Freeven pro 1.2

Freeven pro 1.2

Known Adware

by Kimahri Software inc.

What is Freeven pro 1.2?

Freeven pro 1.2 is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 62.22% of installations running this operating system. Freeven pro 1.2's installer is typically 8.00 MB in size and installs around 142 files. The most common release is 1.34.4.10 with 56.67% of all installations currently using this version.

Freeven pro 1.2 is most popular in France with 32.22% of installations residing in this country.

Freeven pro 1.2 adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About Freeven pro 1.2?

Freeven Pro is a web browser plugin that enhances the user's browsing experience by delivering relevant and targeted advertising. This software may display a variety of advertisements including banners, popups, popunders, and text-hyperlinks. It is designed to provide users with potentially useful content while they browse the internet.

Multiple virus scanners have detected malware in Freeven pro 1.2.

utils.exe (MD5: b51f5fb5bdc68ffba96c07b1374ba709) has been flagged by 39 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
G Data Win32.Trojan.Agent.X9Z0BI
Kingsoft AntiVirus Win32.Troj.Generic_a.a.(kcloud)
Malwarebytes PUP.Optional.Feven.A
TrendMicro-HouseCall TROJ_GEN.F47V0505
Lavasoft Ad-Aware Gen:Application.Heur.Du1@m0hEdtmO
AhnLab-V3 PUP/Win32.CrossRider
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.CroRi.bei
avast! Win32:Crossrider-AG [PUP]
AVG CrossRider.A
Avira TR/Spy.ZBot.sifbd
AVware Crossrider (fs)
Bitdefender Gen:Application.Heur.Du1@m0hEdtmO
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.19952
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/S-a64d6097!Eldorado
F-Secure Gen:Application.Heur.Du1@m0hEdtmO
IKARUS anti.virus Trojan.Spy.ZBot
K7 AntiVirus Unwanted-Program ( 004ae5be1 )
K7GW Unwanted-Program ( 004ae5be1 )
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.gh
MicroWorld-eScan Gen:Application.Heur.Du1@m0hEdtmO
NANO AntiVirus Trojan.Win32.Crossrider.cztbsb
Panda Antivirus PUP/PlusHD
Qihoo-360 Win32/Trojan.34d
Sophos AppRider
Symantec Adware.Crossid!gen1
Trend Micro TROJ_GEN.R0C1C0EJM14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.1158
Agnitum Outpost PUA.Toolbar.CrossRider!
Avira AntiVir Adware/CrossRider.AB
Emsisoft Anti-Malware Adware.Generic.937044 (B)
Rising Antivirus PE:Trojan.Win32.Generic.16C09263!381719139
82ae69f3-1d7e-4dcd-9988-2754b1ab4ab5-2.exe (MD5: 87a59a937da1e7a39853aed134c9c3ff) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.AD
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!87A59A937DA1
McAfee-GW-Edition Adware-CrossR!87A59A937DA1
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Sophos AppRider
TrendMicro-HouseCall TROJ_GEN.F47V0510
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-5.exe (MD5: 23a60e06dbf4b8b026cf5c64a41b5e6b) has been flagged by 11 scanners:
Scanner Software Result
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!23A60E06DBF4
McAfee-GW-Edition Adware-CrossR!23A60E06DBF4
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-4.exe (MD5: 4a7c1dd55da5fb516ad6c0cf4fc245f6) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.3158
Baidu-International Adware.Win32.CrossRider.AD
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!4A7C1DD55DA5
McAfee-GW-Edition Adware-CrossR!4A7C1DD55DA5
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Generic5.ARQF
Sophos AppRider
TrendMicro-HouseCall TROJ_GEN.F47V0510
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-3.exe (MD5: 3495d1d442ef3f6e94a046e1a8bb855e) has been flagged by 26 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.3181
Baidu-International Adware.Win32.CrossRider.AD
Bitdefender Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.374062 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
F-Secure Gen:Variant.Adware.Kazy.374062
G Data Gen:Variant.Adware.Kazy.374062
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!3495D1D442EF
McAfee-GW-Edition Adware-CrossR!3495D1D442EF
MicroWorld-eScan Gen:Variant.Adware.Kazy.374062
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Agnitum Outpost PUA.Toolbar.CrossRider!
Antiy-AVL Trojan/Win32.SGeneric
AVG Agent.X
Fortinet FortiGate Riskware/Toolbar_CrossRider
IKARUS anti.virus AdWare.CrossRider
Sophos Generic PUA ID
Qihoo-360 Win32/Virus.Adware.244
TrendMicro-HouseCall TROJ_GEN.F47V0429
Symantec Adware.BL
Comodo Security ApplicUnwnt
Bkav FE W32.CrossRider.Trojan
avast! Win32:Malware-gen
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)

