VisualBee

VisualBee

Known Toolbar

by VisualBee.com

What is VisualBee?

VisualBee is software application developed by VisualBee.com. It is most commonly found on computers running Windows 7 with nearly 68.84% of installations running this operating system. VisualBee's installer is typically 5.00 MB in size and installs around 16 files. The most common release is 1.27.153.8 with 89.13% of all installations currently using this version.

VisualBee is most popular in the United States with 56.23% of installations residing in this country.

VisualBee adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About VisualBee?

VisualBee by Visual Software Systems is a browser extension and toolbar designed to deliver contextual advertising and modify the user's web browser home and search pages in order to provide advertising and search capabilities. This software has been identified as adware and is categorized as a potentially unwanted application by multiple malware vendors. Additionally, VisualBee installs a Conduit powered toolbar and a Microsoft PowerPoint plugin. The browser extension offers the following features: - Modification of the default search engine - Modification of the default browser home page - Addition of search capabilities from the address bar - Alternative redirection for "page not found" and DNS errors - Display of contextual advertising through the injection of banner and text ads.

Multiple virus scanners have detected malware in VisualBee.

utils.exe (MD5: 3b3f088a2f570ce460508407d9c31da0) has been flagged by 17 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.Agent.peo
Bkav FE HW32.CDB
Dr.Web Adware.Plugin.73
ESET-NOD32 Win32/Packed.ScrambleWrapper.C
Fortinet FortiGate Adware/Lyckriks
Kaspersky not-a-virus:AdWare.Win32.Lyckriks
Symantec WS.Reputation
Vba32 AntiVirus AdWare.Lyckriks
K7 AntiVirus Riskware ( 0040eff71 )
K7GW Riskware ( 0040eff71 )
McAfee Artemis!5AAF66265042
McAfee-GW-Edition Artemis!5AAF66265042
TrendMicro-HouseCall TROJ_GEN.R0C9H01HA13
VIPRE Antivirus Crossrider (fs)
avast! Win32:Dropper-gen [Drp]
AVG Generic_r.GS
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
VisualBee-updater.exe (MD5: 9acacaec2cff031f6a888643e0428b8f) has been flagged by 12 scanners:
Scanner Software Result
avast! Win32:Dropper-gen [Drp]
AVG Generic_r.GS
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Fortinet FortiGate Riskware/Fam.NB
McAfee Artemis!9ACACAEC2CFF
McAfee-GW-Edition Artemis!9ACACAEC2CFF
Symantec WS.Reputation.1
TrendMicro-HouseCall TROJ_GEN.R0C9H01H913
VIPRE Antivirus Crossrider (fs)
Baidu-International HackTool.Win32.CrossRider.I
Dr.Web Trojan.Crossrider.27
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
VisualBee-firefoxinstaller.exe (MD5: 914526a4859be71c50b19a4ab1453452) has been flagged by 3 scanners:
Scanner Software Result
Symantec WS.Reputation.1
VIPRE Antivirus Crossrider (fs)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
VisualBee-enabler.exe (MD5: 35a48738493952de8fd425ff906aa0bf) has been flagged by 8 scanners:
Scanner Software Result
AVG Generic5.AJKA
Baidu-International HackTool.Win32.CrossRider.I
Dr.Web Trojan.Crossrider.27
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
VIPRE Antivirus Crossrider (fs)
TrendMicro-HouseCall TROJ_GEN.F47V0913
Symantec WS.Reputation.1
VisualBee-codedownloader.exe (MD5: 7542e0053d5880d29a8cb55d0bc58282) has been flagged by 6 scanners:
Scanner Software Result
Dr.Web Trojan.Crossrider.1
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
TrendMicro-HouseCall TROJ_GEN.F47V0913
VIPRE Antivirus Crossrider (fs)
Symantec WS.Reputation.1

Software Behaviors

Scheduled tasks:
  • VisualBee-enabler.exe is scheduled as a task named 'temp_VisualBee-enabler'.

Startup Entries

Startup tasks:
  • VisualBee-updater.exe is automatically launched at startup through a scheduled task named VisualBee-updater.
  • VisualBee-firefoxinstaller.exe is automatically launched at startup through a scheduled task named VisualBee-firefoxinstaller.
  • VisualBee-enabler.exe is automatically launched at startup through a scheduled task named VisualBee-enabler.
  • VisualBee-codedownloader.exe is automatically launched at startup through a scheduled task named VisualBee-codedownloader.
  • VisualBee-chromeinstaller.exe is automatically launched at startup through a scheduled task named VisualBee-chromeinstaller.

Software Details

URL:
https://www.visualbee.com
Support:
Installation path:
C:\Program Files\visualbee
Uninstaller:
C:\Program Files\VisualBee\Uninstall.exe /fromcontrolpanel=1
Size:
5.00 MB
Language:
English

VisualBee Executable Details

Primary executable:
utils.exe
Name:
VisualBee
Path:
C:\Program Files\visualbee\utils.exe
MD5:
3b3f088a2f570ce460508407d9c31da0
SHA-1:
SHA-256:
Files installed by VisualBee
File Type Filename MD5
EXE
33e3ef1a5975895e6c462140244d774c
EXE
utils.exe
Malware
3b3f088a2f570ce460508407d9c31da0
EXE
ea54999bdcf7646a7c10c3a7c2d70c2e
EXE
c22c38f319dd69aa8430c153fbb3057f
DLL
6f8231c192c48b83c0946f1a28ec4c98
DLL
028ce376da4a8f8b2f1ce6db06e1bc84
EXE
9acacaec2cff031f6a888643e0428b8f
EXE
914526a4859be71c50b19a4ab1453452
EXE
35a48738493952de8fd425ff906aa0bf
EXE
7542e0053d5880d29a8cb55d0bc58282