Freeven pro 1.2

Freeven pro 1.2

Known Adware

by Kimahri Software inc.

What is Freeven pro 1.2?

Freeven pro 1.2 is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 62.22% of installations running this operating system. Freeven pro 1.2's installer is typically 8.00 MB in size and installs around 142 files. The most common release is 1.34.4.10 with 56.67% of all installations currently using this version.

Freeven pro 1.2 is most popular in France with 32.22% of installations residing in this country.

Freeven pro 1.2 adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About Freeven pro 1.2?

Freeven Pro is a web browser plugin that enhances the user's browsing experience by delivering relevant and targeted advertising. This software may display a variety of advertisements including banners, popups, popunders, and text-hyperlinks. It is designed to provide users with potentially useful content while they browse the internet.

Multiple virus scanners have detected malware in Freeven pro 1.2.

utils.exe (MD5: b51f5fb5bdc68ffba96c07b1374ba709) has been flagged by 39 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
G Data Win32.Trojan.Agent.X9Z0BI
Kingsoft AntiVirus Win32.Troj.Generic_a.a.(kcloud)
Malwarebytes PUP.Optional.Feven.A
TrendMicro-HouseCall TROJ_GEN.F47V0505
Lavasoft Ad-Aware Gen:Application.Heur.Du1@m0hEdtmO
AhnLab-V3 PUP/Win32.CrossRider
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.CroRi.bei
avast! Win32:Crossrider-AG [PUP]
AVG CrossRider.A
Avira TR/Spy.ZBot.sifbd
AVware Crossrider (fs)
Bitdefender Gen:Application.Heur.Du1@m0hEdtmO
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.19952
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/S-a64d6097!Eldorado
F-Secure Gen:Application.Heur.Du1@m0hEdtmO
IKARUS anti.virus Trojan.Spy.ZBot
K7 AntiVirus Unwanted-Program ( 004ae5be1 )
K7GW Unwanted-Program ( 004ae5be1 )
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.gh
MicroWorld-eScan Gen:Application.Heur.Du1@m0hEdtmO
NANO AntiVirus Trojan.Win32.Crossrider.cztbsb
Panda Antivirus PUP/PlusHD
Qihoo-360 Win32/Trojan.34d
Sophos AppRider
Symantec Adware.Crossid!gen1
Trend Micro TROJ_GEN.R0C1C0EJM14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.1158
Agnitum Outpost PUA.Toolbar.CrossRider!
Avira AntiVir Adware/CrossRider.AB
Emsisoft Anti-Malware Adware.Generic.937044 (B)
Rising Antivirus PE:Trojan.Win32.Generic.16C09263!381719139
82ae69f3-1d7e-4dcd-9988-2754b1ab4ab5-2.exe (MD5: 87a59a937da1e7a39853aed134c9c3ff) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.AD
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!87A59A937DA1
McAfee-GW-Edition Adware-CrossR!87A59A937DA1
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Sophos AppRider
TrendMicro-HouseCall TROJ_GEN.F47V0510
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-5.exe (MD5: 23a60e06dbf4b8b026cf5c64a41b5e6b) has been flagged by 11 scanners:
Scanner Software Result
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!23A60E06DBF4
McAfee-GW-Edition Adware-CrossR!23A60E06DBF4
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-4.exe (MD5: 4a7c1dd55da5fb516ad6c0cf4fc245f6) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.3158
Baidu-International Adware.Win32.CrossRider.AD
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!4A7C1DD55DA5
McAfee-GW-Edition Adware-CrossR!4A7C1DD55DA5
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Generic5.ARQF
Sophos AppRider
TrendMicro-HouseCall TROJ_GEN.F47V0510
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-3.exe (MD5: 3495d1d442ef3f6e94a046e1a8bb855e) has been flagged by 26 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.3181
Baidu-International Adware.Win32.CrossRider.AD
Bitdefender Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.374062 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
F-Secure Gen:Variant.Adware.Kazy.374062
G Data Gen:Variant.Adware.Kazy.374062
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!3495D1D442EF
McAfee-GW-Edition Adware-CrossR!3495D1D442EF
MicroWorld-eScan Gen:Variant.Adware.Kazy.374062
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Agnitum Outpost PUA.Toolbar.CrossRider!
Antiy-AVL Trojan/Win32.SGeneric
AVG Agent.X
Fortinet FortiGate Riskware/Toolbar_CrossRider
IKARUS anti.virus AdWare.CrossRider
Sophos Generic PUA ID
Qihoo-360 Win32/Virus.Adware.244
TrendMicro-HouseCall TROJ_GEN.F47V0429
Symantec Adware.BL
Comodo Security ApplicUnwnt
Bkav FE W32.CrossRider.Trojan
avast! Win32:Malware-gen
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)

