Cinema-DPlus2

Cinema-DPlus2

Known Adware

by Bright circle investments Ltd.

What is Cinema-DPlus2?

Cinema-DPlus2 is software application developed by Bright circle investments Ltd.. It is most commonly found on computers running Windows 10 with nearly 66.67% of installations running this operating system. Cinema-DPlus2's installer is typically 11.00 MB in size and installs around 33 files. The most common release is 1.34.7.1 with 66.67% of all installations currently using this version.

Cinema-DPlus2 is most popular in the United States with 100.00% of installations residing in this country.

About Cinema-DPlus2?

Cinema-DPlus is a web browser extension supported by advertising, which may be bundled with potentially unwanted software offers by third-party download managers to generate revenue through installations. Upon installation, this program serves a variety of advertisements, including banners, text hyperlinks, inline text ads, and transitional formats, within the user's web browser, without affiliation or endorsement from the visited websites. Moreover, the software interacts with remote servers to track the user's browsing activities, including URLs and domains visited, to customize its ad content. Furthermore, the End User License Agreement (EULA) states that the advertisements may be tailored based on the user's browsing queries, information processed by the software, or other data collected during its usage. It is important to note that the program's uninstaller may not remove all elements of the software, resulting in persistent ads post-removal in some instances.

Multiple virus scanners have detected malware in Cinema-DPlus2.

d3b8531c-0be0-4228-8a58-264f0b468dc4-5.exe (MD5: afaa26d03b47fc1e6e5144562410ae4f) has been flagged by 12 scanners:
Scanner Software Result
AhnLab-V3 PUP/Win32.CrossRider
Avira AntiVir ADWARE/CrossRider.Gen2
AVG Generic.332
Baidu-International Adware.Win32.CrossRider.bAH
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AH
Jiangmin Adware/Adload.ayo
NANO AntiVirus Riskware.Win32.AdLoad.dbdtou
Panda Antivirus Trj/Genetic.gen
VIPRE Antivirus Crossrider (fs)
F-Prot W32/A-eb9ef301!Eldorado
Sophos AppRider
Vba32 AntiVirus AdWare.AdLoad
d3b8531c-0be0-4228-8a58-264f0b468dc4-2.exe (MD5: e256d530ffaad458a7c45988481ef2fa) has been flagged by 13 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.20191
AVG Generic_r.OG
Baidu-International Adware.Win32.CrossRider.BAJ
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AJ
F-Prot W32/A-eb9ef301!Eldorado
Jiangmin Adware/Adload.ayl
NANO AntiVirus Riskware.Win32.AdLoad.dbdtnp
Sophos AppRider
Vba32 AntiVirus AdWare.AdLoad
VIPRE Antivirus Crossrider (fs)
Agnitum Outpost PUA.AdLoad!
AhnLab-V3 PUP/Win32.Toolbar
Panda Antivirus Trj/Genetic.gen
Cinema-DPlus2-nova.exe (MD5: 3319e55cf6aae225666cfe321156daa2) has been flagged by 13 scanners:
Scanner Software Result
Agnitum Outpost PUA.AdLoad!
AhnLab-V3 PUP/Win32.Toolbar
AVG Generic_r.PD
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AE
Jiangmin Adware/Adload.aym
NANO AntiVirus Riskware.Win32.AdLoad.dbdtmc
Panda Antivirus Trj/Genetic.gen
Vba32 AntiVirus AdWare.AdLoad
VIPRE Antivirus Crossrider (fs)
Avira AntiVir ADWARE/CrossRider.Gen2
Baidu-International Adware.Win32.CrossRider.bAH
F-Prot W32/A-eb9ef301!Eldorado
Sophos AppRider
Cinema-DPlus2-codedownloader.exe (MD5: d1f90dfeaffb5b2c93ba562009d28d36) has been flagged by 24 scanners:
Scanner Software Result
AhnLab-V3 PUP/Win32.PlusHD
Avira AntiVir Adware/CrossRider.A.19981
AVG Generic_r.OE
Baidu-International Adware.Win32.CrossRider.bAJ
Clam AntiVirus Win.Adware.Agent-7332
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AJ
F-Prot W32/A-eb9ef301!Eldorado
Jiangmin Adware/Adload.ayq
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.CinemaHD.A
NANO AntiVirus Riskware.Win32.AdLoad.dbdvli
Panda Antivirus Trj/Genetic.gen
Sophos AppRider
Symantec Trojan.ADH.2
Vba32 AntiVirus AdWare.AdLoad
VIPRE Antivirus Crossrider (fs)
Fortinet FortiGate Riskware/Toolbar_CrossRider
McAfee Artemis!707A540634CB
McAfee-GW-Edition Artemis!707A540634CB
Qihoo-360 HEUR/Malware.QVM10.Gen
TrendMicro-HouseCall Suspicious_GEN.F47V0716
K7 AntiVirus Trojan ( 0049bfb71 )
K7GW Trojan ( 0049bfb71 )
Agnitum Outpost PUA.AdLoad!
488083f6-732e-4e87-8010-06572f9544e2-4.exe (MD5: 6ed9ef2f7797adc8a822ddb1c2bd8aec) has been flagged by 25 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.20267
AVG Brightcircle
Comodo Security ApplicUnwnt
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AK
Fortinet FortiGate Riskware/Toolbar_CrossRider
Jiangmin Adware/Adload.ayn
K7 AntiVirus Trojan
K7GW Trojan ( 0049c2a41 )
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.CinemaHD.A
McAfee Artemis!6ED9EF2F7797
McAfee-GW-Edition Artemis!6ED9EF2F7797
NANO AntiVirus Riskware.Win32.AdLoad.dbdtnn
Panda Antivirus Trj/Genetic.gen
Qihoo-360 HEUR/Malware.QVM10.Gen
Sophos Generic PUA PG
TrendMicro-HouseCall Suspicious_GEN.F47V0716
VIPRE Antivirus Crossrider (fs)
AhnLab-V3 PUP/Win32.PlusHD
Baidu-International Adware.Win32.CrossRider.bAJ
Clam AntiVirus Win.Adware.Agent-7332
F-Prot W32/A-eb9ef301!Eldorado
Symantec Trojan.ADH.2
Vba32 AntiVirus AdWare.AdLoad
Agnitum Outpost PUA.AdLoad!

