What is TabNav?

TabNav is software application developed by FlowSurf Apps. It is most commonly found on computers running Windows 7 with nearly 52.00% of installations running this operating system. TabNav's installer is typically 12.00 MB in size and installs around 32 files. The most common release is 3.0.0.4 with 46.00% of all installations currently using this version.

TabNav is most popular in United Kingdom with 20.37% of installations residing in this country.

Multiple virus scanners have detected malware in TabNav.

setupfs_1123.exe (MD5: 369c15bae2ca70bc466fc2a53760fb1a) has been flagged by 28 scanners:

Scanner Software	Version	Result
Antiy-AVL	1.0.0.1	Trojan/Win32.SGeneric
avast!	2014.9-150413	Win32:Malware-gen
AVG	2016.0.3141	Generic6
Avira	3.6.1.96	TR/Agent.5442433
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	4.0.3.15413	Trojan.NSIS.Adload.AK
Comodo Security	21695	ApplicUnwnt
Cyren	5.4.16.7	W32/Trojan.PRUI-3556
Dr.Web	9.0.0.0103	Trojan.KillFiles.23205
ESET-NOD32	9.11444	a variant of Win32/Komodia.A potentially unsafe
IKARUS anti.virus	t3scan.1.8.9.0	PUA.FlowSurf
K7 AntiVirus	13.202.15530	Unwanted-Program
K7GW	13.202.15530	Unwanted-Program ( 004b89781 )
Kaspersky	14.0.0.2199	UDS:DangerousObject.Multi.Generic
McAfee	5600.6797	Artemis!369C15BAE2CA
McAfee-GW-Edition	7.6797	BehavesLike.Win32.Downloader.tc
NANO AntiVirus	0.30.10.952	Trojan.Win32.KillFiles.dobcbg
Norman	10.20150413	Troj_Generic.YLGRY
Qihoo-360	1.0.0.1015	HEUR/QVM42.0.Malware.Gen
Symantec	4/13/2015 rev. 2	Trojan.Gen
Trend Micro	10.465.13	TROJ_GEN.R00UC0OBD15
TrendMicro-HouseCall	7.2.103	TROJ_GEN.R00UC0OBD15
VIPRE Antivirus	39180	Trojan.Win32.Generic!BT
Bkav FE	1.3.0.7062	W32.Clod662.Trojan.1e8e
Rising Antivirus	25.0.0.17	PE:Trojan.Win32.Generic.18D0C1A5!416334245
Agnitum Outpost	5.5.1.3	Riskware.Agent!
Malwarebytes	2.1.1.1115	PUP.Optional.Winsock.HijackBoot.A
Total Defense	37.1.62.1	Heur/TrojanHorse.ZCIC!suspicious

abengine.exe (MD5: 50a84b3af5137c7eb5ef0b041865a2fc) has been flagged by 13 scanners:

Scanner Software	Version	Result
Agnitum Outpost	5.5.1.3	Riskware.Agent!
Avira	8.3.1.6	ADWARE/Komodia.1332576
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Hacktool.Win32.Komodia.A
ESET-NOD32	12100	a variant of Win32/Komodia.A potentially unsafe
K7 AntiVirus	9.209.16902	Unwanted-Program ( 004b89781 )
K7GW	9.209.16902	Unwanted-Program ( 004b89781 )
Malwarebytes	2.1.1.1115	PUP.Optional.Winsock.HijackBoot.A
McAfee	6.0.5.614	Artemis!50A84B3AF513
McAfee-GW-Edition	v2015	Artemis
Symantec	20141.2.0.56	Trojan.Gen.2
Total Defense	37.1.62.1	Heur/TrojanHorse.ZCIC!suspicious
VIPRE Antivirus	42930	Trojan.Win32.Generic!BT

zufap3002.exe (MD5: 2d30d06469ad27a869d63ecc1d4276f1) has been flagged by 20 scanners:

Scanner Software	Version	Result
avast!	8.0.1489.320	NSIS:Adware-TD [Adw]
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Adware.Win32.Agent.Elnx
Bkav FE	1.3.0.7062	W32.Clod662.Trojan.1e8e
Dr.Web	7.0.14.8060	Trojan.DownLoader13.49633
ESET-NOD32	12092	NSIS/TrojanDownloader.Adload.AK
K7 AntiVirus	9.208.16884	Riskware ( 0040eff71 )
K7GW	9.208.16886	Riskware ( 0040eff71 )
Kaspersky	15.0.1.10	UDS:DangerousObject.Multi.Generic
McAfee	6.0.5.614	Artemis!2D30D06469AD
McAfee-GW-Edition	v2015	BehavesLike.Win32.BadFile.qc
NANO AntiVirus	0.30.24.3079	Trojan.Nsis.Downloader.duuajo
Qihoo-360	1.0.0.1015	HEUR/QVM42.0.Malware.Gen
Rising Antivirus	25.0.0.17	PE:Trojan.Win32.Generic.18D0C1A5!416334245
Symantec	20141.2.0.56	Trojan.Gen.2
VIPRE Antivirus	42866	Trojan.Win32.Generic!BT
Agnitum Outpost	5.5.1.3	Riskware.Agent!
Avira	8.3.1.6	ADWARE/Komodia.1332576
Malwarebytes	2.1.1.1115	PUP.Optional.Winsock.HijackBoot.A
Total Defense	37.1.62.1	Heur/TrojanHorse.ZCIC!suspicious

Software Behaviors

Services:

isj.exe runs as a service named 'Injector Service' (InjectorService) "Injector Service".
abengine.exe runs as a service named 'abengine' (abengine) "AbEngine protects your browser".

Startup Entries

Startup tasks:

zufap3002.exe is automatically launched at startup through a scheduled task named zufap3002.

Software Details

URL:

https://www.flowsurf.net

Support:

–

Installation path:

C:\Program Files\tabnav

Uninstaller:

C:\Program Files\TabNav\uninstall.exe

Size:

12.00 MB

Language:

English

TabNav Executable Details

Primary executable:

setupfs_1123.exe

Name:

TabNav

Path:

C:\Program Files\tabnav\setupfs_1123.exe

MD5:

369c15bae2ca70bc466fc2a53760fb1a

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

DLL

libnspr4.dll

b564b3411abf0de22b7f78fed2419976

DLL

libplc4.dll

ed169d3aaca62289c114059592e622f0

DLL

libplds4.dll

6aa03ef0d1b84a5487b380b7e7b25bd6

EXE

setupfs_1123.exe

Malware

369c15bae2ca70bc466fc2a53760fb1a

EXE

lengine.exe

bf7b49d80943142b97617e515338dfca

DLL

abenginewd.dll

84f6bc0a8ced1bef868b49bc4de41932

DLL

abengine.dll

f51a055086613dd1989377ce29327c73

EXE

lengine64.exe

2b4924a9e670695df2d42406fd28d952

DLL

abengine64.dll

f3e7ee29bba09026e4b23a6502ac7dfd

DLL

abenginecert.dll

f83a51a185f00988411d1694789fab96