What is Flowsurf?

Flowsurf is software application developed by FlowSurf Apps. It is most commonly found on computers running Windows 7 with nearly 65.38% of installations running this operating system. Flowsurf's installer is typically 1.00 MB in size and installs around 31 files. The most common release is 2.1.2 with 50.00% of all installations currently using this version.

Flowsurf is most popular in Germany with 36.36% of installations residing in this country.

About Flowsurf?

FlowSurf is a web browser extension that functions as an adware program, displaying various forms of advertising while the user is browsing the internet. This ad-supported extension is typically installed through third-party installers and download managers. It is compatible with Internet Explorer, Chrome, and Firefox. FlowSurf inserts advertisements in the form of full banner ads and text hyperlinks within the web pages the user visits. These ads are not associated with the underlying website and are injected by the adware through an extension, browser helper object (BHO), or plugin, depending on the browser.

Multiple virus scanners have detected malware in Flowsurf.

fsupd.exe (MD5: 2b140f9d8cd365bf8522a5118d0b06ef) has been flagged by 6 scanners:

Scanner Software	Version	Result
Baidu-International	3.5.1.41473	Hacktool.Win32.Downloader.aot
CAT-QuickHeal	14.00	Downloader.Agent.r5 (Not a Virus)
Dr.Web	7.0.10.8210	Adware.Searcher.2649
Kaspersky	15.0.1.10	not-a-virus:Downloader.Win32.Agent.cezq
NANO AntiVirus	0.28.6.63474	Trojan.Win32.Agent.deyady
Vba32 AntiVirus	3.12.26.3	Downloader.Agent

setupfs_1123.exe (MD5: 369c15bae2ca70bc466fc2a53760fb1a) has been flagged by 25 scanners:

Scanner Software	Version	Result
Antiy-AVL	1.0.0.1	Trojan/Win32.SGeneric
avast!	8.0.1489.320	Win32:Malware-gen
AVG	15.0.0.4328	Generic6.AAWN
Avira	3.6.1.96	TR/Agent.5442433
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Trojan.NSIS.Adload.AK
Comodo Security	21695	ApplicUnwnt
Cyren	5.4.16.7	W32/Trojan.PRUI-3556
Dr.Web	7.0.12.3050	Trojan.KillFiles.23205
ESET-NOD32	11444	a variant of Win32/Komodia.A potentially unsafe
IKARUS anti.virus	T3.1.8.9.0	PUA.FlowSurf
K7 AntiVirus	9.202.15530	Unwanted-Program ( 004b89781 )
K7GW	9.202.15530	Unwanted-Program ( 004b89781 )
Kaspersky	15.0.1.10	UDS:DangerousObject.Multi.Generic
McAfee	6.0.5.614	Artemis!369C15BAE2CA
McAfee-GW-Edition	v2015	BehavesLike.Win32.Downloader.tc
NANO AntiVirus	0.30.10.952	Trojan.Win32.KillFiles.dobcbg
Norman	7.04.04	Troj_Generic.YLGRY
Qihoo-360	1.0.0.1015	HEUR/QVM42.0.Malware.Gen
Symantec	20141.2.0.56	Trojan.Gen
Trend Micro	9.740.0.1012	TROJ_GEN.R00UC0OBD15
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R00UC0OBD15
VIPRE Antivirus	39180	Trojan.Win32.Generic!BT
CAT-QuickHeal	14.00	Downloader.Agent.r5 (Not a Virus)
Vba32 AntiVirus	3.12.26.3	Downloader.Agent

flowsurf.dll (MD5: 2b87a437445e7a42b0e3c54071eef061) has been flagged by 26 scanners:

Scanner Software	Version	Result
Comodo Security	20116	Application.Win32.Altbrowse.AK
Malwarebytes	v2014.11.20.03	PUP.Optional.FlowSearch.A
Symantec	11/20/2014 rev. 5	WS.Reputation
TrendMicro-HouseCall	7.2.324	Suspicious_GEN.F47V1108
Antiy-AVL	1.0.0.1	Trojan/Win32.SGeneric
avast!	8.0.1489.320	Win32:Malware-gen
AVG	15.0.0.4328	Generic6.AAWN
Avira	3.6.1.96	TR/Agent.5442433
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Trojan.NSIS.Adload.AK
Cyren	5.4.16.7	W32/Trojan.PRUI-3556
Dr.Web	7.0.12.3050	Trojan.KillFiles.23205
ESET-NOD32	11444	a variant of Win32/Komodia.A potentially unsafe
IKARUS anti.virus	T3.1.8.9.0	PUA.FlowSurf
K7 AntiVirus	9.202.15530	Unwanted-Program ( 004b89781 )
K7GW	9.202.15530	Unwanted-Program ( 004b89781 )
Kaspersky	15.0.1.10	UDS:DangerousObject.Multi.Generic
McAfee	6.0.5.614	Artemis!369C15BAE2CA
McAfee-GW-Edition	v2015	BehavesLike.Win32.Downloader.tc
NANO AntiVirus	0.30.10.952	Trojan.Win32.KillFiles.dobcbg
Norman	7.04.04	Troj_Generic.YLGRY
Qihoo-360	1.0.0.1015	HEUR/QVM42.0.Malware.Gen
Trend Micro	9.740.0.1012	TROJ_GEN.R00UC0OBD15
VIPRE Antivirus	39180	Trojan.Win32.Generic!BT
CAT-QuickHeal	14.00	Downloader.Agent.r5 (Not a Virus)
Vba32 AntiVirus	3.12.26.3	Downloader.Agent

Startup Entries

Startup tasks:

fsupd.exe is automatically launched at startup through a scheduled task named fsupdate.

Software Details

URL:

https://www.flowsurf.net/search.php

Support:

–

Installation path:

C:\Program Files\flowsurf

Uninstaller:

C:\Program Files\Flowsurf\uninstall.exe

Size:

1.00 MB

Language:

English

Flowsurf Executable Details

Primary executable:

flowsurf.dll

Name:

Flowsurf

Path:

C:\Program Files\flowsurf\flowsurf.dll

MD5:

2b87a437445e7a42b0e3c54071eef061

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

ssl3.dll

a6129adaffa541a972b0cf6d4dc1d766

DLL

libnspr4.dll

b564b3411abf0de22b7f78fed2419976

DLL

libplc4.dll

ed169d3aaca62289c114059592e622f0

DLL

libplds4.dll

6aa03ef0d1b84a5487b380b7e7b25bd6

EXE

sqlite3.exe

0b86536bba2a922f5f32ad1792d8a03b

DLL

atl110.dll

bd109e8f9e413f817f07a1057c7a2fcc

EXE

fsupd.exe

Malware

2b140f9d8cd365bf8522a5118d0b06ef

EXE

setupfs_1123.exe

Malware

369c15bae2ca70bc466fc2a53760fb1a

EXE

lengine.exe

5da029d71731e59841724d693988c4d4

DLL

abenginewd.dll

b3bd414918b19fd3b6a5cfb89d4453b7