Software Behaviors

Scheduled tasks:
  • 3a5251b6-001c-41b9-abed-e5533a7352ad-2.exe is scheduled as a task named 'temp_3a5251b6-001c-41b9-abed-e5533a7352ad-2'.

Startup Entries

Startup tasks:
  • Freeven pro 1.2-codedownloader.exe is automatically launched at startup through a scheduled task named 58ca19a3-7453-414d-9a34-2a6d788be601-6.
  • Freeven pro 1.2-nova.exe is automatically launched at startup through a scheduled task named 58ca19a3-7453-414d-9a34-2a6d788be601-7.
  • 4990dbc4-063d-41b4-a280-e9fab40f04de-4.exe is automatically launched at startup through a scheduled task named 4990dbc4-063d-41b4-a280-e9fab40f04de-4.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-5.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-5.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-4.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-4.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-2.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-2.

Software Details

URL:
–
Support:
–
Installation path:
C:\Program Files\freeven pro 1.2
Uninstaller:
C:\Program Files\Freeven pro 1.2\Uninstall.exe /fcp=1
Size:
8.00 MB
Language:
English

Freeven pro 1.2 Executable Details

Primary executable:
utils.exe
Name:
Freeven pro 1.2
Path:
C:\Program Files\freeven pro 1.2\utils.exe
MD5:
b51f5fb5bdc68ffba96c07b1374ba709
SHA-1:
–
SHA-256:
–
Files installed by Freeven pro 1.2
File Type Filename MD5
EXE
6aed6323-ffe2-4460-9bef-d21d53747009-5.exe
Adware
db2a53e4e2cdaa3f03bcfd3a902bc297
EXE
6aed6323-ffe2-4460-9bef-d21d53747009-4.exe
Adware
2e57060dbdb2cd58650a0544a1ee33cf
EXE
6aed6323-ffe2-4460-9bef-d21d53747009-3.exe
Adware
75b128e71c7f0c1ee585bc651cc4e27a
EXE
6aed6323-ffe2-4460-9bef-d21d53747009-2.exe
Adware
316c6dd1ee9a487a94edb7dd84c46de9
EXE
5f8261d5-5589-42ca-b905-285ec40413eb-5.exe
Malware
903fe0644e39e79be33da85e3bfada01
EXE
5f8261d5-5589-42ca-b905-285ec40413eb-4.exe
Malware
2c1ef4a19ba761c9b27b7f6ffc833ec1
EXE
5f8261d5-5589-42ca-b905-285ec40413eb-3.exe
Toolbar
74380139754b10d7ca368166df209abd
EXE
5f8261d5-5589-42ca-b905-285ec40413eb-2.exe
Adware
f72f4c97c7c6f7111d5fe9465accd725
EXE
5d085cea-75f7-4372-ae4a-edba9d3f39d1-5.exe
Malware
42e5fba7369c87399c6414f79f796f20
EXE
5d085cea-75f7-4372-ae4a-edba9d3f39d1-4.exe
Adware
3aab48cc98b0da9268b20004f89fa773