84,488,480 programs installed

Should I remove SocureWeb Control?

What percent of users and experts removed it?
81% remove it19% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Reach 0.0005%
Lifespan of installation (until removal)
< 18.66 days
550.43 days >
Average installed length: 289.21 days

Other programs by TopClick

SocureWeb Control

What is SocureWeb Control?

SocureWeb is an adware application that runs in the web browser as a toolbar and web extension. The web extension is primarily designed to take control of the user's browser in order to modify the search provider and redirect web searches to the search engine partner the publisher has a revenue relationship with. In doing so, the toolbar performs a number of behaviors in order to maximize the potential of a user to click on sponsored advertising through search. It is typically installed via a bundled offer within a 3rd-party distribution. Functionality of the toolbar includes but is not limited to:

- Changing the web browser's default home page to the affiliate search portal.
- Changing the browser's search provider, built-in search box as well as the address bar.
- Ability to modify the 'new tab' functionality to launch the modified search portal page.
- Adds an alternative error page, DNS error and 'page not' found functionality.
- Adds additional functionality that is designed to protect the search and home page settings.
- May 'inject' advertising in the form of context ads, links and pop-ups.

Overview

It adds registry entry for the current user which will allow the program to automatically start each time it is rebooted. Upon being installed, the software adds a Windows Service which is designed to run continuously in the background. Manually stopping the service has been seen to cause the program to stop functing properly. It adds a background controller service that is set to automatically run. Delaying the start of this service is possible through the service manager. It adds a Browser Helper Object (BHO) to Internet Explorer. The primary executable is named tcunins.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 6 files and is usually about 835.58 KB (855,639 bytes).
  • Malware detected in the program
  • Automatically starts with Windows
  • Integrates into the web browser
  • Installs a Windows Service
  • Hijacks the web browser's home page
  • Hijacks the browser's default search provider
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in SocureWeb Control.
tcunins.exe (ec2fd6074c7561470f1d423b1a7aff5c) has been flagged by the following 29 scanners:
Anti-Virus softwareVersionDetection
Agnitum Outpost 7.1.1 Trojan.BHO
Avira AntiVir 7.11.57.94 TR/Rogue.8434992.1
AVG 2014.0.3469 Skodna.SecurityTool
Bitdefender 1.0.20.830 Trojan.Generic.8434992
CAT-QuickHeal 6.13.12.00 Trojan.BHO.cfsi
Comodo Security 14921 UnclassifiedMalware
Dr.Web 9.0.0.0166 Adware.Plugin.29
Emsisoft Anti-Malware 8.13.06.15.03 Trojan.Win32.BHO.cfsi.AMN
ESET-NOD32 7.7895 a variant of Win32/Adware.Kraddare.FJ
Fortinet FortiGate 6/15/2013 W32/BHO.CFSI!tr
F-Secure 11.2013-15-06_7 Trojan.Generic.8434992
G Data 13.6.22 Trojan.Generic.8434992
IKARUS anti.virus t3scan.1.3.5.0 Trojan.Win32.BHO
Jiangmin KV130615 Trojan/BHO.rfx
Kaspersky 14.0.0.3213 Trojan.Win32.BHO
Kingsoft AntiVirus 331020.15217 Win32.Troj.BHO.(kcloud)
Malwarebytes v2013.06.15.03 Adware.KorAd
McAfee-GW-Edition 7.7107 Artemis!EC2FD6074C75
MicroWorld-eScan 14.0.0.498 Trojan.Generic.8434992
NANO AntiVirus 0.22.6.49175 Trojan.Win32.BHO.woagv
nProtect 13.01.15.01 Trojan/W32.BHO.215112
Panda Antivirus 13.06.15.03 Trj/CI.A
PC Tools 2013 Trojan.ADH
Symantec 6/15/2013 rev. 7 Trojan.ADH
The Hacker 6.8.0.6.166 Trojan/BHO.cfsi
Trend Micro 10.465.15 TROJ_GEN.RCBCELU
TrendMicro-HouseCall 7.2.166 TROJ_GEN.RCBCELU
Vba32 AntiVirus 3.12.18.4 Trojan.BHO.cfsi
VIPRE Antivirus 15036 Trojan.Win32.Generic!BT
TCCheckAgent.exe (32903035d6c8bae1652391ece6263faa) has been flagged by the following 35 scanners:
Anti-Virus softwareSoftware versionDetection
Agnitum Outpost 5.5.1.3 Trojan.BHO!LFTVILyacXo
AhnLab-V3 2013.02.19.00 PUP/Win32.TopClick
Avira AntiVir 7.11.61.154 TR/Rogue.kdv.750239.1
Antiy-AVL 2.0.3.7 Trojan/Win32.BHO
avast! 6.0.1289.0 Win32:Adware-gen [Adw]
AVG 10.0.0.1190 Generic28.CKGV
Bitdefender 7.2 Trojan.Generic.KDV.750239
CAT-QuickHeal 12.00 Trojan.BHO.cfsj
Comodo Security 15295 UnclassifiedMalware
Emsisoft Anti-Malware None Trojan.Generic.KDV.750239 (B)
eSafe 7.0.17.0 Win32.Trojan
ESET-NOD32 8022 a variant of Win32/Adware.Kraddare.FJ
Fortinet FortiGate 5.0.43.0 W32/BHO.CFS!tr
F-Secure 11.0.19020.35 Trojan.Generic.KDV.750239
G Data 22 Trojan.Generic.KDV.750239
IKARUS anti.virus T3.1.4.0.0 Trojan.Win32.BHO
Jiangmin 16.0.100 Trojan/BHO.ren
K7 AntiVirus 9.160.8224 Trojan
Kaspersky 9.0.0.837 Trojan.Win32.BHO.cfsj
Kingsoft AntiVirus 2013.1.8.219 Win32.Troj.BHO.(kcloud)
Malwarebytes 1.62.0.140 Adware.KorAd
McAfee 5.400.0.1158 Artemis!32903035D6C8
McAfee-GW-Edition 2012.1 Artemis!32903035D6C8
MicroWorld-eScan 12.0.250.0 Trojan.Generic.KDV.750239
NANO AntiVirus 0.22.8.50287 Trojan.Win32.BHO.uvnrz
Norman 7.00.20 BHO.BGEF
Panda Antivirus 10.0.3.5 Trj/CI.A
Sophos 4.86.0 Mal/Generic-L
SUPERAntiSpyware 5.6.0.1008 Trojan.Agent/Gen
The Hacker None Trojan/BHO.cfsj
Trend Micro 9.740.0.1012 TROJ_SPNR.0BLB12
TrendMicro-HouseCall 9.700.0.1001 TROJ_SPNR.0BLB12
Vba32 AntiVirus 3.12.20.2 Trojan.BHO.cfsj
VIPRE Antivirus 15614 Trojan.Win32.Generic!BT
ViRobot 2011.4.7.4223 Trojan.Win32.A.BHO.73728.U
TCHelper.dll (1fee0f44329d098cf139e053760311b4) has been flagged by the following 16 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2013.11.12.00 PUP/Win32.AdvTopC
avast! 8.0.1489.320 Win32:Adware-BCO [PUP]
AVG 13.0.0.3169 MalSign.Generic.AF4
Baidu-International 3.5.1.41473 AdWare.Win32.Kraddare.Aa
Comodo Security 17254 UnclassifiedMalware
ESET-NOD32 9034 a variant of Win32/Adware.Kraddare.FJ
Fortinet FortiGate 5.1.147.0 Riskware/Kraddare
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Generic.kd.(kcloud)
Malwarebytes 1.75.0.1 Adware.Kraddare
McAfee 5.600.0.1067 Artemis!1FEE0F44329D
McAfee-GW-Edition 2013 Artemis!1FEE0F44329D
NANO AntiVirus 0.26.0.56179 Trojan.Win32.Kraddare.brfhfy
nProtect 2013-11-11.01 Adware/W32.KrAdword.251744
Rising Antivirus 24.87.06.04 Trojan.Win32.Generic.140A5601
Symantec 20131.1.5.61 WS.Reputation.1
VIPRE Antivirus 23274 Trojan.Win32.Generic!BT
TCSearch.exe (ef7e62257a009741b1b663b13ece40f5) has been flagged by the following 4 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2013.08.20.03 PUP/Win32.TopClick
Malwarebytes 1.75.0.1 Adware.KorAd
PC Tools 9.0.0.2 Adware.Adpopup!rem
Symantec 20131.1.0.101 Adware.Adpopup
       View all 84 all detections

