What is BrowseToSave?

BrowseToSave is software application developed by BetterSoft. It is most commonly found on computers running Windows 7 with nearly 63.64% of installations running this operating system. BrowseToSave's installer is typically 1.00 MB in size and installs around 33 files. The most common release is 1.66 with 51.19% of all installations currently using this version.

BrowseToSave is most popular in the United States with 35.57% of installations residing in this country.

BrowseToSave adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About BrowseToSave?

BrowseToSave, developed by BetterSoft, is a web browser plugin that functions as adware. This software is designed to monitor the browsing and search activities of users and then deliver targeted advertisements by modifying the HTML content within the web browser. Additionally, BrowseToSave includes a background service, which is executed as a Windows scheduled task, to ensure the continuous operation of the web browser plugin and to handle automatic software updates. The plugin operates differently depending on the web browser, functioning as a browser helper object (BHO) for Internet Explorer. It is important to note that various antivirus programs identify this software as malware, categorizing it under the name PUP/Win32.BetterSoft. Furthermore, BrowseToSave has been found to be bundled with PerformerSoft PcPerformer in multiple instances.

Multiple virus scanners have detected malware in BrowseToSave.

uninstall.exe (MD5: 5cad4c7916d7e47dbdf05fc4a853e275) has been flagged by 4 scanners:

Scanner Software	Version	Result
ESET-NOD32	8944	a variant of Win32/SProtector.B
Kingsoft AntiVirus	2013.4.9.267	Win32.Hack.Huigezi.sd.(kcloud)
Rising Antivirus	24.84.06.04	Trojan.Win32.Generic.14BDB127
Vba32 AntiVirus	3.12.24.3	Backdoor.Hupigon

sprotector.dll (MD5: 413e76d3534b8bd2256d9816f8d1f5fb) has been flagged by 8 scanners:

Scanner Software	Version	Result
avast!	2014.9-130526	Win32:SProtector-B [PUP]
AVG	2014.0.3449	Sprotect.B
Dr.Web	9.0.0.0146	Adware.BGuard.11
Emsisoft Anti-Malware	8.13.05.26.01	Trojan.Win32.SProtector.AMN
ESET-NOD32	7.8360	a variant of Win32/SProtector.A
Kingsoft AntiVirus	2013.4.9.267	Win32.Hack.Huigezi.sd.(kcloud)
Rising Antivirus	24.84.06.04	Trojan.Win32.Generic.14BDB127
Vba32 AntiVirus	3.12.24.3	Backdoor.Hupigon

882918179.dll (MD5: c2f772d5eb7fc69d24361c2c0ebc6eb5) has been flagged by 22 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Adware.BHO.Agent.E
AhnLab-V3	2013.12.03.00	PUP/Win32.BetterSoft
Avira AntiVir	7.11.117.76	Adware/BetterSoft.A
avast!	8.0.1489.320	Win32:PUP-gen [PUP]
AVG	13.0.0.3169	Generic5.AEKX
Bitdefender	7.2.5028.0	Adware.BHO.Agent.E
Comodo Security	17373	ApplicUnwnt
Emsisoft Anti-Malware	3.0.0.589	Adware.BHO.Agent.E (B)
ESET-NOD32	9122	Win32/GenUpdater
Fortinet FortiGate	5.1.147.0	Riskware/BetterSoftAgent
F-Secure	11.0.19100.45	Adware.BHO.Agent
G Data	22	Adware.BHO.Agent.E
Kingsoft AntiVirus	2013.4.9.267	Win32.Heur.KVMF58.hy.(kcloud)
McAfee	5.600.0.1067	Generic PUP.t
McAfee-GW-Edition	2013	Generic PUP.t
MicroWorld-eScan	12.0.250.0	Adware.BHO.Agent.E
NANO AntiVirus	0.28.0.56582	Riskware.Win32.Unwanted.cjedov
Sophos	4.95.0	Generic PUA DO
Trend Micro	9.740.0.1012	ADW_BHO
TrendMicro-HouseCall	9.700.0.1001	ADW_BHO
VIPRE Antivirus	23944	Trojan.Win32.Generic!BT
ViRobot	2011.4.7.4223	Adware.Agent.187904

BrowseToSave.exe (MD5: 2960400094498dae47b36173286d76a0) has been flagged by 25 scanners:

