What is Flwsrf?

Flwsrf is software application developed by FlowSurf Apps. It is most commonly found on computers running Windows 7 with nearly 56.76% of installations running this operating system. Flwsrf's installer is typically 7.00 MB in size and installs around 31 files.

Flwsrf is most popular in Germany with 25.64% of installations residing in this country.

About Flwsrf?

By downloading the software product, you are installing an add-on for your internet browser, which may be referred to as an extension or plug-in. This add-on, known as the FlowSurf Apps Add-On, creates editable virtual layers to modify the appearance of internet websites on your computer. It also incorporates the FlowSurf search enhancer on each new web page and displays featured search results at the top of the search results page. When using FlowSurf for searches, the results will be generated by a designated third-party search engine provider chosen by FlowSurf Apps, or selected by the user where permitted.

Multiple virus scanners have detected malware in Flwsrf.

fsupd.exe (MD5: 2b140f9d8cd365bf8522a5118d0b06ef) has been flagged by 38 scanners:

Scanner Software	Version	Result
Baidu-International	4.0.3.141122	Hacktool.Win32.Downloader.aot
CAT-QuickHeal	11.14.14.00	Downloader.Agent.r5 (Not a Virus)
Dr.Web	9.0.0.0326	Adware.Searcher.2649
Kaspersky	14.0.0.2908	not-a-virus:Downloader.Win32.Agent
NANO AntiVirus	0.28.6.63474	Trojan.Win32.Agent.deyady
Vba32 AntiVirus	3.12.26.3	Downloader.Agent
Lavasoft Ad-Aware	12.0.163.0	Trojan.GenericKD.2020510
ALYac	1.0.1.4	Trojan.GenericKD.2020510
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Bitdefender	7.2	Trojan.GenericKD.2020510
Cyren	5.4.16.7	W32/Trojan.MXTO-8656
Emsisoft Anti-Malware	3.0.0.600	Trojan.GenericKD.2020510 (B)
ESET-NOD32	11462	NSIS/TrojanDownloader.Adload.AK
Fortinet FortiGate	5.0.999.0	W32/Genome.MOCB!tr.dldr
F-Secure	11.0.19100.45	Trojan.GenericKD.2020510
G Data	25	Trojan.GenericKD.2020510
K7 AntiVirus	9.202.15567	Riskware ( 0040eff71 )
K7GW	9.202.15567	Riskware ( 0040eff71 )
McAfee	6.0.5.614	RDN/Generic Downloader.x!lw
McAfee-GW-Edition	v2015	RDN/Generic Downloader.x!lw
MicroWorld-eScan	12.0.250.0	Trojan.GenericKD.2020510
Norman	7.04.04	Troj_Generic.XNZPD
nProtect	2015-04-10.01	Trojan.GenericKD.2020510
Panda Antivirus	4.6.4.2	Trj/CI.A
Qihoo-360	1.0.0.1015	Win32/Trojan.Downloader.548
Sophos	4.98.0	Mal/Generic-S
SUPERAntiSpyware	5.6.0.1032	Trojan.Agent/Gen-Clicker
Symantec	20141.2.0.56	Trojan.Gen.2
Tencent	1.0.0.1	Win32.Trojan-downloader.Genome.Oxun
Trend Micro	9.740.0.1012	TROJ_GEN.R0C1C0EA415
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C1C0EA415
VIPRE Antivirus	39276	Trojan.Win32.Generic!BT
ViRobot	2014.3.20.0	Trojan.Win32.A.Downloader.59019[h]
Agnitum Outpost	5.5.1.3	Riskware.Agent!
Avira	3.6.1.96	ADWARE/Adware.Gen7
Malwarebytes	1.75.0.1	Trojan.Agent
AVG	15.0.0.4328	Generic6.AAWN
Comodo Security	21729	ApplicUnwnt

abengine.exe (MD5: 63514e79ed55d52a6ccad26c0321a042) has been flagged by 23 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Adware.OptimizerMonitor.E
Agnitum Outpost	5.5.1.3	Riskware.Agent!
ALYac	1.0.1.4	Adware.OptimizerMonitor.E
Avira	3.6.1.96	ADWARE/Adware.Gen7
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Hacktool.Win32.Komodia.A
Bitdefender	7.2	Adware.OptimizerMonitor.E
Emsisoft Anti-Malware	3.0.0.600	Adware.OptimizerMonitor.E (B)
ESET-NOD32	11459	a variant of Win32/Komodia.A potentially unsafe
F-Secure	11.0.19100.45	Adware.OptimizerMonitor.E
G Data	25	Adware.OptimizerMonitor.E
K7 AntiVirus	9.202.15564	Unwanted-Program ( 004b89781 )
K7GW	9.202.15565	Unwanted-Program ( 004b89781 )
Malwarebytes	1.75.0.1	Trojan.Agent
McAfee	6.0.5.614	Artemis!63514E79ED55
MicroWorld-eScan	12.0.250.0	Adware.OptimizerMonitor.E
nProtect	2015-04-10.01	Adware.OptimizerMonitor.E
Sophos	4.98.0	Generic PUA NL
Symantec	20141.2.0.56	WS.Reputation.1
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R00UH09CR15
VIPRE Antivirus	39250	Trojan.Win32.Generic!BT
AVG	15.0.0.4328	Generic6.AAWN
Comodo Security	21729	ApplicUnwnt

