84,488,480 programs installed

Should I remove RightSurf?

What percent of users and experts removed it?
80% remove it20% keep it
Overall Sentiment
What do people think about it?
(click star to rate)
How common is it?
Global Rank #9,476
United States Rank #13,346
Reach 0.0393%
Lifespan of installation (until removal)
< 10.18 days
300.27 days >
Average installed length: 157.77 days


2014.02.07.164730 10.72%
2014.02.06.195607 5.04%
2014.02.05.222251 4.52%
2014.02.05.153917 1.16%
2014.02.04.044224 7.88%
2014.02.01.021226 18.60%
2014.01.29.231259 11.50%
2014.01.28.010740 9.17%
2014.01.25.024532 15.25%
2014.01.23.231428 5.68%
2014.01.10.205925 10.47%


What is RightSurf?

RightSurf is an adware web browser extension that will display various popup and banner ads as well as modify the user's web browser search and home page settings in order to serve a number of ad types including banner, inline text links and popups. These ads are aimed to promote the installation of additional questionable content including web browser toolbars, optimization utilities and other products, all so the publisher can generate pay-per-click revenue.

Once infected by this program, common symptoms include:
- Random web page text is turned into hyperlinks.
- Ads with red click here button will pop up when those links are hovered on.
- Other unwanted adware programs might get installed without the user's knowledge.
- Browser popups appear which recommend fake updates or other software.
- Web pages become extremely slow to download due to the multiple ads.

About  (from Yontoo Technology)

Once installed, RightSurf's tools Compare, Deals, Inline, Related, Review, and Search are working behind the scenes to enhance your browsing while you surf the web. It promises to save you time and money.
  • Malware detected in the program
  • Integrates into the web browser
  • Installs a Windows Service
  • Typically distributed through a pay-per-install bundle
  • Hijacks the web browser's home page
  • This program has a poor reputation
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in RightSurf.
RightSurfBHO.dll (526da03eed21c16f38fd35320a9b99ce) has been flagged by the following 9 scanners:
Anti-Virus softwareVersionDetection
Antiy-AVL AdWare/Win32.Agent
Comodo Security 17662 Application.Win32.Altbrowse.AK
ESET-NOD32 8.9329 a variant of Win32/BrowseFox.F
Kaspersky not-a-virus:AdWare.Win32.Agent
Kingsoft AntiVirus 331020.49267 Win32.Troj.Agent.ah.(kcloud)
Malwarebytes v2014.01.26.09 PUP.Optional.RightSurf.A
NANO AntiVirus Riskware.Win32.Agent.crkvek
Sophos 4.97 Generic PUA PP
TrendMicro-HouseCall 7.2.26 TROJ_GEN.F47V0123
updateRightSurf.exe (9f1ef46545971a4d9abab76cbe2c9dda) has been flagged by the following 35 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware Adware.SwiftBrowse.V
AhnLab-V3 2015.04.02.00 Win-PUP/BrowseFox.Gen
ALYac Adware.SwiftBrowse.V
Antiy-AVL Trojan/Win32.TSGeneric
avast! 8.0.1489.320 Win32:BrowseFox-DQ [PUP]
AVG Generic.5CD
Avira ADWARE/BrowseFox.apk
AVware Yontoo (fs)
Baidu-International Adware.MSIL.BrowseFox.H
Bitdefender 7.2 Adware.SwiftBrowse.V
Bkav FE W32.HfsAdware.6B89
Comodo Security 21611 UnclassifiedMalware
Cyren W32/S-7b6eb46a!Eldorado
Dr.Web Trojan.Yontoo.1741
Emsisoft Anti-Malware Adware.SwiftBrowse.V (B)
ESET-NOD32 11410 a variant of MSIL/BrowseFox.H potentially unwanted
F-Prot W32/S-7b6eb46a!Eldorado
F-Secure 11.0.19100.45 Adware.SwiftBrowse.V
G Data 25 Adware.SwiftBrowse.V
IKARUS anti.virus T3. PUA.MSIL.BrowseFox
K7 AntiVirus 9.202.15452 Unwanted-Program ( 0040f96c1 )
K7GW 9.202.15451 Unwanted-Program ( 0040f96c1 )
Malwarebytes PUP.Optional.RightSurf.A
McAfee BrowseFox-FSL
McAfee-GW-Edition v2015 BrowseFox-FSL
MicroWorld-eScan Adware.SwiftBrowse.V
NANO AntiVirus Riskware.Win32.BPlug.djpkri
nProtect 2015-04-01.01 Adware.SwiftBrowse.V
Panda Antivirus Generic Suspicious
Sophos 4.98.0 RightSurf
Symantec 20141.2.0.56 Trojan.Gen.2
Tencent Trojan.Win32.Qudamah.Gen.18
Trend Micro 9.740.0.1012 TROJ_GEN.R0C1C0EL114
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R0C1C0EL114
VIPRE Antivirus 38960 Yontoo (fs)
       View all 44 all detections
RightSurf has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: RightSurf
URL: rightsurf.info/support
Help link: mailto:[email protected]
Installation folder: C:\Program Files\RightSurf
Uninstaller: C:\Program Files\RightSurf\RightSurfuninstall.exe
Estimated size: 1.74 MB

