Published Apr 03, 2016|Updated Jan 31, 2018


High |Detected with Windows Defender Antivirus

Aliases: No associated aliases


Windows Defender Antivirus  detects and removes this unwanted software.

This browser modifier can change your web browser settings without adequate consent.   

This threat is a family that modifies browser search and home page settings, and may download and install additional malware such as Trojan:Win32/Xadupi and Trojan:Win32/Suweezy.

It is usually installed through bundlers such as SoftwareBundler:Win32/Mizenota, SoftwareBundler:Win32/Prepscram, SoftwareBundler:Win32/InstallMonsterSoftwareBundler:Win32/ICLoader and SoftwareBundler:Win32/Dartsmound.

This threat is part of a suite of malware and unwanted software families that is also called "Fireball". Read about this threat group in the Windows Security blog: 

Understanding the true size of “Fireball”

This threat is an unwanted software. An unwanted software is a program that alters your Windows experience without your consent or control. We use a set of evaluation criteria to determine what programs are classified as unwanted software. As the software ecosystem evolves, so do our evaluation criteria. To learn more, read these blog entries:



Latest news