Plus-HD-2.6

Plus-HD-2.6

Known Adware

by FIRSERIA

What is Plus-HD-2.6?

Plus-HD-2.6 is software application developed by FIRSERIA. It is most commonly found on computers running Windows 7 with nearly 59.56% of installations running this operating system. Plus-HD-2.6's installer is typically 5.00 MB in size and installs around 15 files. The most common release is 1.27.153.5 with 56.11% of all installations currently using this version.

Plus-HD-2.6 is most popular in Germany with 46.44% of installations residing in this country.

Plus-HD-2.6 adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About Plus-HD-2.6?

Plus HD is a web browser extension and Browser Helper Object designed to deliver contextual-based advertising to the user's web browser. It also has the capability to modify the browser's home and search pages, as well as 'New Tab' pages, in order to promote advertising and search. This software is categorized as adware and is commonly identified as an unwanted application by multiple malware vendors. It is important to note that Plus HD is marketed as a variation of DivX Plus HD, despite having no affiliation with DivX.

Multiple virus scanners have detected malware in Plus-HD-2.6.

utils.exe (MD5: c49e36ac96ceeb49b8d3ebca18c858ae) has been flagged by 37 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.Packed.ScrambleWrapper.C
Bkav FE HW32.CDB
ESET-NOD32 Win32/Packed.ScrambleWrapper.C
Malwarebytes PUP.Optional.PlusHD.A
TrendMicro-HouseCall TROJ_GEN.F47V0825
Lavasoft Ad-Aware Gen:Adware.Plush.1
AhnLab-V3 PUP/Win32.PlusHD
Antiy-AVL not-a-virus:WebToolbar.Win32.CroRi.bei
avast! Win32:Crossrider-H [PUP]
AVG Generic5.AJKB
Avira Adware/CrossRider.A.3762
AVware Crossrider (fs)
Bitdefender Gen:Adware.Plush.1
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.16
Emsisoft Anti-Malware Gen:Adware.Plush.1 (B)
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Secure Gen:Adware.Plush.1
G Data Gen:Adware.Plush.1
K7 AntiVirus Unwanted-Program ( 004ae5c31 )
K7GW Unwanted-Program ( 004ae5c31 )
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
McAfee Artemis!66D8ECD07887
McAfee-GW-Edition BehavesLike.Win32.AdwareAddLyrics.fh
MicroWorld-eScan Gen:Adware.Plush.1
NANO AntiVirus Trojan.Win32.Crossrider.cqktcv
Panda Antivirus PUP/PlusHD
Sophos AppRider
Symantec Adware.Crossid
Trend Micro TROJ_GEN.R0C1C0EJK14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.482
Agnitum Outpost PUA.Toolbar.Crossrider!
ALYac Adware.Generic.1078994
Jiangmin AdWare/Lyckriks.cu
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Vba32 AntiVirus AdWare.Lyckriks
Plus-HD-2.6-updater.exe (MD5: de8cff001815c660e8f5add42c104284) has been flagged by 6 scanners:
Scanner Software Result
ESET-NOD32 probably a variant of Win32/Toolbar.CrossRider.I
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.PlusHD.A
McAfee Artemis!DE8CFF001815
McAfee-GW-Edition Artemis!DE8CFF001815
VIPRE Antivirus Crossrider (fs)
Plus-HD-2.6-enabler.exe (MD5: 66d8ecd078872684d946c6b50a9b887d) has been flagged by 37 scanners:
Scanner Software Result
Lavasoft Ad-Aware Gen:Adware.Plush.1
AhnLab-V3 PUP/Win32.PlusHD
Antiy-AVL not-a-virus:WebToolbar.Win32.CroRi.bei
avast! Win32:Crossrider-H [PUP]
AVG Generic5.AJKB
Avira Adware/CrossRider.A.3762
AVware Crossrider (fs)
Baidu-International PUA.Win32.CrossRider.BJ
Bitdefender Gen:Adware.Plush.1
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.16
Emsisoft Anti-Malware Gen:Adware.Plush.1 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Secure Gen:Adware.Plush.1
G Data Gen:Adware.Plush.1
K7 AntiVirus Unwanted-Program ( 004ae5c31 )
K7GW Unwanted-Program ( 004ae5c31 )
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
Malwarebytes PUP.Optional.HDPlus.A
McAfee Artemis!66D8ECD07887
McAfee-GW-Edition BehavesLike.Win32.AdwareAddLyrics.fh
MicroWorld-eScan Gen:Adware.Plush.1
NANO AntiVirus Trojan.Win32.Crossrider.cqktcv
Panda Antivirus PUP/PlusHD
Sophos AppRider
Symantec Adware.Crossid
Trend Micro TROJ_GEN.R0C1C0EJK14
TrendMicro-HouseCall TROJ_GEN.R0C1C0EJK14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.482
Agnitum Outpost PUA.Toolbar.Crossrider!
ALYac Adware.Generic.1078994
Bkav FE W64.HfsAdware.93C0
Jiangmin AdWare/Lyckriks.cu
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Vba32 AntiVirus AdWare.Lyckriks
Plus-HD-2.6-codedownloader.exe (MD5: 4f84b8aa182058a97a6aff4840bbc517) has been flagged by 4 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.I
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.PlusHD.A
VIPRE Antivirus Crossrider (fs)
Plus-HD-2.6-chromeinstaller.exe (MD5: a67f7b93d2a93190f8a180497a2763e2) has been flagged by 3 scanners:
Scanner Software Result
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Malwarebytes PUP.Optional.PlusHD.A
VIPRE Antivirus Crossrider (fs)

