What is TabNav?

TabNav is software application developed by FlowSurf Apps. It is most commonly found on computers running Windows 7 with nearly 52.00% of installations running this operating system. TabNav's installer is typically 12.00 MB in size and installs around 32 files. The most common release is 3.0.0.4 with 46.00% of all installations currently using this version.

TabNav is most popular in United Kingdom with 20.37% of installations residing in this country.

Multiple virus scanners have detected malware in TabNav.

setupfs_1123.exe (MD5: 369c15bae2ca70bc466fc2a53760fb1a) has been flagged by 28 scanners:

Scanner Software	Version	Result
Antiy-AVL	1.0.0.1	Trojan/Win32.SGeneric
avast!	2014.9-150413	Win32:Malware-gen
AVG	2016.0.3141	Generic6
Avira	3.6.1.96	TR/Agent.5442433
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	4.0.3.15413	Trojan.NSIS.Adload.AK
Comodo Security	21695	ApplicUnwnt
Cyren	5.4.16.7	W32/Trojan.PRUI-3556
Dr.Web	9.0.0.0103	Trojan.KillFiles.23205
ESET-NOD32	9.11444	a variant of Win32/Komodia.A potentially unsafe
IKARUS anti.virus	t3scan.1.8.9.0	PUA.FlowSurf
K7 AntiVirus	13.202.15530	Unwanted-Program
K7GW	13.202.15530	Unwanted-Program ( 004b89781 )
Kaspersky	14.0.0.2199	UDS:DangerousObject.Multi.Generic
McAfee	5600.6797	Artemis!369C15BAE2CA
McAfee-GW-Edition	7.6797	BehavesLike.Win32.Downloader.tc
NANO AntiVirus	0.30.10.952	Trojan.Win32.KillFiles.dobcbg
Norman	10.20150413	Troj_Generic.YLGRY
Qihoo-360	1.0.0.1015	HEUR/QVM42.0.Malware.Gen
Symantec	4/13/2015 rev. 2	Trojan.Gen
Trend Micro	10.465.13	TROJ_GEN.R00UC0OBD15
TrendMicro-HouseCall	7.2.103	TROJ_GEN.R00UC0OBD15
VIPRE Antivirus	39180	Trojan.Win32.Generic!BT
Bkav FE	1.3.0.7062	W32.Clod662.Trojan.1e8e
Rising Antivirus	25.0.0.17	PE:Trojan.Win32.Generic.18D0C1A5!416334245
Agnitum Outpost	5.5.1.3	Riskware.Agent!
Malwarebytes	2.1.1.1115	PUP.Optional.Winsock.HijackBoot.A
Total Defense	37.1.62.1	Heur/TrojanHorse.ZCIC!suspicious

abengine.exe (MD5: 50a84b3af5137c7eb5ef0b041865a2fc) has been flagged by 13 scanners:

Scanner Software	Version	Result
Agnitum Outpost	5.5.1.3	Riskware.Agent!
Avira	8.3.1.6	ADWARE/Komodia.1332576
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Hacktool.Win32.Komodia.A
ESET-NOD32	12100	a variant of Win32/Komodia.A potentially unsafe
K7 AntiVirus	9.209.16902	Unwanted-Program ( 004b89781 )
K7GW	9.209.16902	Unwanted-Program ( 004b89781 )
Malwarebytes	2.1.1.1115	PUP.Optional.Winsock.HijackBoot.A
McAfee	6.0.5.614	Artemis!50A84B3AF513
McAfee-GW-Edition	v2015	Artemis
Symantec	20141.2.0.56	Trojan.Gen.2
Total Defense	37.1.62.1	Heur/TrojanHorse.ZCIC!suspicious
VIPRE Antivirus	42930	Trojan.Win32.Generic!BT

zufap3002.exe (MD5: 2d30d06469ad27a869d63ecc1d4276f1) has been flagged by 20 scanners:

