Plus-HD-2.6

Plus-HD-2.6

Known Adware

by FIRSERIA

What is Plus-HD-2.6?

Plus-HD-2.6 is software application developed by FIRSERIA. It is most commonly found on computers running Windows 7 with nearly 59.56% of installations running this operating system. Plus-HD-2.6's installer is typically 5.00 MB in size and installs around 15 files. The most common release is 1.27.153.5 with 56.11% of all installations currently using this version.

Plus-HD-2.6 is most popular in Germany with 46.44% of installations residing in this country.

Plus-HD-2.6 adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About Plus-HD-2.6?

Plus HD is a web browser extension and Browser Helper Object designed to deliver contextual-based advertising to the user's web browser. It also has the capability to modify the browser's home and search pages, as well as 'New Tab' pages, in order to promote advertising and search. This software is categorized as adware and is commonly identified as an unwanted application by multiple malware vendors. It is important to note that Plus HD is marketed as a variation of DivX Plus HD, despite having no affiliation with DivX.

Multiple virus scanners have detected malware in Plus-HD-2.6.

utils.exe (MD5: c49e36ac96ceeb49b8d3ebca18c858ae) has been flagged by 37 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.Packed.ScrambleWrapper.C
Bkav FE HW32.CDB
ESET-NOD32 Win32/Packed.ScrambleWrapper.C
Malwarebytes PUP.Optional.PlusHD.A
TrendMicro-HouseCall TROJ_GEN.F47V0825
Lavasoft Ad-Aware Gen:Adware.Plush.1
AhnLab-V3 PUP/Win32.PlusHD
Antiy-AVL not-a-virus:WebToolbar.Win32.CroRi.bei
avast! Win32:Crossrider-H [PUP]
AVG Generic5.AJKB
Avira Adware/CrossRider.A.3762
AVware Crossrider (fs)
Bitdefender Gen:Adware.Plush.1
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.16
Emsisoft Anti-Malware Gen:Adware.Plush.1 (B)
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Secure Gen:Adware.Plush.1
G Data Gen:Adware.Plush.1
K7 AntiVirus Unwanted-Program ( 004ae5c31 )
K7GW Unwanted-Program ( 004ae5c31 )
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
McAfee Artemis!66D8ECD07887
McAfee-GW-Edition BehavesLike.Win32.AdwareAddLyrics.fh
MicroWorld-eScan Gen:Adware.Plush.1
NANO AntiVirus Trojan.Win32.Crossrider.cqktcv
Panda Antivirus PUP/PlusHD
Sophos AppRider
Symantec Adware.Crossid
Trend Micro TROJ_GEN.R0C1C0EJK14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.482
Agnitum Outpost PUA.Toolbar.Crossrider!
ALYac Adware.Generic.1078994
Jiangmin AdWare/Lyckriks.cu
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Vba32 AntiVirus AdWare.Lyckriks
Plus-HD-2.6-updater.exe (MD5: de8cff001815c660e8f5add42c104284) has been flagged by 6 scanners:
Scanner Software Result
ESET-NOD32 probably a variant of Win32/Toolbar.CrossRider.I
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.PlusHD.A
McAfee Artemis!DE8CFF001815
McAfee-GW-Edition Artemis!DE8CFF001815
VIPRE Antivirus Crossrider (fs)
Plus-HD-2.6-enabler.exe (MD5: 66d8ecd078872684d946c6b50a9b887d) has been flagged by 37 scanners:
Scanner Software Result
Lavasoft Ad-Aware Gen:Adware.Plush.1
AhnLab-V3 PUP/Win32.PlusHD
Antiy-AVL not-a-virus:WebToolbar.Win32.CroRi.bei
avast! Win32:Crossrider-H [PUP]
AVG Generic5.AJKB
Avira Adware/CrossRider.A.3762
AVware Crossrider (fs)
Baidu-International PUA.Win32.CrossRider.BJ
Bitdefender Gen:Adware.Plush.1
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.16
Emsisoft Anti-Malware Gen:Adware.Plush.1 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Secure Gen:Adware.Plush.1
G Data Gen:Adware.Plush.1
K7 AntiVirus Unwanted-Program ( 004ae5c31 )
K7GW Unwanted-Program ( 004ae5c31 )
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
Malwarebytes PUP.Optional.HDPlus.A
McAfee Artemis!66D8ECD07887
McAfee-GW-Edition BehavesLike.Win32.AdwareAddLyrics.fh
MicroWorld-eScan Gen:Adware.Plush.1
NANO AntiVirus Trojan.Win32.Crossrider.cqktcv
Panda Antivirus PUP/PlusHD
Sophos AppRider
Symantec Adware.Crossid
Trend Micro TROJ_GEN.R0C1C0EJK14
TrendMicro-HouseCall TROJ_GEN.R0C1C0EJK14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.482
Agnitum Outpost PUA.Toolbar.Crossrider!
ALYac Adware.Generic.1078994
Bkav FE W64.HfsAdware.93C0
Jiangmin AdWare/Lyckriks.cu
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Vba32 AntiVirus AdWare.Lyckriks
Plus-HD-2.6-codedownloader.exe (MD5: 4f84b8aa182058a97a6aff4840bbc517) has been flagged by 4 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.I
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.PlusHD.A
VIPRE Antivirus Crossrider (fs)
Plus-HD-2.6-chromeinstaller.exe (MD5: a67f7b93d2a93190f8a180497a2763e2) has been flagged by 3 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Malwarebytes PUP.Optional.PlusHD.A
VIPRE Antivirus Crossrider (fs)

