Freeven pro 1.2

Freeven pro 1.2

Known Adware

by Kimahri Software inc.

What is Freeven pro 1.2?

Freeven pro 1.2 is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 62.22% of installations running this operating system. Freeven pro 1.2's installer is typically 8.00 MB in size and installs around 142 files. The most common release is 1.34.4.10 with 56.67% of all installations currently using this version.

Freeven pro 1.2 is most popular in France with 32.22% of installations residing in this country.

Freeven pro 1.2 adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About Freeven pro 1.2?

Freeven Pro is a web browser plugin that enhances the user's browsing experience by delivering relevant and targeted advertising. This software may display a variety of advertisements including banners, popups, popunders, and text-hyperlinks. It is designed to provide users with potentially useful content while they browse the internet.

Multiple virus scanners have detected malware in Freeven pro 1.2.

utils.exe (MD5: b51f5fb5bdc68ffba96c07b1374ba709) has been flagged by 39 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
G Data Win32.Trojan.Agent.X9Z0BI
Kingsoft AntiVirus Win32.Troj.Generic_a.a.(kcloud)
Malwarebytes PUP.Optional.Feven.A
TrendMicro-HouseCall TROJ_GEN.F47V0505
Lavasoft Ad-Aware Gen:Application.Heur.Du1@m0hEdtmO
AhnLab-V3 PUP/Win32.CrossRider
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.CroRi.bei
avast! Win32:Crossrider-AG [PUP]
AVG CrossRider.A
Avira TR/Spy.ZBot.sifbd
AVware Crossrider (fs)
Bitdefender Gen:Application.Heur.Du1@m0hEdtmO
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.19952
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/S-a64d6097!Eldorado
F-Secure Gen:Application.Heur.Du1@m0hEdtmO
IKARUS anti.virus Trojan.Spy.ZBot
K7 AntiVirus Unwanted-Program ( 004ae5be1 )
K7GW Unwanted-Program ( 004ae5be1 )
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.gh
MicroWorld-eScan Gen:Application.Heur.Du1@m0hEdtmO
NANO AntiVirus Trojan.Win32.Crossrider.cztbsb
Panda Antivirus PUP/PlusHD
Qihoo-360 Win32/Trojan.34d
Sophos AppRider
Symantec Adware.Crossid!gen1
Trend Micro TROJ_GEN.R0C1C0EJM14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.1158
Agnitum Outpost PUA.Toolbar.CrossRider!
Avira AntiVir Adware/CrossRider.AB
Emsisoft Anti-Malware Adware.Generic.937044 (B)
Rising Antivirus PE:Trojan.Win32.Generic.16C09263!381719139
82ae69f3-1d7e-4dcd-9988-2754b1ab4ab5-2.exe (MD5: 87a59a937da1e7a39853aed134c9c3ff) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.AD
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!87A59A937DA1
McAfee-GW-Edition Adware-CrossR!87A59A937DA1
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Sophos AppRider
TrendMicro-HouseCall TROJ_GEN.F47V0510
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-5.exe (MD5: 23a60e06dbf4b8b026cf5c64a41b5e6b) has been flagged by 11 scanners:
Scanner Software Result
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!23A60E06DBF4
McAfee-GW-Edition Adware-CrossR!23A60E06DBF4
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-4.exe (MD5: 4a7c1dd55da5fb516ad6c0cf4fc245f6) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.3158
Baidu-International Adware.Win32.CrossRider.AD
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!4A7C1DD55DA5
McAfee-GW-Edition Adware-CrossR!4A7C1DD55DA5
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Generic5.ARQF
Sophos AppRider
TrendMicro-HouseCall TROJ_GEN.F47V0510
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-3.exe (MD5: 3495d1d442ef3f6e94a046e1a8bb855e) has been flagged by 26 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.3181
Baidu-International Adware.Win32.CrossRider.AD
Bitdefender Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.374062 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
F-Secure Gen:Variant.Adware.Kazy.374062
G Data Gen:Variant.Adware.Kazy.374062
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!3495D1D442EF
McAfee-GW-Edition Adware-CrossR!3495D1D442EF
MicroWorld-eScan Gen:Variant.Adware.Kazy.374062
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Agnitum Outpost PUA.Toolbar.CrossRider!
Antiy-AVL Trojan/Win32.SGeneric
AVG Agent.X
Fortinet FortiGate Riskware/Toolbar_CrossRider
IKARUS anti.virus AdWare.CrossRider
Sophos Generic PUA ID
Qihoo-360 Win32/Virus.Adware.244
TrendMicro-HouseCall TROJ_GEN.F47V0429
Symantec Adware.BL
Comodo Security ApplicUnwnt
Bkav FE W32.CrossRider.Trojan
avast! Win32:Malware-gen
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)

