Rock Turner
Known Adware
What is Rock Turner?
Rock Turner is software application developed by Yontoo Technology, Inc.. It is most commonly found on computers running Windows 7 with nearly 56.95% of installations running this operating system. Rock Turner's installer is typically 2.00 MB in size and installs around 11 files. The most common release is 2014.05.30.082649 with 11.26% of all installations currently using this version.
Rock Turner is most popular in the United States with 26.38% of installations residing in this country.
About Rock Turner?
The software is a browser plugin designed to deliver a variety of ad formats to the user's web browser. These ads include search-related ads, banners, video ads, text-links, and pop-up/pop-under advertisements. Typically, the ads are injected in the header or footer area of the web page.
Multiple virus scanners have detected malware in Rock Turner.
updateRockTurner.exe (MD5: 8263c33e41ad22c773e84f9880d283cb) has been flagged by 30 scanners:
| Scanner Software | Version | Result |
|---|---|---|
| Lavasoft Ad-Aware | 12.0.163.0 | Adware.Agent.OKL |
| AhnLab-V3 | 2014.11.07.05 | PUP/Win32.SwiftBrowse |
| Antiy-AVL | 1.0.0.1 | GrayWare[AdWare:not-a-virus,HEUR]/MSIL.Kranet |
| AVG | 15.0.0.4189 | Rocktur.F12 |
| Avira | 7.11.183.152 | ADWARE/BrowseFox.Gen7 |
| AVware | 1.5.0.21 | Trojan.Win32.Generic!BT |
| Baidu-International | 3.5.1.41473 | Adware.Win32.BrowseFox.bI |
| Bitdefender | 7.2 | Adware.Agent.OKL |
| CAT-QuickHeal | 14.00 | AdWare.MSIL.r3 (Not a Virus) |
| Comodo Security | 20013 | UnclassifiedMalware |
| Dr.Web | 7.0.10.8210 | Trojan.BPlug.250 |
| Emsisoft Anti-Malware | 3.0.0.600 | Adware.Agent.OKL (B) |
| ESET-NOD32 | 10685 | a variant of Win32/BrowseFox.H |
| Fortinet FortiGate | 5.0.999.0 | Adware/Kranet |
| F-Secure | 11.0.19100.45 | Adware.Agent.OKL |
| G Data | 24 | Adware.Agent.OKL |
| K7 AntiVirus | 9.185.13930 | Trojan ( 0049f7ad1 ) |
| K7GW | 9.185.13936 | Trojan ( 020000001 ) |
| Kaspersky | 12.0.0.1225 | not-a-virus:HEUR:AdWare.MSIL.Kranet.heur |
| Kingsoft AntiVirus | 2013.4.9.267 | Win32.Troj.Generic.a.(kcloud) |
| Malwarebytes | 1.75.0.1 | PUP.Optional.RockTurner.A |
| McAfee | 6.0.5.614 | BrowseFox.c |
| McAfee-GW-Edition | v2014.2 | BrowseFox.c |
| MicroWorld-eScan | 12.0.250.0 | Adware.Agent.OKL |
| nProtect | 2014-11-06.01 | Adware.Agent.OKL |
| Qihoo-360 | 1.0.0.1015 | Win32/Virus.Adware.e4c |
| Symantec | 20141.1.0.330 | Trojan.ADH.2 |
| Trend Micro | 9.740.0.1012 | TROJ_GEN.R0C1C0EJE14 |
| TrendMicro-HouseCall | 9.700.0.1001 | TROJ_GEN.R0C1C0EJE14 |
| VIPRE Antivirus | 34586 | Trojan.Win32.Generic!BT |
RockTurnerBHO.dll (MD5: b0121425ce69350e099d8b24a9f7f059) has been flagged by 43 scanners:
| Scanner Software | Version | Result |
|---|---|---|
| Lavasoft Ad-Aware | 663 | Adware.BrowseFox.AU |
| Agnitum Outpost | 7.1.1 | Riskware.Agent |
| AhnLab-V3 | 2015.04.05 | Win-PUP/BrowseFox.Gen |
| ALYac | 1.0.1.4 | Adware.BrowseFox.AU |
| Antiy-AVL | 1.0.0.1 | Trojan/Win32.TSGeneric |
| avast! | 2014.9-150413 | Win32:BrowseFox-EW [PUP] |
