What is Flowsurf?

Flowsurf is software application developed by FlowSurf Apps. It is most commonly found on computers running Windows 7 with nearly 65.38% of installations running this operating system. Flowsurf's installer is typically 1.00 MB in size and installs around 31 files. The most common release is 2.1.2 with 50.00% of all installations currently using this version.

Flowsurf is most popular in Germany with 36.36% of installations residing in this country.

About Flowsurf?

FlowSurf is a web browser extension that functions as an adware program, displaying various forms of advertising while the user is browsing the internet. This ad-supported extension is typically installed through third-party installers and download managers. It is compatible with Internet Explorer, Chrome, and Firefox. FlowSurf inserts advertisements in the form of full banner ads and text hyperlinks within the web pages the user visits. These ads are not associated with the underlying website and are injected by the adware through an extension, browser helper object (BHO), or plugin, depending on the browser.

Multiple virus scanners have detected malware in Flowsurf.

fsupd.exe (MD5: 2b140f9d8cd365bf8522a5118d0b06ef) has been flagged by 6 scanners:

Scanner Software	Version	Result
Baidu-International	3.5.1.41473	Hacktool.Win32.Downloader.aot
CAT-QuickHeal	14.00	Downloader.Agent.r5 (Not a Virus)
Dr.Web	7.0.10.8210	Adware.Searcher.2649
Kaspersky	15.0.1.10	not-a-virus:Downloader.Win32.Agent.cezq
NANO AntiVirus	0.28.6.63474	Trojan.Win32.Agent.deyady
Vba32 AntiVirus	3.12.26.3	Downloader.Agent

setupfs_1123.exe (MD5: 369c15bae2ca70bc466fc2a53760fb1a) has been flagged by 25 scanners:

Scanner Software	Version	Result
Antiy-AVL	1.0.0.1	Trojan/Win32.SGeneric
avast!	8.0.1489.320	Win32:Malware-gen
AVG	15.0.0.4328	Generic6.AAWN
Avira	3.6.1.96	TR/Agent.5442433
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Trojan.NSIS.Adload.AK
Comodo Security	21695	ApplicUnwnt
Cyren	5.4.16.7	W32/Trojan.PRUI-3556
Dr.Web	7.0.12.3050	Trojan.KillFiles.23205
ESET-NOD32	11444	a variant of Win32/Komodia.A potentially unsafe
IKARUS anti.virus	T3.1.8.9.0	PUA.FlowSurf
K7 AntiVirus	9.202.15530	Unwanted-Program ( 004b89781 )
K7GW	9.202.15530	Unwanted-Program ( 004b89781 )
Kaspersky	15.0.1.10	UDS:DangerousObject.Multi.Generic
McAfee	6.0.5.614	Artemis!369C15BAE2CA
McAfee-GW-Edition	v2015	BehavesLike.Win32.Downloader.tc
NANO AntiVirus	0.30.10.952	Trojan.Win32.KillFiles.dobcbg
Norman	7.04.04	Troj_Generic.YLGRY
Qihoo-360	1.0.0.1015	HEUR/QVM42.0.Malware.Gen
Symantec	20141.2.0.56	Trojan.Gen
Trend Micro	9.740.0.1012	TROJ_GEN.R00UC0OBD15
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R00UC0OBD15
VIPRE Antivirus	39180	Trojan.Win32.Generic!BT
CAT-QuickHeal	14.00	Downloader.Agent.r5 (Not a Virus)
Vba32 AntiVirus	3.12.26.3	Downloader.Agent

flowsurf.dll (MD5: 2b87a437445e7a42b0e3c54071eef061) has been flagged by 26 scanners:

Scanner Software	Version	Result
Comodo Security	20116	Application.Win32.Altbrowse.AK
Malwarebytes	v2014.11.20.03	PUP.Optional.FlowSearch.A
Symantec	11/20/2014 rev. 5	WS.Reputation
TrendMicro-HouseCall	7.2.324	Suspicious_GEN.F47V1108
Antiy-AVL	1.0.0.1	Trojan/Win32.SGeneric
avast!	8.0.1489.320	Win32:Malware-gen
AVG	15.0.0.4328	Generic6.AAWN
Avira	3.6.1.96	TR/Agent.5442433
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Trojan.NSIS.Adload.AK
Cyren	5.4.16.7	W32/Trojan.PRUI-3556
Dr.Web	7.0.12.3050	Trojan.KillFiles.23205
ESET-NOD32	11444	a variant of Win32/Komodia.A potentially unsafe
IKARUS anti.virus	T3.1.8.9.0	PUA.FlowSurf
K7 AntiVirus	9.202.15530	Unwanted-Program ( 004b89781 )
K7GW	9.202.15530	Unwanted-Program ( 004b89781 )
Kaspersky	15.0.1.10	UDS:DangerousObject.Multi.Generic
McAfee	6.0.5.614	Artemis!369C15BAE2CA
McAfee-GW-Edition	v2015	BehavesLike.Win32.Downloader.tc
NANO AntiVirus	0.30.10.952	Trojan.Win32.KillFiles.dobcbg
Norman	7.04.04	Troj_Generic.YLGRY
Qihoo-360	1.0.0.1015	HEUR/QVM42.0.Malware.Gen
Trend Micro	9.740.0.1012	TROJ_GEN.R00UC0OBD15
VIPRE Antivirus	39180	Trojan.Win32.Generic!BT
CAT-QuickHeal	14.00	Downloader.Agent.r5 (Not a Virus)
Vba32 AntiVirus	3.12.26.3	Downloader.Agent

Startup Entries

Startup tasks:

fsupd.exe is automatically launched at startup through a scheduled task named fsupdate.

Software Details

URL:

https://www.flowsurf.net/search.php

Support:

–

Installation path:

C:\Program Files\flowsurf

Uninstaller:

C:\Program Files\Flowsurf\uninstall.exe

Size:

1.00 MB

Language:

English

Flowsurf Executable Details

Primary executable:

flowsurf.dll

Name:

Flowsurf

Path:

C:\Program Files\flowsurf\flowsurf.dll

MD5:

2b87a437445e7a42b0e3c54071eef061

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

abengine.dll

9c3940cd89fabb79e620ca6f833dc20b

EXE

lengine64.exe

9e8addc9ecb7e2b9983c6673f288c69c

DLL

abengine64.dll

b5434e4642c06b58c0d7e0e1e6619a16

DLL

abenginecert.dll

ef90dea4fc4b02a2ab457526b108bafd

EXE

abengine.exe

14de723a4d9fd3ad14e3d5fa49e4c6eb

EXE

ijs.exe

89256150cc62287529c771007263d3de

EXE

upfs7214.exe

43390142912cf35a8cdf16adc8a3af4c

DLL

flowsurf.dll

Malware

2b87a437445e7a42b0e3c54071eef061

EXE

abenginep.exe

37e6a0fb18a8fdf0d3cde0a83f398657

EXE

abenginew.exe

0624eb666ce0568e2779abee9cb5db08