VisualBee

VisualBee

Known Toolbar

by VisualBee.com

What is VisualBee?

VisualBee is software application developed by VisualBee.com. It is most commonly found on computers running Windows 7 with nearly 68.84% of installations running this operating system. VisualBee's installer is typically 5.00 MB in size and installs around 16 files. The most common release is 1.27.153.8 with 89.13% of all installations currently using this version.

VisualBee is most popular in the United States with 56.23% of installations residing in this country.

VisualBee adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About VisualBee?

VisualBee by Visual Software Systems is a browser extension and toolbar designed to deliver contextual advertising and modify the user's web browser home and search pages in order to provide advertising and search capabilities. This software has been identified as adware and is categorized as a potentially unwanted application by multiple malware vendors. Additionally, VisualBee installs a Conduit powered toolbar and a Microsoft PowerPoint plugin. The browser extension offers the following features: - Modification of the default search engine - Modification of the default browser home page - Addition of search capabilities from the address bar - Alternative redirection for "page not found" and DNS errors - Display of contextual advertising through the injection of banner and text ads.

Multiple virus scanners have detected malware in VisualBee.

utils.exe (MD5: 3b3f088a2f570ce460508407d9c31da0) has been flagged by 17 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.Agent.peo
Bkav FE HW32.CDB
Dr.Web Adware.Plugin.73
ESET-NOD32 Win32/Packed.ScrambleWrapper.C
Fortinet FortiGate Adware/Lyckriks
Kaspersky not-a-virus:AdWare.Win32.Lyckriks
Symantec WS.Reputation
Vba32 AntiVirus AdWare.Lyckriks
K7 AntiVirus Riskware ( 0040eff71 )
K7GW Riskware ( 0040eff71 )
McAfee Artemis!5AAF66265042
McAfee-GW-Edition Artemis!5AAF66265042
TrendMicro-HouseCall TROJ_GEN.R0C9H01HA13
VIPRE Antivirus Crossrider (fs)
avast! Win32:Dropper-gen [Drp]
AVG Generic_r.GS
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
VisualBee-updater.exe (MD5: 9acacaec2cff031f6a888643e0428b8f) has been flagged by 12 scanners:
Scanner Software Result
avast! Win32:Dropper-gen [Drp]
AVG Generic_r.GS
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Fortinet FortiGate Riskware/Fam.NB
McAfee Artemis!9ACACAEC2CFF
McAfee-GW-Edition Artemis!9ACACAEC2CFF
Symantec WS.Reputation.1
TrendMicro-HouseCall TROJ_GEN.R0C9H01H913
VIPRE Antivirus Crossrider (fs)
Baidu-International HackTool.Win32.CrossRider.I
Dr.Web Trojan.Crossrider.27
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
VisualBee-firefoxinstaller.exe (MD5: 914526a4859be71c50b19a4ab1453452) has been flagged by 3 scanners:
Scanner Software Result
Symantec WS.Reputation.1
VIPRE Antivirus Crossrider (fs)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
VisualBee-enabler.exe (MD5: 35a48738493952de8fd425ff906aa0bf) has been flagged by 8 scanners:
Scanner Software Result
AVG Generic5.AJKA
Baidu-International HackTool.Win32.CrossRider.I
Dr.Web Trojan.Crossrider.27
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
VIPRE Antivirus Crossrider (fs)
TrendMicro-HouseCall TROJ_GEN.F47V0913
Symantec WS.Reputation.1
VisualBee-codedownloader.exe (MD5: 7542e0053d5880d29a8cb55d0bc58282) has been flagged by 6 scanners:
Scanner Software Result
Dr.Web Trojan.Crossrider.1
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
TrendMicro-HouseCall TROJ_GEN.F47V0913
VIPRE Antivirus Crossrider (fs)
Symantec WS.Reputation.1

Software Behaviors

Scheduled tasks:
  • VisualBee-enabler.exe is scheduled as a task named 'temp_VisualBee-enabler'.

Startup Entries

Startup tasks:
  • VisualBee-updater.exe is automatically launched at startup through a scheduled task named VisualBee-updater.
  • VisualBee-firefoxinstaller.exe is automatically launched at startup through a scheduled task named VisualBee-firefoxinstaller.
  • VisualBee-enabler.exe is automatically launched at startup through a scheduled task named VisualBee-enabler.
  • VisualBee-codedownloader.exe is automatically launched at startup through a scheduled task named VisualBee-codedownloader.
  • VisualBee-chromeinstaller.exe is automatically launched at startup through a scheduled task named VisualBee-chromeinstaller.

Software Details

URL:
https://www.visualbee.com
Support:
Installation path:
C:\Program Files\visualbee
Uninstaller:
C:\Program Files\VisualBee\Uninstall.exe /fromcontrolpanel=1
Size:
5.00 MB
Language:
English

VisualBee Executable Details

Primary executable:
utils.exe
Name:
VisualBee
Path:
C:\Program Files\visualbee\utils.exe
MD5:
3b3f088a2f570ce460508407d9c31da0
SHA-1:
SHA-256:
Files installed by VisualBee
File Type Filename MD5
EXE
cafe1ad7eefadfa2ecd1b8f131bc498c
EXE
02299ff0fcca0ff753d16a25151b842d
EXE
7f731ebf7673446e19c87dfc7896860d
DLL
835bca77dcfa26f1d68b474d81485a81
DLL
5aaf66265042f0f01e050b2ac56a4c43
EXE
c1c7909e5abd0614ec275b61555b51e1