Program filesFiles installed by RightSurf

Program module:RightSurfBHO.dll (Malware detected)
Path:C:\Program Files\RightSurf\RightSurfBHO.dll
Additional files:
  • (Malware detected) RightSurfBHO.dll - RightSurf
  • (Malware detected) updateRightSurf.exe

Program behaviorsBehaviors exhibited

Internet Explorer BHO
  • RightSurfBHO.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'RightSurf' with the class of {88be1aa9-6740-461c-9e3e-f35eb8fa741c}.
  • updateRightSurf.exe runs as a service named 'Update RightSurf' (Update RightSurf).

How do I remove RightSurf?

You can uninstall RightSurf from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program RightSurf, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove RightSurf.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by RightSurf you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

Win 7 (SP1) 53%
Win 7 0%
Windows Service? Yes
(Installs a service)
Uninstall it 80%
Keep it 20%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 61.03%
Windows 10 25.81%
Windows XP 8.26%
Windows Vista 4.90%
Which OS releases does it run on?
Windows 7 Home Premium 27.33%
Windows 7 Ultimate 17.88%
Windows 7 Professional 10.36%
Windows 8.1 9.20%
Microsoft Windows XP 8.03%
Windows 8 6.61%

Distribution by countryGeography

28.17% of installs come from the United States
Which countries install it?
  United States 28.17%
  Brazil 8.58%
  France 7.17%
  Italy 5.25%
  United Kingdom 4.61%
  Germany 3.71%
  India 3.33%
  Poland 3.07%
  Portugal 2.69%
  MA 2.56%
  Australia 2.18%
  Belgium 2.05%
  Taiwan 1.79%
  DZ 1.79%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 28.27%
Acer 18.13%
Dell 16.37%
ASUS 10.72%
Toshiba 8.19%
Lenovo 4.87%
Samsung 4.09%
American Megatrends 1.17%
Medion 1.17%
Sahara 1.17%
Common models
HP Pavilion g6 Notebook P... 5.46%
HP Pavilion 15 Notebook P... 3.78%
HP 2000 Notebook PC 2.94%
HP Pavilion dv6 Notebook ... 2.94%
ASUS All Series 2.10%
Hewlett-Packard Presario ... 2.10%

About Yontoo Technology

Yontoo, a subsidiary/alias of ad-hijacker Sambreel, is a publisher of ad-supported web browser extensions designed to inject and display advertisements within the browser.
Publisher URL: www.yontoo.com

comments1 comment

user comment
user comment
lasgdover a year ago
wont/cant remove updateRightSurf.exe