What is BrowseToSave?

BrowseToSave is software application developed by BetterSoft. It is most commonly found on computers running Windows 7 with nearly 63.64% of installations running this operating system. BrowseToSave's installer is typically 1.00 MB in size and installs around 33 files. The most common release is 1.66 with 51.19% of all installations currently using this version.

BrowseToSave is most popular in the United States with 35.57% of installations residing in this country.

BrowseToSave adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About BrowseToSave?

BrowseToSave, developed by BetterSoft, is a web browser plugin that functions as adware. This software is designed to monitor the browsing and search activities of users and then deliver targeted advertisements by modifying the HTML content within the web browser. Additionally, BrowseToSave includes a background service, which is executed as a Windows scheduled task, to ensure the continuous operation of the web browser plugin and to handle automatic software updates. The plugin operates differently depending on the web browser, functioning as a browser helper object (BHO) for Internet Explorer. It is important to note that various antivirus programs identify this software as malware, categorizing it under the name PUP/Win32.BetterSoft. Furthermore, BrowseToSave has been found to be bundled with PerformerSoft PcPerformer in multiple instances.

Multiple virus scanners have detected malware in BrowseToSave.

uninstall.exe (MD5: 5cad4c7916d7e47dbdf05fc4a853e275) has been flagged by 4 scanners:

Scanner Software	Version	Result
ESET-NOD32	8944	a variant of Win32/SProtector.B
Kingsoft AntiVirus	2013.4.9.267	Win32.Hack.Huigezi.sd.(kcloud)
Rising Antivirus	24.84.06.04	Trojan.Win32.Generic.14BDB127
Vba32 AntiVirus	3.12.24.3	Backdoor.Hupigon

sprotector.dll (MD5: 413e76d3534b8bd2256d9816f8d1f5fb) has been flagged by 8 scanners:

Scanner Software	Version	Result
avast!	2014.9-130526	Win32:SProtector-B [PUP]
AVG	2014.0.3449	Sprotect.B
Dr.Web	9.0.0.0146	Adware.BGuard.11
Emsisoft Anti-Malware	8.13.05.26.01	Trojan.Win32.SProtector.AMN
ESET-NOD32	7.8360	a variant of Win32/SProtector.A
Kingsoft AntiVirus	2013.4.9.267	Win32.Hack.Huigezi.sd.(kcloud)
Rising Antivirus	24.84.06.04	Trojan.Win32.Generic.14BDB127
Vba32 AntiVirus	3.12.24.3	Backdoor.Hupigon

882918179.dll (MD5: c2f772d5eb7fc69d24361c2c0ebc6eb5) has been flagged by 22 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Adware.BHO.Agent.E
AhnLab-V3	2013.12.03.00	PUP/Win32.BetterSoft
Avira AntiVir	7.11.117.76	Adware/BetterSoft.A
avast!	8.0.1489.320	Win32:PUP-gen [PUP]
AVG	13.0.0.3169	Generic5.AEKX
Bitdefender	7.2.5028.0	Adware.BHO.Agent.E
Comodo Security	17373	ApplicUnwnt
Emsisoft Anti-Malware	3.0.0.589	Adware.BHO.Agent.E (B)
ESET-NOD32	9122	Win32/GenUpdater
Fortinet FortiGate	5.1.147.0	Riskware/BetterSoftAgent
F-Secure	11.0.19100.45	Adware.BHO.Agent
G Data	22	Adware.BHO.Agent.E
Kingsoft AntiVirus	2013.4.9.267	Win32.Heur.KVMF58.hy.(kcloud)
McAfee	5.600.0.1067	Generic PUP.t
McAfee-GW-Edition	2013	Generic PUP.t
MicroWorld-eScan	12.0.250.0	Adware.BHO.Agent.E
NANO AntiVirus	0.28.0.56582	Riskware.Win32.Unwanted.cjedov
Sophos	4.95.0	Generic PUA DO
Trend Micro	9.740.0.1012	ADW_BHO
TrendMicro-HouseCall	9.700.0.1001	ADW_BHO
VIPRE Antivirus	23944	Trojan.Win32.Generic!BT
ViRobot	2011.4.7.4223	Adware.Agent.187904

BrowseToSave.exe (MD5: 2960400094498dae47b36173286d76a0) has been flagged by 25 scanners:

