Fun2SavEE

Fun2SavEE

Known Toolbar

by InstalleRex-WebPick

What is Fun2SavEE?

Fun2SavEE is software application developed by InstalleRex-WebPick. It is most commonly found on computers running Windows 7 with nearly ~99% of installations running this operating system. Fun2SavEE's installer is typically 1.00 MB in size and installs around 3 files.

Fun2SavEE is most popular in the United States with 100.00% of installations residing in this country.

About Fun2SavEE?

Fun2Save is a browser extension that integrates with Internet Explorer, Chrome, and Firefox, delivering additional advertisements within popular search engines like Bing and Google. It functions as a BHO/plugin and operates as a background process. Although it can be uninstalled from the Add or Remove Programs, the removal may not cease the display of ads. Once installed, Fun2Save injects new ads into search results and various web pages that utilize third-party advertising, substituting them with its own. It utilizes the InstalleRex download manager from WebPicks Holdings for installation, which is recognized for distributing potentially unwanted applications, including web browser toolbars and ad-supported extensions. While the software has been re-branded, it shares many components with known adware variants such as SaveAs, SaveNShare, and DownloadKeeper.

Multiple virus scanners have detected malware in Fun2SavEE.

tvzWvPR.x64.dll (MD5: 9e0383fb82ce83bd785951c20f3fe959) has been flagged by 4 scanners:
Scanner Software Result
AhnLab-V3 Trojan/Win32.Preloader
Baidu-International Adware.Win64.MultiPlug.A
ESET-NOD32 a variant of Win64/Adware.MultiPlug.A
Malwarebytes PUP.Optional.MultiPlug.A
tvzWvPR.dll (MD5: 1550537f5aee53fec3b74eb4605f8483) has been flagged by 12 scanners:
Scanner Software Result
Avira AntiVir ADWARE/Adware.Gen
AVG Generic5.ALFJ
Baidu-International Adware.Win32.MultiPlug.40
Comodo Security ApplicUnwnt
ESET-NOD32 a variant of Win32/AdWare.MultiPlug.N
K7 AntiVirus Adware ( 004923a41 )
K7GW Adware ( 004923a41 )
Malwarebytes PUP.Optional.MultiPlug.A
Rising Antivirus PE:Malware.Adware!6.1293
TrendMicro-HouseCall TROJ_GEN.F47V1230
VIPRE Antivirus JustPlugIt (fs)
AhnLab-V3 Trojan/Win32.Preloader
tvzWvPR.exe (MD5: f5bff621c4c58358b36f8526dec8a264) has been flagged by 27 scanners:
Scanner Software Result
Agnitum Outpost Adware.MegaSearch
AhnLab-V3 Trojan/Win32.Preloader
Antiy-AVL AdWare/Win32.MegaSearch
avast! Win32:Adware-gen [Adw]
AVG Generic5
Baidu-International Adware.Win32.MegaSearch.aBc
Bkav FE W32.Clod3fd.Trojan
Comodo Security ApplicUnwnt
ESET-NOD32 a variant of Win32/AdWare.MultiPlug.K.gen
Fortinet FortiGate Adware/Megasearch
IKARUS anti.virus Win32.AdWare
K7 AntiVirus Adware
K7GW Adware ( 00490ca81 )
Kaspersky not-a-virus:AdWare.Win32.MegaSearch
Kingsoft AntiVirus Win32.Troj.MegaSearch.at.(kcloud)
Malwarebytes PUP.Optional.CRXDrop.A
McAfee Artemis!F5BFF621C4C5
McAfee-GW-Edition Artemis!F5BFF621C4C5
Panda Antivirus Trj/Genetic.gen
Sophos Generic PUA BJ
Symantec Trojan.Gen
Trend Micro TROJ_GEN.F0C2C00A414
TrendMicro-HouseCall TROJ_GEN.F0C2C00A414
Vba32 AntiVirus BScope.Trojan.Agent
VIPRE Antivirus Trojan.Win32.Generic!BT
Avira AntiVir ADWARE/Adware.Gen
Rising Antivirus PE:Malware.Adware!6.1293

Software Details

URL:
https://justplug.it
Support:
Installation path:
C:\ProgramData\fun2savee
Uninstaller:
"C:\ProgramData\Fun2SavEE\tvzWvPR.exe" /s /n /C:"ExecuteCommands;UninstallCommands" ""
Size:
1.00 MB
Language:
English

Fun2SavEE Executable Details

Primary executable:
tvzWvPR.exe
Name:
Fun2SavEE
Path:
C:\ProgramData\fun2savee\tvzWvPR.exe
MD5:
f5bff621c4c58358b36f8526dec8a264
SHA-1:
SHA-256:
Files installed by Fun2SavEE
File Type Filename MD5
DLL
9e0383fb82ce83bd785951c20f3fe959
DLL
1550537f5aee53fec3b74eb4605f8483
EXE
f5bff621c4c58358b36f8526dec8a264