mngr.exe
Application Manager by Bit89 Inc. (Signed)
Warning 28 antivirus scanners has detected malware in various versions of mngr.exe.
Overview
There are 3 versions of mngr.exe in the wild, the latest version being 2,6,1123,78. It is started as a Windows Service with the name 'Browser Manager' and described as “Your browser protector service”. . This is executed as a shared service (which simply means that this service can share a process with other Win32 services). The average file size is about 2.34 MB. The file is a digitally signed and issued to Bit89 Inc. by GoDaddy.com. Numerous variations of mngr.exe have been installed with both Browser Manager and PC Performer Manager. During the process's lifecycle, the typical CPU resource utilization is less than 0.01%, the average private memory consumption is about 3.23 MB with the maximum memory reaching around 6.27 MB. Addionally, typically read and write I/O disk operations is about 1.6 KB per minute for reads and 74 Bytes per minute for writes.
What is mngr.exe?
The PerformerSoft Browser Manager (Application Manager) program classified mostly as exhibiting adware like actions, is bundled with PerformerSoft products including PC Performer. Browser Manager is designed to protect its bundled programs and make sure they remain installed or unchanged by other thrid party programs. The Browser Manager program was developed by Bit89 (Bit89.com) a know adware maker.
About mngr.exe (from Bit89 Inc.)
“Automatically optimize your registry settings to prevent crashes and help speed up your computer. Manage start up – goes to the Start Up Manager and shows the programs that are loaded when Windows s”
 Details
|
| File name: | mngr.exe |
| Publisher: | PerformerSoft LLC |
| Product name: | Application Manager |
| Typical file path: | C:\ProgramData\browser manager\2.5.911.18\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\mngr.exe |
| Certificate |
| Issued to: | Bit89 Inc. |
| Authority (CA): | GoDaddy.com |
| Effective date: | Tuesday, September 4, 2012 |
| Expiration date: | Friday, September 4, 2015 |
| Windows Service |
| Service name: | Browser Manager |
| Description: | “Your browser protector service” |
| Type: | Win32ShareProcess |
Programs installed in
(Note, the programs listed below are for all versions of Application Manager.)
Browser Manager (also known as Application Manager) is a third party web browser add-in classified mostly as a potentially unwanted program that used to be bundled with PerformerSoft products includin...
PC Performer Manager is bundled with various PC Performer registry optimization products.
Behaviors
(Note, the behaviors below are for all versions of mngr.exe, select a unique version for details.)
Service
Runs under 'SYSTEM\CurrentControlSet\Services' as a shared service by the Service Host (svchost.exe)
Malware detections
Based on 40+ industry antivirus scanners, 28 of them detected the following malware.
| Antivirus engine | Engine version | Detection | File version |
| AhnLab V3 Internet Security |
2013.02.06.04 |
Adware/Win32.Bromngr |
2,5,911,18 |
| AhnLab V3 Internet Security |
2013.03.29 |
Adware/Win32.Bromngr |
2,5,976,107 |
| AVG |
2014.0.3629 |
Generic5.RQU |
2,5,976,107 |
| Comodo Internet Security |
15742 |
UnclassifiedMalware |
2,5,976,107 |
| Dr.Web |
7.0.4.09250 |
Adware.BGuard.7 |
2,5,911,18 |
| Dr.Web |
8.13.4.17 |
Adware.BGuard.7 |
2,5,976,107 |
| ESET NOD32 |
7.7975 |
a variant of Win32/bProtector.A |
2,5,911,18 |
| ESET NOD32 |
7.8174 |
a variant of Win32/bProtector.A |
2,5,976,107 |
| ESET NOD32 |
7.8438 |
a variant of Win32/bProtector.A |
2,6,1123,78 |
| Fortinet |
5.0.43.0 |
Adware/Bromngr |
2,5,976,107 |
| Jiangmin |
13.0.900 |
AdWare/Bromngr.b |
2,5,911,18 |
| K7 AntiVirus |
9.164.8447 |
Adware |
2,5,976,107 |
| Panda Antivirus |
10.0.3.5 |
Trj/OCJ.C |
2,5,976,107 |
| PC Tools |
9.0.0.2 |
Adware.GoonSquad!rem |
2,5,976,107 |
| Sophos |
4.89.0 |
BProtector |
2,6,1123,78 |
| SUPERAntiSpyware |
5.6.0.1008 |
Adware.BProtector |
2,5,976,107 |
| Symantec |
20121.3.0.76 |
Adware.GoonSquad |
2,5,976,107 |
| Trend Micro |
9.740.0.1012 |
ADW_BROMNGR |
2,5,911,18 |
| Trend Micro |
9.740.0.1012 |
ADW_PROT |
2,5,976,107 |
| Trend Micro |
9.740.0.1012 |
ADW_BROMNGR |
2,6,1123,78 |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.RCBH1KT |
2,5,911,18 |
| Trend Micro HouseCall |
9.700.0.1001 |
TROJ_GEN.RCBH1LH |
2,5,976,107 |
| Trend Micro HouseCall |
9.700.0.1001 |
ADW_BROMNGR |
2,6,1123,78 |
| Vba32 AntiVirus |
3.12.20.1 |
AdWare.Bromngr.b |
2,5,911,18 |
| Vba32 AntiVirus |
3.12.20.2 |
AdWare.Bromngr.b |
2,5,976,107 |
| VIPRE Antivirus |
15404 |
Bprotector (fs) |
2,5,911,18 |
| VIPRE Antivirus |
16378 |
Bprotector (fs) |
2,5,976,107 |
| VIPRE Antivirus |
18630 |
Bprotector (fs) |
2,6,1123,78 |
All file variations of mngr.exe
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Ultimate |
48.00% |
|
| Windows 7 Home Premium |
20.00% |
|
| Windows 7 Ultimate N |
16.00% |
|
| Microsoft Windows XP |
12.00% |
|
| Windows Vista Home Premium |
4.00% |
|
Distribution by country
United States installs about 24.00% of Application Manager.