Software Behaviors

Scheduled tasks:
  • Plus-HD-2.6-enabler.exe is scheduled as a task named 'temp_Plus-HD-2.6-enabler'.

Startup Entries

Startup tasks:
  • Plus-HD-2.6-updater.exe is automatically launched at startup through a scheduled task named Plus-HD-2.6-updater.
  • Plus-HD-2.6-firefoxinstaller.exe is automatically launched at startup through a scheduled task named Plus-HD-2.6-firefoxinstaller.
  • Plus-HD-2.6-enabler.exe is automatically launched at startup through a scheduled task named Plus-HD-2.6-enabler.
  • Plus-HD-2.6-codedownloader.exe is automatically launched at startup through a scheduled task named Plus-HD-2.6-codedownloader.
  • Plus-HD-2.6-chromeinstaller.exe is automatically launched at startup through a scheduled task named Plus-HD-2.6-chromeinstaller.

Software Details

URL:
https://plus-hd.com
Support:
–
Installation path:
C:\Program Files\plus-hd-2.6
Uninstaller:
C:\Program Files\Plus-HD-2.6\Uninstall.exe
Size:
5.00 MB
Language:
English

Plus-HD-2.6 Executable Details

Primary executable:
utils.exe
Name:
Plus-HD-2.6
Path:
C:\Program Files\plus-hd-2.6\utils.exe
MD5:
c49e36ac96ceeb49b8d3ebca18c858ae
SHA-1:
–
SHA-256:
–
Files installed by Plus-HD-2.6
File Type Filename MD5
EXE
Plus-HD-2.6-buttonutil.exe
3b5670b3fd7dcbe4a9ee7a2ea1c9168e
DLL
Plus-HD-2.6-bho64.dll
Adware
fd56542481f13483bd797792292192ed
DLL
Plus-HD-2.6-bho.dll
Malware
097aa0bdaab8f1d0b60e7ba02c4bf22d
EXE
Plus-HD-2.6-bg.exe
301d69b12b04ead8f84a7bcec7af4aa0
DLL
Plus-HD-2.6-buttonutil64.dll
b54094c7aa1ab8ea5a94bf4f234404c4