hdtotal1.1

hdtotal1.1

Known Toolbar

by Adware.BetterSurf

What is hdtotal1.1?

hdtotal1.1 is software application developed by Adware.BetterSurf. It is most commonly found on computers running Windows 7 with nearly 62.96% of installations running this operating system. hdtotal1.1's installer is typically 3.00 MB in size and installs around 12 files.

hdtotal1.1 is most popular in the United States with 45.14% of installations residing in this country.

When using a computer that is connected to the internet, hdtotal1.1 is known to create 5 firewall exceptions to allow inbound and outbound connectivity.

About hdtotal1.1?

HDTotal is a browser extension designed to display banner and text-context link ads in order to promote the installation of additional software, including web browser toolbars and optimization utilities. This may result in random webpage text being turned into hyperlinks and the unintended installation of unwanted adware programs without the user's knowledge.

Multiple virus scanners have detected malware in hdtotal1.1.

utils.exe (MD5: 085ebce0062981a0ba3be2ff27460374) has been flagged by 28 scanners:
Scanner Software Result
AhnLab-V3 PUP/Win32.Adware
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
Dr.Web Trojan.Crossrider.4794
ESET-NOD32 Win32/Toolbar.CrossRider.AB
Malwarebytes PUP.Optional.CrossRider.A
Symantec WS.Reputation
TrendMicro-HouseCall TROJ_GE.203227CA
Lavasoft Ad-Aware Trojan.Generic.11163001
AVG Generic5.APHA
Bitdefender Trojan.Generic.11163001
Emsisoft Anti-Malware Trojan.Generic.11163001 (B)
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Secure Trojan.Generic.11163001
G Data Trojan.Generic.11163001
IKARUS anti.virus Trojan.SuspectCRC
K7 AntiVirus Trojan ( 004965ab1 )
K7GW Trojan ( 004965ab1 )
McAfee Artemis!B8104AE61496
McAfee-GW-Edition Artemis!B8104AE61496
MicroWorld-eScan Trojan.Generic.11163001
NANO AntiVirus Trojan.Win32.Crossrider.cwhmph
Norman Suspicious_Gen4.GBZGR
nProtect Trojan.Generic.11163001
Sophos AppRider
VIPRE Antivirus Crossrider (fs)
Avira AntiVir Adware/CrossRider.A.713
SUPERAntiSpyware Trojan.Agent/Gen-Crossrider
hdtotal1.1-updater.exe (MD5: b5b7fadc6ffc015157dc27d015eadacd) has been flagged by 21 scanners:
Scanner Software Result
Lavasoft Ad-Aware Trojan.Generic.11165813
AVG MultiBundle.W
Baidu-International Adware.Win32.CrossRider.AC
Bitdefender Trojan.Generic.11165813
Dr.Web Trojan.Crossrider.8436
Emsisoft Anti-Malware Trojan.Generic.11165813 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Secure Trojan.Generic.11165813
G Data Trojan.Generic.11165813
Malwarebytes PUP.Optional.HDTotal.A
MicroWorld-eScan Trojan.Generic.11165813
NANO AntiVirus Trojan.Win32.Crossrider.cxtuvu
Norman Suspicious_Gen2.VWQBC
nProtect Trojan.Generic.11165813
SUPERAntiSpyware Trojan.Agent/Gen-Crossrider
VIPRE Antivirus Crossrider (fs)
McAfee Artemis!EF66F0DB4702
McAfee-GW-Edition Artemis!EF66F0DB4702
Sophos AppRider
TrendMicro-HouseCall TROJ_GEN.F47V0311
hdtotal1.1-firefoxinstaller.exe (MD5: 78dcbdd091353f691e4617182cfc454f) has been flagged by 17 scanners:
Scanner Software Result
Lavasoft Ad-Aware Trojan.Generic.11165768
AVG MultiBundle.V
Bitdefender Trojan.Generic.11165768
Dr.Web Trojan.Crossrider.7347
Emsisoft Anti-Malware Trojan.Generic.11165768 (B)
F-Secure Trojan.Generic.11165768
G Data Trojan.Generic.11165768
Malwarebytes PUP.Optional.HDTotal.A
MicroWorld-eScan Trojan.Generic.11165768
NANO AntiVirus Trojan.Win32.Crossrider.cwbkul
nProtect Trojan.Generic.11165768
VIPRE Antivirus Crossrider (fs)
McAfee Artemis!EF66F0DB4702
McAfee-GW-Edition Artemis!EF66F0DB4702
Sophos AppRider
TrendMicro-HouseCall TROJ_GEN.F47V0311
Baidu-International Adware.Win32.CrossAd.77
hdtotal1.1-enabler.exe (MD5: 0b747cd96a30223679e2600ef2adfa9e) has been flagged by 25 scanners:
Scanner Software Result
Lavasoft Ad-Aware Trojan.Generic.11159659
Avira AntiVir Adware/CrossRider.A.713
AVG Generic5.APNE
Baidu-International Adware.Win32.Lyrics.80
Bitdefender Trojan.Generic.11159659
Dr.Web Trojan.Crossrider.950
Emsisoft Anti-Malware Trojan.Generic.11159659 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Secure Trojan.Generic.11159659
G Data Trojan.Generic.11159659
IKARUS anti.virus Trojan.SuspectCRC
K7 AntiVirus Trojan ( 004984e91 )
K7GW Trojan ( 004984e91 )
Malwarebytes PUP.Optional.HDTotal.A
McAfee Artemis!0B747CD96A30
McAfee-GW-Edition Artemis!0B747CD96A30
MicroWorld-eScan Trojan.Generic.11159659
nProtect Trojan.Generic.11159659
Sophos AppRider
VIPRE Antivirus Crossrider (fs)
NANO AntiVirus Trojan.Win32.Crossrider.cxtuvu
Norman Suspicious_Gen2.VWQBC
SUPERAntiSpyware Trojan.Agent/Gen-Crossrider
TrendMicro-HouseCall TROJ_GEN.F47V0311
hdtotal1.1-codedownloader.exe (MD5: b8104ae61496a320d92abfc43c7d48ed) has been flagged by 26 scanners:
Scanner Software Result
Lavasoft Ad-Aware Trojan.Generic.11163001
AVG Generic5.APHA
Baidu-International Adware.Win32.CrossRider.40
Bitdefender Trojan.Generic.11163001
Dr.Web Trojan.Crossrider.7193
Emsisoft Anti-Malware Trojan.Generic.11163001 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AA
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Secure Trojan.Generic.11163001
G Data Trojan.Generic.11163001
IKARUS anti.virus Trojan.SuspectCRC
K7 AntiVirus Trojan ( 004965ab1 )
K7GW Trojan ( 004965ab1 )
Malwarebytes PUP.Optional.HDTotal.A
McAfee Artemis!B8104AE61496
McAfee-GW-Edition Artemis!B8104AE61496
MicroWorld-eScan Trojan.Generic.11163001
NANO AntiVirus Trojan.Win32.Crossrider.cwhmph
Norman Suspicious_Gen4.GBZGR
nProtect Trojan.Generic.11163001
Sophos AppRider
Symantec WS.Reputation.1
TrendMicro-HouseCall TROJ_GEN.F47V0311
VIPRE Antivirus Crossrider (fs)
Avira AntiVir Adware/CrossRider.A.713
SUPERAntiSpyware Trojan.Agent/Gen-Crossrider