| AVG | 2016.0.3141 | BrowseFox.F |
| AVware | 1.5.0.21 | Yontoo (fs) |
| Baidu-International | 4.0.3.15413 | Adware.Win32.BrowseFox.bI |
| Bitdefender | 1.0.20.515 | Adware.BrowseFox.AU |
| Bkav FE | 1.3.0.6379 | W32.HfsAdware |
| Comodo Security | 21647 | Application.Win32.BrowseFox.JM |
| Cyren | 5.4.16.7 | W32/S-5aefa7b7!Eldorado |
| Dr.Web | 9.0.0.0103 | Trojan.Yontoo.1734 |
| Emsisoft Anti-Malware | 8.15.04.13.07 | Adware.BrowseFox.AU |
| ESET-NOD32 | 9.11424 | a variant of Win32/BrowseFox.O potentially unwanted |
| Fortinet FortiGate | 4/13/2015 | Riskware/BrowseFox |
| F-Prot | v6.4.7.1.166 | W32/S-5aefa7b7 |
| F-Secure | 11.2015-13-04_2 | Adware.BrowseFox.AU |
| G Data | 15.4.25 | Adware.BrowseFox.AU |
| Jiangmin | KV150413 | AdWare/Kranet.ao |
| K7 AntiVirus | 13.202.15486 | Trojan |
| K7GW | 13.202.15485 | Trojan ( 0040f9921 ) |
| Kingsoft AntiVirus | 331020.49267 | Win32.Troj.Generic.a.(kcloud) |
| Malwarebytes | v2015.04.13.07 | PUP.Optional.RockTurner.A |
| McAfee | 5600.6797 | BrowseFox-FRR |
| McAfee-GW-Edition | 7.6797 | BrowseFox-FRR |
| MicroWorld-eScan | 16.0.0.309 | Adware.BrowseFox.AU |
| NANO AntiVirus | 0.30.8.659 | Trojan.Win32.BPlug.dedpsr |
| nProtect | 15.04.03.01 | Adware.BrowseFox.AU |
| Panda Antivirus | 15.04.13.07 | Trj/CI.A |
| Qihoo-360 | 1.0.0.1015 | HEUR/QVM30.1.Malware.Gen |
| Sophos | 4.98 | Generic PUA AJ |
| SUPERAntiSpyware | 9938 | PUP.BrowseFox/Variant |
| Symantec | 4/13/2015 rev. 2 | Trojan.Gen |
| Tencent | 1.0.0.1 | Trojan.Win32.Qudamah.Gen.10 |
| Trend Micro | 10.465.13 | TROJ_GEN.R047C0EKO14 |
| TrendMicro-HouseCall | 7.2.103 | TROJ_GEN.R047C0EKO14 |
| Vba32 AntiVirus | 3.12.26.3 | AdWare.Kranet |
| VIPRE Antivirus | 39052 | Yontoo (fs) |
| Avira | 7.11.183.152 | ADWARE/BrowseFox.Gen7 |
| CAT-QuickHeal | 14.00 | AdWare.MSIL.r3 (Not a Virus) |
| Kaspersky | 12.0.0.1225 | not-a-virus:HEUR:AdWare.MSIL.Kranet.heur |
Software Behaviors
- Services:
-
- updateRockTurner.exe runs as a service named 'Update Rock Turner' (Update Rock Turner).
Software Details
- URL:
- https://rockturner.biz/support
- Support:
- https://mailto:
- Installation path:
- C:\Program Files\Rock Turner
- Uninstaller:
- C:\Program Files\Rock Turner\RockTurneruninstall.exe
- Size:
- 2.00 MB
- Language:
- English
Rock Turner Executable Details
- Primary executable:
- RockTurner.FirstRun.exe
- Name:
- Rock Turner
- Path:
- C:\Program Files\Rock Turner\RockTurner.FirstRun.exe
- MD5:
- 6b884c3b7363b925269960f8614b7b56
- SHA-1:
- –
- SHA-256:
- –
Files installed by Rock Turner
| File Type | Filename | MD5 |
|---|---|---|
|
EXE
|
e92604e043f51c604b6d1ac3bcd3a202 | |
|
EXE
|
c5bc3d856c77bc50fb4f06591205e1b1 | |
|
EXE
|
8d31becb8cb931c69008858a565afb28 | |
|
EXE
|
updateRockTurner.exe
Malware
|
8263c33e41ad22c773e84f9880d283cb |
|
EXE
|
898f0a71603f3f8a33022c9a3b033d28 | |
|
EXE
|
6b884c3b7363b925269960f8614b7b56 | |
|
DLL
|
RockTurnerBHO.dll
Adware
|
b0121425ce69350e099d8b24a9f7f059 |
|
EXE
|
6366f7162c1ced86003621adf4db8b8f | |
|
CRX
|
81ad6b3a0bb6b6a3e7d8c438995380ba | |
|
DLL
|
845197c6c39cde82be5a88b824bbfdc6 |