We're gradually updating threat actor names in our reports to align with the new weather-themed taxonomy. Learn about Microsoft threat actor names
BrowserModifier:Win32/Kerlofost
Detected by Microsoft Defender Antivirus
Aliases: not-a-virus:AdWare.Win32.Reklosoft (other) Mal/Inet-Fam (Sophos)
Summary
BrowserModifier:Win32/Kerlofost is the detection for a DLL file embedded in various programs and registered as a BHO (Browser Helper Object). It may modify browsing behavior, redirect searches, report user statistics, behavior, and searches back to a remote server, and display pop-up advertisements.
Use Microsoft Windows Defender, the Microsoft Safety Scanner, or another up-to-date scanning and removal tool to detect and remove this threat and other unwanted software from your computer. For more information on Microsoft security products, see http://www.microsoft.com/protect/products/computer/default.mspx.