Norpalla

Norpalla

Known Adware

by Yontoo Technology, Inc.

What is Norpalla?

Norpalla is software application developed by Yontoo Technology, Inc.. It is most commonly found on computers running Windows 7 with nearly 67.78% of installations running this operating system. Norpalla's installer is typically 2.00 MB in size and installs around 22 files. The most common release is 2014.07.16.160648 with 2.78% of all installations currently using this version.

Norpalla is most popular in the United States with 14.29% of installations residing in this country.

About Norpalla?

This software is an adware program, which is a customized version of the Yontoo adware browser add-on. It embeds itself into the user's web browser (Internet Explorer, Chrome, and Firefox) and displays contextual advertising on web pages not tied to Yontoo or its affiliates. The advertising appears in the form of banners, video ads, search-related ads, transitional and in-text ads, and links. Additionally, the software self-updates at regular intervals and communicates with a server for instructions, additional ad feeds, and reporting on user interaction, including the domains and web pages visited by the user.

Multiple virus scanners have detected malware in Norpalla.

updateNorpalla.exe (MD5: 7155060a02384916864e29e90dcf2e64) has been flagged by 46 scanners:
Scanner Software Result
Lavasoft Ad-Aware Adware.SwiftBrowse.CN
AhnLab-V3 PUP/Win32.BrowseFox
ALYac Adware.SwiftBrowse.CN
Antiy-AVL GrayWare[AdWare:not-a-virus]/Win32.SwiftBrowse
avast! Win32:BrowseFox-GD [PUP]
AVG Norpalla.131
Avira ADWARE/BrowseFox.aov
AVware Yontoo (fs)
Baidu-International Adware.Win32.BrowseFox.BG
Bitdefender Adware.SwiftBrowse.CN
Bkav FE W32.HfsAdware.A742
Cyren W32/S-7b6eb46a!Eldorado
Dr.Web Trojan.Yontoo.1741
Emsisoft Anti-Malware Adware.SwiftBrowse.CN (B)
ESET-NOD32 a variant of MSIL/BrowseFox.H potentially unwanted
Fortinet FortiGate Adware/SwiftBrowse
F-Prot W32/S-7b6eb46a!Eldorado
F-Secure Adware.SwiftBrowse.CN
G Data Adware.SwiftBrowse.CN
IKARUS anti.virus PUA.MSIL.BrowseFox
K7 AntiVirus Unwanted-Program ( 0040f96b1 )
K7GW Unwanted-Program ( 0040f96b1 )
Kaspersky not-a-virus:AdWare.Win32.SwiftBrowse.ci
McAfee BrowseFox-FTQ
McAfee-GW-Edition BrowseFox-FTQ
MicroWorld-eScan Adware.SwiftBrowse.CN
NANO AntiVirus Riskware.Win32.SwiftBrowse.dlmxzt
nProtect Adware.SwiftBrowse.CN
Panda Antivirus Trj/CI.A
Qihoo-360 Win32/Virus.Adware.8e4
Sophos Browse Fox
Symantec Trojan.Gen.2
Tencent Trojan.Win32.Qudamah.Gen.18
Trend Micro TROJ_GEN.F0C2C00AC15
TrendMicro-HouseCall TROJ_GEN.F0C2C00AC15
Vba32 AntiVirus AdWare.SwiftBrowse
VIPRE Antivirus Yontoo (fs)
Agnitum Outpost PUA.Agent!
Avira AntiVir APPL/BrowseFox.Gen2
CAT-QuickHeal AdWare.Agent.r5 (Not a Virus)
Comodo Security Application.Win32.Altbrowse.AK
Jiangmin Adware/Agent.izz
Kingsoft AntiVirus Win32.Troj.Agent.ah.(kcloud)
Malwarebytes PUP.Optional.Norpalla.A
SUPERAntiSpyware Adware.BrowseFox/Variant
Zillya Adware.Agent.Win32.9009
Norpalla.FirstRun.exe (MD5: 0a2560b3f7673c48e6889eccfcca186f) has been flagged by 46 scanners:
Scanner Software Result
Avira AntiVir APPL/BrowseFox.Gen
ESET-NOD32 a variant of MSIL/BrowseFox.G
Malwarebytes PUP.Optional.Sambreel.A
Lavasoft Ad-Aware Adware.SwiftBrowse.CN
Agnitum Outpost PUA.SwiftBrowse!
AhnLab-V3 Win-PUP/BrowseFox.Gen
ALYac Adware.SwiftBrowse.CN
Antiy-AVL GrayWare[AdWare:not-a-virus]/Win32.SwiftBrowse
avast! Win32:BrowseFox-GD [PUP]
AVG BrowseFox.F
Avira Adware/BrowseFox.aov
AVware Yontoo (fs)
Baidu-International Adware.Win32.BrowseFox.O
Bitdefender Adware.SwiftBrowse.CN
Bkav FE W32.HfsAdware.D309
CAT-QuickHeal AdWare.Swiftbrowse.r5 (Not a Virus)
Comodo Security Application.Win32.BrowseFox.JM
Cyren W32/S-7bed2e86!Eldorado
Dr.Web Trojan.Yontoo.1741
Emsisoft Anti-Malware Adware.SwiftBrowse.CN (B)
Fortinet FortiGate Adware/BrowseFox
F-Prot W32/S-7bed2e86!Eldorado
F-Secure Adware.SwiftBrowse.CN
G Data Adware.SwiftBrowse.CN
Jiangmin AdWare/SwiftBrowse.dj
K7 AntiVirus Trojan ( 0040f9921 )
K7GW Trojan ( 0040f9921 )
Kaspersky not-a-virus:AdWare.Win32.SwiftBrowse.ci
McAfee BrowseFox
McAfee-GW-Edition BrowseFox
MicroWorld-eScan Adware.SwiftBrowse.CN
NANO AntiVirus Trojan.Win32.Yontoo.dmjhvx
nProtect Adware.SwiftBrowse.CN
Panda Antivirus Trj/CI.A
Qihoo-360 Win32/Virus.Adware.8e4
Sophos Generic PUA NK
Symantec Yontoo.C
Tencent Trojan.Win32.Qudamah.Gen.10
Trend Micro TROJ_GEN.R0C1C0PLK14
TrendMicro-HouseCall TROJ_GEN.R0C1C0PLK14
Vba32 AntiVirus AdWare.SwiftBrowse
VIPRE Antivirus Yontoo (fs)
Zillya Adware.SwiftBrowse.Win32.4028
IKARUS anti.virus PUA.MSIL.BrowseFox
Kingsoft AntiVirus Win32.Troj.Agent.ah.(kcloud)
SUPERAntiSpyware Adware.BrowseFox/Variant
1B39D0DC-4CF8-4DAA-8414-2C1DBA836526.dll (MD5: e3acf8d690085278db6c9c82e19621cd) has been flagged by 29 scanners:
Scanner Software Result
Lavasoft Ad-Aware Gen:Variant.Adware.BHO.Agent.4
Agnitum Outpost PUA.Agent!
Avira AntiVir APPL/BrowseFox.Gen2
Antiy-AVL GrayWare[AdWare:not-a-virus]/Win32.Agent
AVG BrowseFox.F
Baidu-International Adware.Win32.BroseFox.45
Bitdefender Gen:Variant.Adware.BHO.Agent.4
CAT-QuickHeal AdWare.Agent.r5 (Not a Virus)
Comodo Security Application.Win32.Altbrowse.AK
Dr.Web Trojan.BPlug.28
Emsisoft Anti-Malware Gen:Variant.Adware.BHO.Agent.4 (B)
ESET-NOD32 a variant of Win32/BrowseFox.F
Fortinet FortiGate Adware/Agent
F-Secure Gen:Variant.Adware.BHO.Agent.4
G Data Gen:Variant.Adware.BHO.Agent.4
Jiangmin Adware/Agent.izz
Kaspersky not-a-virus:AdWare.Win32.Agent.ahbx
Kingsoft AntiVirus Win32.Troj.Agent.ah.(kcloud)
Malwarebytes PUP.Optional.Norpalla.A
McAfee Artemis!E3ACF8D69008
McAfee-GW-Edition Artemis!E3ACF8D69008
MicroWorld-eScan Gen:Variant.Adware.BHO.Agent.4
NANO AntiVirus Riskware.Win32.Agent.cuenda
Panda Antivirus Trj/CI.A
Sophos Generic PUA ML
SUPERAntiSpyware Adware.BrowseFox/Variant
TrendMicro-HouseCall TROJ_GEN.F47V0531
VIPRE Antivirus Yontoo (fs)
Zillya Adware.Agent.Win32.9009