Startup Entries

Startup tasks:
  • d3b8531c-0be0-4228-8a58-264f0b468dc4-5.exe is automatically launched at startup through a scheduled task named d3b8531c-0be0-4228-8a58-264f0b468dc4-5.
  • d3b8531c-0be0-4228-8a58-264f0b468dc4-4.exe is automatically launched at startup through a scheduled task named d3b8531c-0be0-4228-8a58-264f0b468dc4-4.
  • d3b8531c-0be0-4228-8a58-264f0b468dc4-11.exe is automatically launched at startup through a scheduled task named d3b8531c-0be0-4228-8a58-264f0b468dc4-3.
  • d3b8531c-0be0-4228-8a58-264f0b468dc4-2.exe is automatically launched at startup through a scheduled task named d3b8531c-0be0-4228-8a58-264f0b468dc4-2.
  • Cinema-DPlus2-codedownloader.exe is automatically launched at startup through a scheduled task named d3b8531c-0be0-4228-8a58-264f0b468dc4-1.
  • Cinema-DPlus2-nova.exe is automatically launched at startup through a scheduled task named 488083f6-732e-4e87-8010-06572f9544e2-7.

Software Details

URL:
https://crossrider.com/install/59568-plus-hd-v1-8
Support:
–
Installation path:
C:\Program Files\cinema-dplus2
Uninstaller:
C:\Program Files\Cinema-DPlus2\Uninstall.exe /fcp=1
Size:
11.00 MB
Language:
English

Cinema-DPlus2 Executable Details

Primary executable:
utils.exe
Name:
Cinema-DPlus2
Path:
C:\Program Files\cinema-dplus2\utils.exe
MD5:
–
SHA-1:
–
SHA-256:
–
Files installed by Cinema-DPlus2
File Type Filename MD5
EXE
f097fa33c0abac9cb34d71f5e51733cd
EXE
74b203d1d965c1224497e4d373d9d056
EXE
6ed9ef2f7797adc8a822ddb1c2bd8aec
EXE
707a540634cbf07fc0b01cd2a1b45379
EXE
07d5b8a13285fb2aa02ca45844ef6a60
EXE
554147d4a9fcadca7e6ebe0db2350e6a
EXE
7b4013102a8ec152c7b65da193900172
EXE
f25978316e6369eb20723721f12f071a
EXE
5ec8e87e894b16ffd8dd38ce64799158
EXE
26d3f0412f762f9c0980a877ce3d1395