Adware.BlockAndSurf.B
NANO AntiVirus Riskware.Win32.BlockAndSurf.cxqulg
Symantec 20131.1.5.61 Trojan.Gen.2
Tencent Win32.Risk.Adware.Wqmu
Trend Micro 9.740-1012 TROJ_GEN.R0CBC0OEJ14
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.R0CBC0OEJ14
VIPRE Antivirus 29512 Trojan.Win32.Generic!BT
171.dll (ca9883c9c8f5902811abca021f784937) has been flagged by the following 2 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International Adware.Win32.BlockAndSurf.108
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0528
BlockAndSurf.exe (e5a07ddd80271329fd9c81c9ae15edc7) has been flagged by the following 2 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International Adware.Win32.Browsefox.108
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.F47V0606
       View all 59 all detections
BlockAndSurf has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: BlockAndSurf-software
URL: www.revizer.com
Installation folder: C:\Program Files\blockandsurf-soft
Uninstaller: C:\Program Files\BlockAndSurf-soft\Uninstall.exe
Estimated size: 1.86 MB

Program filesFiles installed by BlockAndSurf

Program executable:BlockAndSurfm.exe
Path:C:\Program Files\blockandsurfs\BlockAndSurfm.exe
Additional files:
  • (Malware detected) BlockAndSurf.exe - BlockNSurf (BlockNSurf Tray Link)
  • BlockNSurf.exe
  • 161.crx
  • 161.xpi
  • 171.dll
  • 172.dll
  • (Malware detected) BlockAndSurfC.exe
  • BlockAndSurfKF161.dll
  • Uninstall.exe

Program behaviorsBehaviors exhibited

2 Internet Explorer BHOs
  • 172.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'BlockAndSurf' with the class of {09B73D47-DE1A-89C6-EE3B-3DEC891DE5E4}.
  • 171.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'BlockAndSurf' with the class of {422D26E7-DC5F-F795-9A9F-E39B2845B592}.
Scheduled Task
  • BlockAndSurfC.exe is scheduled as a task named 'BlockAndSurf_wd' (runs daily at 11:20 PM).
Scheduled Task (Boot/Login)
  • BlockAndSurfC.exe is automatically launched at startup through a scheduled task named BlockAndSurf_wd.
2 Startup Files (User Run)
  • BlockNSurf.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'BlockNSurf' and executes as C:\Program Files\BlockAndSurf-soft\BlockNSurf.exe.
  • BlockAndSurf.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'BlockAndSurf' and executes as C:\Program Files\BlockAndSurf-soft\BlockAndSurf.exe.

Program resource utilizationResource utilization averages

Memory:1.36 MB
21.09 MB average
Total CPU:0.0001449945%
0.031193% average
Kernel CPU:0.00006048%
0.016088% average
User CPU:0.00008452%
0.015104% average
CPU cycles/sec:128,127
8,062,084 average
I/O reads/min:2 Bytes
435.61 KB average
Memory:3.68 MB
Total CPU:0.0000566013%
Kernel CPU:0.00004390%
User CPU:0.00001270%
CPU cycles/sec:1,384,276
I/O reads/min:90.02 KB

How do I remove BlockAndSurf?

You can uninstall BlockAndSurf from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program BlockAndSurf, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove BlockAndSurf.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by BlockAndSurf you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

Win 7 (SP1) 47%
Win 10 0%
Auto-starting? Yes
(Found in the run registry)
Uninstall it 82%
Keep it 18%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 52.71%
Windows 10 39.74%
Windows Vista 4.42%
Windows XP 3.13%
Which OS releases does it run on?
Windows 7 Home Premium 25.35%
Windows 8.1 20.55%
Windows 7 Ultimate 12.90%
Windows 7 Professional 9.45%
Windows 8 6.05%
Windows 8.1 Pro 3.35%

Distribution by countryGeography

42.64% of installs come from the United States
Which countries install it?
  United States 42.64%
  Germany 4.82%
  Italy 4.78%
  France 4.70%
  Brazil 4.44%
  Canada 4.44%
  United Kingdom 4.36%
  India 3.82%
  Australia 3.48%
  Saudi Arabia 2.01%
  Mexico 1.64%
  Belgium 1.55%
  Indonesia 1.38%
  Turkey 1.38%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 30.85%
Acer 19.50%
Dell 18.72%
ASUS 9.50%
Toshiba 7.23%
Lenovo 5.46%
Samsung 5.25%
Intel 0.99%
Alienware 0.71%
Common models
HP 15 Notebook PC 6.33%
HP Pavilion g6 Notebook P... 5.61%
HP Pavilion 15 Notebook P... 5.24%
HP Pavilion dv6 NoteBook ... 4.70%
HP 2000 Notebook PC 3.98%
Dell Inspiron 3521 2.35%


user comment
No one has commented yet. Help others learn more about this software, share your comments.