Scanner Software	Version	Result
avast!	8.0.1489.320	NSIS:Adware-TD [Adw]
AVware	1.5.0.21	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Adware.Win32.Agent.Elnx
Bkav FE	1.3.0.7062	W32.Clod662.Trojan.1e8e
Dr.Web	7.0.14.8060	Trojan.DownLoader13.49633
ESET-NOD32	12092	NSIS/TrojanDownloader.Adload.AK
K7 AntiVirus	9.208.16884	Riskware ( 0040eff71 )
K7GW	9.208.16886	Riskware ( 0040eff71 )
Kaspersky	15.0.1.10	UDS:DangerousObject.Multi.Generic
McAfee	6.0.5.614	Artemis!2D30D06469AD
McAfee-GW-Edition	v2015	BehavesLike.Win32.BadFile.qc
NANO AntiVirus	0.30.24.3079	Trojan.Nsis.Downloader.duuajo
Qihoo-360	1.0.0.1015	HEUR/QVM42.0.Malware.Gen
Rising Antivirus	25.0.0.17	PE:Trojan.Win32.Generic.18D0C1A5!416334245
Symantec	20141.2.0.56	Trojan.Gen.2
VIPRE Antivirus	42866	Trojan.Win32.Generic!BT
Agnitum Outpost	5.5.1.3	Riskware.Agent!
Avira	8.3.1.6	ADWARE/Komodia.1332576
Malwarebytes	2.1.1.1115	PUP.Optional.Winsock.HijackBoot.A
Total Defense	37.1.62.1	Heur/TrojanHorse.ZCIC!suspicious

Software Behaviors

Services:

isj.exe runs as a service named 'Injector Service' (InjectorService) "Injector Service".
abengine.exe runs as a service named 'abengine' (abengine) "AbEngine protects your browser".

Startup Entries

Startup tasks:

zufap3002.exe is automatically launched at startup through a scheduled task named zufap3002.

Software Details

URL:

https://www.flowsurf.net

Support:

–

Installation path:

C:\Program Files\tabnav

Uninstaller:

C:\Program Files\TabNav\uninstall.exe

Size:

12.00 MB

Language:

English

TabNav Executable Details

Primary executable:

setupfs_1123.exe

Name:

TabNav

Path:

C:\Program Files\tabnav\setupfs_1123.exe

MD5:

369c15bae2ca70bc466fc2a53760fb1a

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

abengine.exe

Malware

50a84b3af5137c7eb5ef0b041865a2fc

EXE

abenginep.exe

19c6af184335f3a00af90e735fd1c965

EXE

abenginew.exe

a0ef183228acd6ed4b118a59425daded

EXE

zufap3002.exe

Malware

2d30d06469ad27a869d63ecc1d4276f1

EXE

isj.exe

0e59eec79047565e420dc532208dbee6

EXE

ins.exe

ee8fa398ec1e6b5245feb1ef35a4e673

EXE

slite.exe

d519e59351f68ba91dc4eb33d224bd92

EXE

trik3004.exe

5c0d9ffa9814d4c195b507c0e37c6b81

EXE

arg3002.exe

46e544287bcc982fdca27c1baaef3a16

EXE

jis.exe

79d1e1a8121a09aec8a3aae6149a26ed

File Type	Filename	MD5
EXE	abengine.exe Malware	50a84b3af5137c7eb5ef0b041865a2fc
EXE	abenginep.exe	19c6af184335f3a00af90e735fd1c965
EXE	abenginew.exe	a0ef183228acd6ed4b118a59425daded
EXE	zufap3002.exe Malware	2d30d06469ad27a869d63ecc1d4276f1
EXE	isj.exe	0e59eec79047565e420dc532208dbee6
EXE	ins.exe	ee8fa398ec1e6b5245feb1ef35a4e673
EXE	slite.exe	d519e59351f68ba91dc4eb33d224bd92
EXE	trik3004.exe	5c0d9ffa9814d4c195b507c0e37c6b81
EXE	arg3002.exe	46e544287bcc982fdca27c1baaef3a16
EXE	jis.exe	79d1e1a8121a09aec8a3aae6149a26ed