Program detailsProgram details

Help link: www.topclick.kr
Installation folder: C:\Program Files\advtopc
Uninstaller: C:\Program Files\AdvTopC\TCUnins.exe
Estimated size: 835.58 KB

Program filesFiles installed by SocureWeb Control

Program executable:tcunins.exe (Malware detected)
Name:TCUnins Module
Path:C:\Program Files\advtopc\tcunins.exe
MD5:ec2fd6074c7561470f1d423b1a7aff5c
Additional files:
  • AdvTCApp.exe - AdvTCApp Module
  • (Malware detected) TCHelper.dll - 2323523
  • (Malware detected) TCSearch.exe
  • tcwhk.dll
  • (Malware detected) TCCheckAgent.exe

Program behaviorsBehaviors exhibited

Internet Explorer BHO
  • TCHelper.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Smart TC' with the class of {3E5EF872-03E2-4CE0-94DF-CA8A5004ECFD}.
Service
  • TCCheckAgent.exe runs as a service named 'TCCheckAgent' (TCCheckAgent).
Startup File (User Run)
  • TCSearch.exe is loaded in the current user (HKCU) registry as an auto-starting executable named 'Adv_TopC' and executes as C:\Program Files\AdvTopC\TCSearch.exe.

How do I remove SocureWeb Control?

You can uninstall SocureWeb Control from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program SocureWeb Control, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove SocureWeb Control.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by SocureWeb Control you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

OS VERSIONS
Win 7 (SP1) 70%
Win 7 10%
 
WHEN IT STARTS
Auto-starting? Yes
(Found in the run registry)
 
USER ACTIONS
Uninstall it 81%
Keep it 19%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 80.00%
Windows XP 10.00%
Windows Vista 10.00%
Which OS releases does it run on?
Windows 7 Ultimate 60.00%
Windows 7 Home Premium 20.00%
Microsoft Windows XP 10.00%
Windows Vista Home Basic 10.00%

Distribution by countryGeography

64.29% of installs come from Korea
Which countries install it?
  Korea 64.29%
  United States 35.71%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
ASUS 50.00%
Samsung 25.00%
GIGABYTE 12.50%
Acer 12.50%
Common models
PEGATRON IPMSB-H61 22.22%
SAMSUNG ELECTRONICS CO.,L... 11.11%
Samsung R530/R730 11.11%
LG Electronics Inc. R405-... 11.11%
LENOVO 3354A19 11.11%
Gigabyte H61M-S2V-B3 11.11%

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.