Browser.exe: Is it malware?

February 25, 2010 at 02:50:01
Specs: Windows XP

When I powered down last night, I saw the familiar message "Don't switch off... Installing updates...". When I switched on this morning, I saw a window saying something like "A browser is a very important piece of software that enables you to view web sites...blah, blah, blah... Click OK to see a list of browsers you can use." Really basic information and an 'OK' textual hyperlink. It had no logo or text to identify its source whatsoever. I was instantly suspicious; so, I clicked the X to close the window. Instead of closing, it opened my default browser! Fortunately, my Internet connection was not open at this time, otherwise who knows what might have happened! When I found the browser.exe file on my PC, its date was 12 Feb 2010, 13 (yes, 13!) days before it was triggered. I deleted the file and the shortcut icon it put on my desktop. Is this malware, or is it safe? If it's safe, who supplied it?

See More: Browser.exe: Is it malware?

Report •


#1
February 26, 2010 at 06:56:47

Yes it's malware, or it could be, since a file of the same name
is installed as part of the 'Advanced Browser' (a 'skin' for
Internet Explorer). A file with that name is also installed with
the Packard Bell Printer Assistant software.

If you never installed either of the above, you've got the malware version of the file.

Even though you've removed the file, traces of the infection
may still remain in the Registry and elsewhere.

Download & install the free version of 'SuperAntiSpyware',
update it's malware definitions, then do a full scan of 'C' drive.
Let it remove any malware it finds:
http://www.superantispyware.com/sup...
html



Report •

#2
February 27, 2010 at 02:50:57

This window has just reappeared when I switched on again this morning. This time I investigated the code behind the page. Clicking 'OK' leads to a "http://go.microsoft.com/fwlink/?LinkID=178591", and just closing the window leads to "http://go.microsoft.com/fwlink/?LinkID=178584".

I'm sorry if my previous post was misleading. I made a mistake. The filename is "browserchoice.exe", not "browser.exe".


Report •

#3
February 27, 2010 at 06:21:09

AbacusData, "browserchoice.exe" is a legit Windows file which is part of a recent Windows update. Check out the lhe link below.

http://support.microsoft.com/kb/976002

Go thru the links/threads at the link below to see how others are dealing with it.

http://www.google.ca/#hl=en&source=...

Tufenuf



Report •

Related Solutions

#4
February 27, 2010 at 07:29:21

Thanks for the replies. If Microsoft had put some identification on the window, and if it had closed when I tried to close it, I would not have been so paranoid.

Report •


Ask Question