What is TabNav?

TabNav is software application developed by FlowSurf Apps. It is most commonly found on computers running Windows 7 with nearly 52.00% of installations running this operating system. TabNav's installer is typically 12.00 MB in size and installs around 32 files. The most common release is 3.0.0.4 with 46.00% of all installations currently using this version.

TabNav is most popular in United Kingdom with 20.37% of installations residing in this country.

Multiple virus scanners have detected malware in TabNav.

setupfs_1123.exe (MD5: 369c15bae2ca70bc466fc2a53760fb1a) has been flagged by 28 scanners:

Scanner Software	Version	Result
Antiy-AVL	1.0.0.1	Trojan/Win32.SGeneric
avast!	2014.9-150413	Win32:Malware-gen
AVG	2016.0.3141	Generic6
Avira	3.6.1.96	TR/Agent.5442433
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	4.0.3.15413	Trojan.NSIS.Adload.AK
Comodo Security	21695	ApplicUnwnt
Cyren	5.4.16.7	W32/Trojan.PRUI-3556
Dr.Web	9.0.0.0103	Trojan.KillFiles.23205
ESET-NOD32	9.11444	a variant of Win32/Komodia.A potentially unsafe
IKARUS anti.virus	t3scan.1.8.9.0	PUA.FlowSurf
K7 AntiVirus	13.202.15530	Unwanted-Program
K7GW	13.202.15530	Unwanted-Program ( 004b89781 )
Kaspersky	14.0.0.2199	UDS:DangerousObject.Multi.Generic
McAfee	5600.6797	Artemis!369C15BAE2CA
McAfee-GW-Edition	7.6797	BehavesLike.Win32.Downloader.tc
NANO AntiVirus	0.30.10.952	Trojan.Win32.KillFiles.dobcbg
Norman	10.20150413	Troj_Generic.YLGRY
Qihoo-360	1.0.0.1015	HEUR/QVM42.0.Malware.Gen
Symantec	4/13/2015 rev. 2	Trojan.Gen
Trend Micro	10.465.13	TROJ_GEN.R00UC0OBD15
TrendMicro-HouseCall	7.2.103	TROJ_GEN.R00UC0OBD15
VIPRE Antivirus	39180	Trojan.Win32.Generic!BT
Bkav FE	1.3.0.7062	W32.Clod662.Trojan.1e8e
Rising Antivirus	25.0.0.17	PE:Trojan.Win32.Generic.18D0C1A5!416334245
Agnitum Outpost	5.5.1.3	Riskware.Agent!
Malwarebytes	2.1.1.1115	PUP.Optional.Winsock.HijackBoot.A
Total Defense	37.1.62.1	Heur/TrojanHorse.ZCIC!suspicious

abengine.exe (MD5: 50a84b3af5137c7eb5ef0b041865a2fc) has been flagged by 13 scanners:

Scanner Software	Version	Result
Agnitum Outpost	5.5.1.3	Riskware.Agent!
Avira	8.3.1.6	ADWARE/Komodia.1332576
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Hacktool.Win32.Komodia.A
ESET-NOD32	12100	a variant of Win32/Komodia.A potentially unsafe
K7 AntiVirus	9.209.16902	Unwanted-Program ( 004b89781 )
K7GW	9.209.16902	Unwanted-Program ( 004b89781 )
Malwarebytes	2.1.1.1115	PUP.Optional.Winsock.HijackBoot.A
McAfee	6.0.5.614	Artemis!50A84B3AF513
McAfee-GW-Edition	v2015	Artemis
Symantec	20141.2.0.56	Trojan.Gen.2
Total Defense	37.1.62.1	Heur/TrojanHorse.ZCIC!suspicious
VIPRE Antivirus	42930	Trojan.Win32.Generic!BT

zufap3002.exe (MD5: 2d30d06469ad27a869d63ecc1d4276f1) has been flagged by 20 scanners:

Scanner Software	Version	Result
avast!	8.0.1489.320	NSIS:Adware-TD [Adw]
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Adware.Win32.Agent.Elnx
Bkav FE	1.3.0.7062	W32.Clod662.Trojan.1e8e
Dr.Web	7.0.14.8060	Trojan.DownLoader13.49633
ESET-NOD32	12092	NSIS/TrojanDownloader.Adload.AK
K7 AntiVirus	9.208.16884	Riskware ( 0040eff71 )
K7GW	9.208.16886	Riskware ( 0040eff71 )
Kaspersky	15.0.1.10	UDS:DangerousObject.Multi.Generic
McAfee	6.0.5.614	Artemis!2D30D06469AD
McAfee-GW-Edition	v2015	BehavesLike.Win32.BadFile.qc
NANO AntiVirus	0.30.24.3079	Trojan.Nsis.Downloader.duuajo
Qihoo-360	1.0.0.1015	HEUR/QVM42.0.Malware.Gen
Rising Antivirus	25.0.0.17	PE:Trojan.Win32.Generic.18D0C1A5!416334245
Symantec	20141.2.0.56	Trojan.Gen.2
VIPRE Antivirus	42866	Trojan.Win32.Generic!BT
Agnitum Outpost	5.5.1.3	Riskware.Agent!
Avira	8.3.1.6	ADWARE/Komodia.1332576
Malwarebytes	2.1.1.1115	PUP.Optional.Winsock.HijackBoot.A
Total Defense	37.1.62.1	Heur/TrojanHorse.ZCIC!suspicious

Software Behaviors

Services:

isj.exe runs as a service named 'Injector Service' (InjectorService) "Injector Service".
abengine.exe runs as a service named 'abengine' (abengine) "AbEngine protects your browser".

Startup Entries

Startup tasks:

zufap3002.exe is automatically launched at startup through a scheduled task named zufap3002.

Software Details

URL:

https://www.flowsurf.net

Support:

–

Installation path:

C:\Program Files\tabnav

Uninstaller:

C:\Program Files\TabNav\uninstall.exe

Size:

12.00 MB

Language:

English

TabNav Executable Details

Primary executable:

setupfs_1123.exe

Name:

TabNav

Path:

C:\Program Files\tabnav\setupfs_1123.exe

MD5:

369c15bae2ca70bc466fc2a53760fb1a

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

uninstall.exe

bf902493ef870d40ec87b0e5ccc44061

DLL

sqlite3.dll

5cad5792bb209694db6e36baa2ca83ea

DLL

freebl3.dll

29c56a4b1fa4e5b6b57472fd9af6228a

DLL

nss3.dll

4021392fb4666886bdbaf5664cad6a16

DLL

nssckbi.dll

7f067bb9114bb068133b0bda4ac874ef

DLL

nssdbm3.dll

bbeceab72103c221635d142db6da7e49

DLL

nssutil3.dll

2015e6fdf7b229038a0c2dae5b75589f

DLL

smime3.dll

fada98407e43ab559601bb6b192e8e39

DLL

softokn3.dll

02ee52e45c47362d986d95c57dc2fed0

DLL

ssl3.dll

a6129adaffa541a972b0cf6d4dc1d766