Software Behaviors

Scheduled tasks:
  • 3a5251b6-001c-41b9-abed-e5533a7352ad-2.exe is scheduled as a task named 'temp_3a5251b6-001c-41b9-abed-e5533a7352ad-2'.

Startup Entries

Startup tasks:
  • Freeven pro 1.2-codedownloader.exe is automatically launched at startup through a scheduled task named 58ca19a3-7453-414d-9a34-2a6d788be601-6.
  • Freeven pro 1.2-nova.exe is automatically launched at startup through a scheduled task named 58ca19a3-7453-414d-9a34-2a6d788be601-7.
  • 4990dbc4-063d-41b4-a280-e9fab40f04de-4.exe is automatically launched at startup through a scheduled task named 4990dbc4-063d-41b4-a280-e9fab40f04de-4.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-5.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-5.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-4.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-4.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-2.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-2.

Software Details

URL:
–
Support:
–
Installation path:
C:\Program Files\freeven pro 1.2
Uninstaller:
C:\Program Files\Freeven pro 1.2\Uninstall.exe /fcp=1
Size:
8.00 MB
Language:
English

Freeven pro 1.2 Executable Details

Primary executable:
utils.exe
Name:
Freeven pro 1.2
Path:
C:\Program Files\freeven pro 1.2\utils.exe
MD5:
b51f5fb5bdc68ffba96c07b1374ba709
SHA-1:
–
SHA-256:
–
Files installed by Freeven pro 1.2
File Type Filename MD5
EXE
c47fe85d-d5c2-4d58-a71f-a1b8cb0a7bb6-3.exe
Adware
7203012dc5fd6a7e6813adc225e3bfea
EXE
c47fe85d-d5c2-4d58-a71f-a1b8cb0a7bb6-4.exe
Adware
ffc9fa37d13274df263e4f486e789521
EXE
c47fe85d-d5c2-4d58-a71f-a1b8cb0a7bb6-5.exe
Adware
24b39f4c8137b1dd0a05497d71870f55
EXE
9c402e05-3dbb-480c-ac63-356184b4cc5b-2.exe
Adware
ba4252aaa5e9c5a7c34b7d929fdec7a1
EXE
f60f16fa-4f30-455f-8bc1-8d90496ebf71-3.exe
Adware
069ccd24f3271f15848d12d956980e24
EXE
f60f16fa-4f30-455f-8bc1-8d90496ebf71-4.exe
Adware
bb339de4668d0e7ab0e37a1a26ea08e8
EXE
f60f16fa-4f30-455f-8bc1-8d90496ebf71-5.exe
Adware
f5b0245945a74ae345763c693c697865
EXE
d65aac7a-2a4c-469e-b060-bafacbc6072c-2.exe
Adware
5f4d8f22a0362371d6652747668fd055
EXE
d65aac7a-2a4c-469e-b060-bafacbc6072c-3.exe
Adware
9b82ee669f1960e4cdc824bac9b0d8bb
EXE
d65aac7a-2a4c-469e-b060-bafacbc6072c-4.exe
Adware
48b1050c5e056c38e3dd529171ba333d