ijs.exe (MD5: 20cf0b2a87d2cfc94d53911d268f7414) has been flagged by 15 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Adware.OptimizerMonitor.F
Agnitum Outpost	5.5.1.3	PUA.Flinject!
ALYac	1.0.1.4	Adware.OptimizerMonitor.F
AVG	15.0.0.4328	Generic6.AAWN
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Adware.Win32.Flinject.A
Bitdefender	7.2	Adware.OptimizerMonitor.F
Comodo Security	21729	ApplicUnwnt
Emsisoft Anti-Malware	3.0.0.600	Adware.OptimizerMonitor.F (B)
ESET-NOD32	11459	a variant of Win32/Adware.Flinject.A
F-Secure	11.0.19100.45	Adware.OptimizerMonitor.F
G Data	25	Adware.OptimizerMonitor.F
MicroWorld-eScan	12.0.250.0	Adware.OptimizerMonitor.F
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R01TH09CU15
VIPRE Antivirus	39250	Trojan.Win32.Generic!BT

upfs7235.exe (MD5: 400110f238f98c0366c787dedf5e1def) has been flagged by 38 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Trojan.GenericKD.2020510
ALYac	1.0.1.4	Trojan.GenericKD.2020510
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Adware.Win32.Genome.71
Bitdefender	7.2	Trojan.GenericKD.2020510
CAT-QuickHeal	14.00	TrojanDownloader.gen.r5
Cyren	5.4.16.7	W32/Trojan.MXTO-8656
Dr.Web	7.0.12.3050	Trojan.DownLoader11.55360
Emsisoft Anti-Malware	3.0.0.600	Trojan.GenericKD.2020510 (B)
ESET-NOD32	11462	NSIS/TrojanDownloader.Adload.AK
Fortinet FortiGate	5.0.999.0	W32/Genome.MOCB!tr.dldr
F-Secure	11.0.19100.45	Trojan.GenericKD.2020510
G Data	25	Trojan.GenericKD.2020510
K7 AntiVirus	9.202.15567	Riskware ( 0040eff71 )
K7GW	9.202.15567	Riskware ( 0040eff71 )
Kaspersky	15.0.1.10	Trojan-Downloader.Win32.Genome.mocb
McAfee	6.0.5.614	RDN/Generic Downloader.x!lw
McAfee-GW-Edition	v2015	RDN/Generic Downloader.x!lw
MicroWorld-eScan	12.0.250.0	Trojan.GenericKD.2020510
NANO AntiVirus	0.30.10.952	Trojan.Win32.Genome.dmpfqc
Norman	7.04.04	Troj_Generic.XNZPD
nProtect	2015-04-10.01	Trojan.GenericKD.2020510
Panda Antivirus	4.6.4.2	Trj/CI.A
Qihoo-360	1.0.0.1015	Win32/Trojan.Downloader.548
Sophos	4.98.0	Mal/Generic-S
SUPERAntiSpyware	5.6.0.1032	Trojan.Agent/Gen-Clicker
Symantec	20141.2.0.56	Trojan.Gen.2
Tencent	1.0.0.1	Win32.Trojan-downloader.Genome.Oxun
Trend Micro	9.740.0.1012	TROJ_GEN.R0C1C0EA415
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C1C0EA415
Vba32 AntiVirus	3.12.26.3	TrojanDownloader.Genome
VIPRE Antivirus	39276	Trojan.Win32.Generic!BT
ViRobot	2014.3.20.0	Trojan.Win32.A.Downloader.59019[h]
Agnitum Outpost	5.5.1.3	Riskware.Agent!
Avira	3.6.1.96	ADWARE/Adware.Gen7
Malwarebytes	1.75.0.1	Trojan.Agent
AVG	15.0.0.4328	Generic6.AAWN
Comodo Security	21729	ApplicUnwnt

Software Behaviors

Services:

ijs.exe runs as a service named 'Injector Service' (InjectorService) "Injector Service".
abengine.exe runs as a service named 'abengine' (abengine) "AbEngine protects your browser".

Startup Entries

Startup tasks:

upfs7235.exe is automatically launched at startup through a scheduled task named upfs7235.
fsupd.exe is automatically launched at startup through a scheduled task named fsupdate.

Software Details

URL:

https://www.flowsurf.net

Support:

–

Installation path:

C:\Program Files\flwsrf

Uninstaller:

C:\Program Files\Flwsrf\uninstall.exe

Size:

7.00 MB

Language:

English

Flwsrf Executable Details

Primary executable:

fsupd.exe

Name:

Flwsrf

Path:

C:\Program Files\flwsrf\fsupd.exe

MD5:

2b140f9d8cd365bf8522a5118d0b06ef

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

abengine.dll

0f25ffc7fe1387ac9829b323048432db

EXE

lengine64.exe

91b74ca8e996a69280e0e9311c0e8a63

DLL

abengine64.dll

3210008cb58ebde3baca6e1c81e22dd0

DLL

abenginecert.dll

42383f6a0fbf5acbab4be3fca64765aa

EXE

abengine.exe

Malware

63514e79ed55d52a6ccad26c0321a042

EXE

ijs.exe

Malware

20cf0b2a87d2cfc94d53911d268f7414

EXE

upfs7214.exe

43390142912cf35a8cdf16adc8a3af4c

DLL

flowsurf.dll

389b137638b97f9fbfe1dc248223ac95

EXE

abenginep.exe

bb68ab6d4a28a67243259fd99758f236

EXE

abenginew.exe

30cbf178822f43514a8aeb5bf3be417c