Software Behaviors

Firewall:
  • hdtotal1.1-updater.exe is added as a firewall exception for 'C:\Program Files\hdtotal1.1\hdtotal1.1-updater.exe'.
  • hdtotal1.1-firefoxinstaller.exe is added as a firewall exception for 'C:\Program Files\hdtotal1.1\hdtotal1.1-firefoxinstaller.exe'.
  • hdtotal1.1-codedownloader.exe is added as a firewall exception for 'C:\Program Files\hdtotal1.1\hdtotal1.1-codedownloader.exe'.
  • hdtotal1.1-chromeinstaller.exe is added as a firewall exception for 'C:\Program Files\hdtotal1.1\hdtotal1.1-chromeinstaller.exe'.
  • hdtotal1.1-bg.exe is added as a firewall exception for 'C:\Program Files\hdtotal1.1\hdtotal1.1-bg.exe'.

Startup Entries

Startup tasks:
  • hdtotal1.1-updater.exe is automatically launched at startup through a scheduled task named hdtotal1.1-updater.
  • hdtotal1.1-firefoxinstaller.exe is automatically launched at startup through a scheduled task named hdtotal1.1-firefoxinstaller.
  • hdtotal1.1-codedownloader.exe is automatically launched at startup through a scheduled task named hdtotal1.1-codedownloader.
  • hdtotal1.1-chromeinstaller.exe is automatically launched at startup through a scheduled task named hdtotal1.1-chromeinstaller.
  • hdtotal1.1-enabler.exe is automatically launched at startup through a scheduled task named hdtotal1.1-enabler.

Software Details

URL:
https://crossrider.com/install/53360-hd-total-1-1
Support:
–
Installation path:
C:\Program Files\hdtotal1.1
Uninstaller:
C:\Program Files\hdtotal1.1\Uninstall.exe /fromcontrolpanel=1
Size:
3.00 MB
Language:
English

hdtotal1.1 Executable Details

Primary executable:
utils.exe
Name:
hdtotal1.1
Path:
C:\Program Files\hdtotal1.1\utils.exe
MD5:
085ebce0062981a0ba3be2ff27460374
SHA-1:
–
SHA-256:
–
Files installed by hdtotal1.1
File Type Filename MD5
EXE
ab91a7350a5fddcdf0a7b0c60e8e4e71
EXE
utils.exe
Malware
085ebce0062981a0ba3be2ff27460374
XPI
1443e8839e4e5a8bc9da6837c6221491
CRX
814c09a9a8d000da484010ff14c2f2b7
EXE
b5b7fadc6ffc015157dc27d015eadacd
EXE
78dcbdd091353f691e4617182cfc454f
EXE
0b747cd96a30223679e2600ef2adfa9e
EXE
b8104ae61496a320d92abfc43c7d48ed
EXE
0543bb994a07469b321a8a471a38489c
DLL
a106fc10ff0c6c32acf9952b7dac1102