PUP.Optional.CrossBrowse is Malwarebytes’ detection name for a potentially unwanted program (PUP) that is a member of the Crossrider family.
The CrossBrowse members of this family install Chromium build browsers to replace the user’s own browser, sometimes combined with extensions for Firefox and Internet Explorer. The overall goal of this PUP is to increase the amount of advertisement impressions shown to the user.
Crossrider offers a highly configurable method for its clients to monetize their software. CrossBrowse is an example of a more advanced variant of Crossrider that hijacks many file associations.
PUP.Optional.CrossBrowse installs are typically triggered by bundlers that offer software you might be interested in combined with adware or other monetizing methods.
Malwarebytes protects users from PUP.Optional.CrossBrowse by using real-time protection.
Malwarebytes blocks PUP.Optional.CrossBrowse
Malwarebytes can detect and remove PUP.Optional.CrossBrowse without further user interaction.
It may be beneficial to read our guide to restore your browser.
Should users wish to keep this program and exclude it from being detected in future scans, they can add the program to the exclusions list. Here’s how to do it.
If you want to allow the program to connect to the Internet, for example to fetch updates, also add an exclusion of the type Allow an application to connect to the internet and use the Browse button to select the file you wish to grant access.
You may see these entries in FRST logs:
C:\Program Files (x86)\CrossBrowse-{version}
CrossBrowse-1.4V27.04 (HKLM-x32\…\CrossBrowse-{version}) (Version: 1.36.01.22 – CrossBrowse-{version}) <==== ATTENTION
Select your language