Software Behaviors

Scheduled tasks:
  • 3a5251b6-001c-41b9-abed-e5533a7352ad-2.exe is scheduled as a task named 'temp_3a5251b6-001c-41b9-abed-e5533a7352ad-2'.

Startup Entries

Startup tasks:
  • Freeven pro 1.2-codedownloader.exe is automatically launched at startup through a scheduled task named 58ca19a3-7453-414d-9a34-2a6d788be601-6.
  • Freeven pro 1.2-nova.exe is automatically launched at startup through a scheduled task named 58ca19a3-7453-414d-9a34-2a6d788be601-7.
  • 4990dbc4-063d-41b4-a280-e9fab40f04de-4.exe is automatically launched at startup through a scheduled task named 4990dbc4-063d-41b4-a280-e9fab40f04de-4.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-5.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-5.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-4.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-4.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-2.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-2.

Software Details

URL:
–
Support:
–
Installation path:
C:\Program Files\freeven pro 1.2
Uninstaller:
C:\Program Files\Freeven pro 1.2\Uninstall.exe /fcp=1
Size:
8.00 MB
Language:
English

Freeven pro 1.2 Executable Details

Primary executable:
utils.exe
Name:
Freeven pro 1.2
Path:
C:\Program Files\freeven pro 1.2\utils.exe
MD5:
b51f5fb5bdc68ffba96c07b1374ba709
SHA-1:
–
SHA-256:
–
Files installed by Freeven pro 1.2
File Type Filename MD5
EXE
5d085cea-75f7-4372-ae4a-edba9d3f39d1-3.exe
Adware
d6c6ffe47d8bf4d96053c2e63cc86c80
EXE
5d085cea-75f7-4372-ae4a-edba9d3f39d1-2.exe
Adware
e094c6adeeab341a9c5e6ffec5809db8
EXE
58ca19a3-7453-414d-9a34-2a6d788be601-5.exe
Adware
bacd189ff8502641acf831625071ac16
EXE
58ca19a3-7453-414d-9a34-2a6d788be601-4.exe
Adware
e8b58d995b27413fa48473f6101ca7cb
EXE
58ca19a3-7453-414d-9a34-2a6d788be601-3.exe
Toolbar
bfb5e5af6d590d006e549cdf62c3c15a
EXE
58ca19a3-7453-414d-9a34-2a6d788be601-2.exe
Malware
5d9848224152f136b508d160eb8367d6
EXE
56e24faf-5a5a-4ae9-b26e-23b5f791f1ce-5.exe
Malware
41362278f71467ad3f51ef6bd4bb9fcd
EXE
56e24faf-5a5a-4ae9-b26e-23b5f791f1ce-4.exe
Malware
78f86f12d38c1fbc4d891332b5c6172d
EXE
56e24faf-5a5a-4ae9-b26e-23b5f791f1ce-3.exe
Adware
b35dab6661ecc247eacb480e4f57561e
EXE
56e24faf-5a5a-4ae9-b26e-23b5f791f1ce-2.exe
Adware
e3f9232f5d3bedd6f33bfd5673dbcc45