Scanner Software	Version	Result
AhnLab-V3	2013.05.25	PUP/Win32.BetterSoft
avast!	2014.9-130526	Win32:PUP-gen [PUP]
Bitdefender	1.0.20.730	Adware.BHO.Agent.E
Comodo Security	16313	ApplicUnwnt
Emsisoft Anti-Malware	8.13.05.26.01	Adware.BHO.Agent
eSafe	7.0.17.0	Win32.Trojan
ESET-NOD32	7.8371	Win32/GenUpdater
Fortinet FortiGate	5/26/2013	Riskware/BetterSoftAgent
F-Secure	11.2013-26-05_1	Adware.BHO.Agent
G Data	13.5.22	Adware.BHO.Agent
IKARUS anti.virus	t3scan.2.0.0.0	AdWare.BHO.Agent
Kingsoft AntiVirus	331020.49267	Win32.Troj.FakeIcon.cw.(kcloud)
McAfee	5600.7087	Artemis!296040009449
McAfee-GW-Edition	7.7087	Artemis!296040009449
MicroWorld-eScan	14.0.0.438	Adware.BHO.Agent.E
nProtect	13.05.24.04	Adware.BHO.Agent.E
Sophos	4.89	Generic PUA DO
Trend Micro	10.465.26	ADW_DLOAD
TrendMicro-HouseCall	7.2.146	ADW_DLOAD
VIPRE Antivirus	18076	Trojan.Win32.Generic!BT
ViRobot	2011.4.7.4223	Adware.BetterSoft.348160
Lavasoft Ad-Aware	12.0.163.0	Adware.BHO.Agent.E
Avira AntiVir	7.11.117.76	Adware/BetterSoft.A
AVG	13.0.0.3169	Generic5.AEKX
NANO AntiVirus	0.28.0.56582	Riskware.Win32.Unwanted.cjedov

Software Behaviors

Scheduled tasks:

BrowseToSave.exe is scheduled as a task with the class '{F217A514-13D3-4DE6-BDBF-857602A446FB}'.

Startup Entries

Startup tasks:

BrowseToSave.exe is automatically launched at startup through a scheduled task with the class {13C28C3D-4A61-46CF-8B61-EFE8189D9171}.

Software Details

URL:

https://www.bettersoft.com

Support:

–

Installation path:

C:\ProgramData\BetterSoft\BrowseToSave

Uninstaller:

C:\Program Files2\INSTAL~1\BROWSE~1\Setup.exe /remove /q0

Size:

1.00 MB

Language:

English

BrowseToSave Executable Details

Primary executable:

BrowseToSave.exe

Name:

BrowseToSave

Path:

C:\ProgramData\BetterSoft\BrowseToSave\BrowseToSave.exe

MD5:

2960400094498dae47b36173286d76a0

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

uninstall.exe

Malware

5cad4c7916d7e47dbdf05fc4a853e275

EXE

Setup.exe

8c5c6df2de4566cf4eb29ac1e245b39d

EXE

jre-7u9-windows-i586-iftw.exe

ec3a1a84a0a407fe3985ed6f9a0cc436

DLL

HTMLayout.dll

f6278b5a16f830885b184d5f72e1b935

DLL

drm_dialogs.dll

1f0b1c1a4a43cea40c65ea1cf90275a5

DLL

drm_dyndata_7380014.dll

3e9b2a232e90fa98dfe3f0866e201883

EXE

jre-7u11-windows-i586-iftw.exe

f88c296a9109cf540eedef41e8a46e09

EXE

jre-7u21-windows-i586-iftw.exe

6c137d2bef3cdd43f3ae2fd6705b9fed

EXE

jre-7u17-windows-i586-iftw.exe

a620a735458e04ae0cf471319b6d6e7d

EXE

jre-7u7-windows-i586-iftw.exe

8ec2a656042bff1243c09ffd33f25496

File Type	Filename	MD5
EXE	uninstall.exe Malware	5cad4c7916d7e47dbdf05fc4a853e275
EXE	Setup.exe	8c5c6df2de4566cf4eb29ac1e245b39d
EXE	jre-7u9-windows-i586-iftw.exe	ec3a1a84a0a407fe3985ed6f9a0cc436
DLL	HTMLayout.dll	f6278b5a16f830885b184d5f72e1b935
DLL	drm_dialogs.dll	1f0b1c1a4a43cea40c65ea1cf90275a5
DLL	drm_dyndata_7380014.dll	3e9b2a232e90fa98dfe3f0866e201883
EXE	jre-7u11-windows-i586-iftw.exe	f88c296a9109cf540eedef41e8a46e09
EXE	jre-7u21-windows-i586-iftw.exe	6c137d2bef3cdd43f3ae2fd6705b9fed
EXE	jre-7u17-windows-i586-iftw.exe	a620a735458e04ae0cf471319b6d6e7d
EXE	jre-7u7-windows-i586-iftw.exe	8ec2a656042bff1243c09ffd33f25496