Software Behaviors

Scheduled tasks:
  • Plus-HD-2.6-enabler.exe is scheduled as a task named 'temp_Plus-HD-2.6-enabler'.

Startup Entries

Startup tasks:
  • Plus-HD-2.6-updater.exe is automatically launched at startup through a scheduled task named Plus-HD-2.6-updater.
  • Plus-HD-2.6-firefoxinstaller.exe is automatically launched at startup through a scheduled task named Plus-HD-2.6-firefoxinstaller.
  • Plus-HD-2.6-enabler.exe is automatically launched at startup through a scheduled task named Plus-HD-2.6-enabler.
  • Plus-HD-2.6-codedownloader.exe is automatically launched at startup through a scheduled task named Plus-HD-2.6-codedownloader.
  • Plus-HD-2.6-chromeinstaller.exe is automatically launched at startup through a scheduled task named Plus-HD-2.6-chromeinstaller.

Software Details

URL:
https://plus-hd.com
Support:
–
Installation path:
C:\Program Files\plus-hd-2.6
Uninstaller:
C:\Program Files\Plus-HD-2.6\Uninstall.exe
Size:
5.00 MB
Language:
English

Plus-HD-2.6 Executable Details

Primary executable:
utils.exe
Name:
Plus-HD-2.6
Path:
C:\Program Files\plus-hd-2.6\utils.exe
MD5:
c49e36ac96ceeb49b8d3ebca18c858ae
SHA-1:
–
SHA-256:
–
Files installed by Plus-HD-2.6
File Type Filename MD5
EXE
3ceb006581653af9e459331410aa78a1
EXE
c49e36ac96ceeb49b8d3ebca18c858ae
EXE
bb97d626035ad81bb5dfc589c683cd74
DLL
2ad27c3c095ea274551e6bad36f26707
EXE
de8cff001815c660e8f5add42c104284
EXE
b1b8e02d1eb412e4bca6371f0b69fac4
EXE
66d8ecd078872684d946c6b50a9b887d
EXE
4f84b8aa182058a97a6aff4840bbc517
EXE
a67f7b93d2a93190f8a180497a2763e2
EXE
8b5847742e62021be8adb7c12adc3797