Software Behaviors

Services:
  • updateNorpalla.exe runs as a service named 'Update Norpalla' (Update Norpalla).
  • updateNorpalla(218).exe runs as a service named 'Update Norpalla' (Update Norpalla).

Software Details

URL:
https://norpalla.com/support
Support:
https://mailto:
Installation path:
C:\Program Files\Norpalla
Uninstaller:
C:\Program Files\Norpalla\Norpallauninstall.exe
Size:
2.00 MB
Language:
English

Norpalla Executable Details

Primary executable:
Norpalla.FirstRun.exe
Name:
Norpalla
Path:
C:\Program Files\Norpalla\Norpalla.FirstRun.exe
MD5:
0a2560b3f7673c48e6889eccfcca186f
SHA-1:
–
SHA-256:
–
Files installed by Norpalla
File Type Filename MD5
EXE
7za.exe
e92604e043f51c604b6d1ac3bcd3a202
EXE
Updater.exe
c5bc3d856c77bc50fb4f06591205e1b1
EXE
dotNetFx35setup.exe
8d31becb8cb931c69008858a565afb28
DLL
D5C63841-5870-4964-9FB3-559C9D3E3414.dll
e3acf8d690085278db6c9c82e19621cd
EXE
updateNorpalla.exe
Adware
7155060a02384916864e29e90dcf2e64
EXE
NorpallaUninstall.exe
72423ab91a4ad6536f7acd80fd409dc1
EXE
NorpallaUn.exe
d037a13d9ad06a52e80a96643adafbe5
EXE
Norpalla.FirstRun.exe
Adware
0a2560b3f7673c48e6889eccfcca186f
DLL
Norpallabho.dll
e3acf8d690085278db6c9c82e19621cd
DLL
F204D805-FD27-4719-B76E-5D17991F442A.dll
e3acf8d690085278db6c9c82e19621cd