Scanner Software	Version	Result
AhnLab-V3	2013.05.25	PUP/Win32.BetterSoft
avast!	2014.9-130526	Win32:PUP-gen [PUP]
Bitdefender	1.0.20.730	Adware.BHO.Agent.E
Comodo Security	16313	ApplicUnwnt
Emsisoft Anti-Malware	8.13.05.26.01	Adware.BHO.Agent
eSafe	7.0.17.0	Win32.Trojan
ESET-NOD32	7.8371	Win32/GenUpdater
Fortinet FortiGate	5/26/2013	Riskware/BetterSoftAgent
F-Secure	11.2013-26-05_1	Adware.BHO.Agent
G Data	13.5.22	Adware.BHO.Agent
IKARUS anti.virus	t3scan.2.0.0.0	AdWare.BHO.Agent
Kingsoft AntiVirus	331020.49267	Win32.Troj.FakeIcon.cw.(kcloud)
McAfee	5600.7087	Artemis!296040009449
McAfee-GW-Edition	7.7087	Artemis!296040009449
MicroWorld-eScan	14.0.0.438	Adware.BHO.Agent.E
nProtect	13.05.24.04	Adware.BHO.Agent.E
Sophos	4.89	Generic PUA DO
Trend Micro	10.465.26	ADW_DLOAD
TrendMicro-HouseCall	7.2.146	ADW_DLOAD
VIPRE Antivirus	18076	Trojan.Win32.Generic!BT
ViRobot	2011.4.7.4223	Adware.BetterSoft.348160
Lavasoft Ad-Aware	12.0.163.0	Adware.BHO.Agent.E
Avira AntiVir	7.11.117.76	Adware/BetterSoft.A
AVG	13.0.0.3169	Generic5.AEKX
NANO AntiVirus	0.28.0.56582	Riskware.Win32.Unwanted.cjedov

Software Behaviors

Scheduled tasks:

BrowseToSave.exe is scheduled as a task with the class '{F217A514-13D3-4DE6-BDBF-857602A446FB}'.

Startup Entries

Startup tasks:

BrowseToSave.exe is automatically launched at startup through a scheduled task with the class {13C28C3D-4A61-46CF-8B61-EFE8189D9171}.

Software Details

URL:

https://www.bettersoft.com

Support:

–

Installation path:

C:\ProgramData\BetterSoft\BrowseToSave

Uninstaller:

C:\Program Files2\INSTAL~1\BROWSE~1\Setup.exe /remove /q0

Size:

1.00 MB

Language:

English

BrowseToSave Executable Details

Primary executable:

BrowseToSave.exe

Name:

BrowseToSave

Path:

C:\ProgramData\BetterSoft\BrowseToSave\BrowseToSave.exe

MD5:

2960400094498dae47b36173286d76a0

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

jre-7u13-windows-i586-iftw.exe

f655170eb3dc3cbb3f564077c670a7e1

DLL

sprotector.dll

Malware

413e76d3534b8bd2256d9816f8d1f5fb

EXE

UNINST~1.EXE

e2ddf0c517a4547d39d25ce4ec8c5536

DLL

stubhelper.dll

7ec6c8e88becd3c40ae35aad1df6eb0a

EXE

SecuExp.exe

0e082ddb4f4153021b656dd1ab854459

EXE

PIPInstaller_PTV_.exe

a36a308ad8273ab36edb9fea9b5869cc

EXE

KMP_3.6.0.87.exe

8e41b4a4e974f5e866b1c6aa38ac89b1

EXE

KMP_3.5.0.77.exe

76b6f30a98fcb2b32a9c47e30db7645a

EXE

KMP_3.4.0.59.exe

4455d87ebf478447c787f673f79f05c7

EXE

KMP_3.3.0.33.exe

f34f85065f9df548639cdb128e8a4e58

File Type	Filename	MD5
EXE	jre-7u13-windows-i586-iftw.exe	f655170eb3dc3cbb3f564077c670a7e1
DLL	sprotector.dll Malware	413e76d3534b8bd2256d9816f8d1f5fb
EXE	UNINST~1.EXE	e2ddf0c517a4547d39d25ce4ec8c5536
DLL	stubhelper.dll	7ec6c8e88becd3c40ae35aad1df6eb0a
EXE	SecuExp.exe	0e082ddb4f4153021b656dd1ab854459
EXE	PIPInstaller_PTV_.exe	a36a308ad8273ab36edb9fea9b5869cc
EXE	KMP_3.6.0.87.exe	8e41b4a4e974f5e866b1c6aa38ac89b1
EXE	KMP_3.5.0.77.exe	76b6f30a98fcb2b32a9c47e30db7645a
EXE	KMP_3.4.0.59.exe	4455d87ebf478447c787f673f79f05c7
EXE	KMP_3.3.0.33.exe	f34f85065f9df548639cdb128e8a4e58