home

neurowise.dll

TessView

Part of the Yontoo adware component, a web browser plugin that injects unwanted ads in the browser. The module neurowise.dll by TessView has been detected as adware by 30 anti-malware scanners. This file is typically installed with the program neurowise by Yontoo Technology, Inc. which is a potentially unwanted software program. It will plug into the web browser and display context-based advertisements by overwriting existing ads or by inserting new ones on various web pages.
Publisher:
neurowise  (signed by TessView)

Product:
neurowise

Version:
1.0.0.3

MD5:
2949f53129a34b6649ad485bd306221a

SHA-1:
f1f35115ad1ac1ebb192dfd0ea8d2e2b07f5aeeb

SHA-256:
f0ed4bd25e9c07da12bb740877190c4fb479fd72897509d47c0e91c3ff31b339

Scanner detections:
30 / 68

Status:
Adware

Explanation:
Injects advertising in the web browser in various formats.

Analysis date:
11/24/2024 4:56:48 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Adware.BHO.Agent.4
817

Agnitum Outpost
PUA.Agent
7.1.1

Avira AntiVirus
APPL/BrowseFox.Gen2
7.11.166.4

AVG
Adware BrowseFox.F
2014.0.4189

Baidu Antivirus
Adware.Win32.BrowseFox
4.0.3.141110

Bitdefender
Gen:Variant.Adware.BHO.Agent.4
1.0.20.1570

Clam AntiVirus
Win.Adware.Agent-7675
0.98/21411

Comodo Security
Application.Win32.Altbrowse.AK
19119

Dr.Web
Trojan.BPlug.141
9.0.1.05190

Emsisoft Anti-Malware
Gen:Variant.Adware.BHO.Agent
8.14.11.10.07

ESET NOD32
Win32/BrowseFox.O potentially unwanted application
7.0.302.0

Fortinet FortiGate
Adware/Agent
11/10/2014

F-Prot
W32/BadBHO.AW.gen
v6.4.7.1.166

F-Secure
Gen:Variant.Adware.BHO.Agent.4
11.2014-10-11_2

G Data
Gen:Variant.Adware.BHO.Agent
14.11.24

K7 AntiVirus
Trojan
13.185.13965

Kaspersky
not-a-virus:AdWare.Win32.Agent
14.0.0.2968

Malwarebytes
PUP.Optional.Zebar.A
v2014.11.10.07

McAfee
Artemis!CD96DF17AA75
5600.6951

MicroWorld eScan
Gen:Variant.Adware.BHO.Agent.4
15.0.0.942

NANO AntiVirus
Riskware.Win32.Agent.czmzab
0.28.2.61349

nProtect
Trojan-Clicker/W32.Agent.249624.B
14.08.07.01

Panda Antivirus
Trj/CI.A
14.11.10.07

Qihoo 360 Security
HEUR/Malware.QVM30.Gen
1.0.0.1015

Reason Heuristics
PUP.TessView.J
14.11.29.17

Sophos
BrowseSmart
4.98

SUPERAntiSpyware
Adware.BrowseFox/Variant
10246

Trend Micro House Call
Suspicious_GEN.F47V0807
7.2.314

VIPRE Antivirus
Yontoo
32026

Zillya! Antivirus
Adware.Agent.Win32.9402
2.0.0.1850

File size:
244.3 KB (250,144 bytes)

Product version:
1.0.0.3

Copyright:
(c) neurowise. All rights reserved.

Original file name:
neurowiseIEClient.dll

File type:
Dynamic link library (Win32 DLL)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\content.ie5\813c5sgo\neurowise.dll

Digital Signature
Signed by:
TessView

Authority:
VeriSign, Inc.

Valid from:
2/4/2014 2:00:00 AM

Valid to:
2/5/2015 1:59:59 AM

Subject:
CN=TessView, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=TessView, L=Santa Monica, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
3F35E503136B53896D71C7902553287E

File PE Metadata
Compilation timestamp:
10/30/2014 6:46:16 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
3072:s9Botzn5MrRY/xRyklvnnD8uDTci+G3IaIXxdjBUuxo:sGzn5MtY/LycjIBAuxo

Entry address:
0x12854

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, 41, 8D, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 80, 30, 03, 10, E8, BD, 01, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 24, 78, 03, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 0C, A5, 02, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4...
 
[+]

Entropy:
6.3609

Developed / compiled with:
Microsoft Visual C++

Code size:
159 KB (162,816 bytes)

The file neurowise.dll has been discovered within the following program.

neurowise  by Yontoo Technology, Inc.
neurowise is an advertising supported (adware) extension that runs in the context of the user's web browser as well as a process in the background.
neurowise.info/support
84% remove it
 
Powered by Should I Remove It?

Remove neurowise.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.