Freeven pro 1.2

Freeven pro 1.2

Known Adware

by Kimahri Software inc.

What is Freeven pro 1.2?

Freeven pro 1.2 is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 62.22% of installations running this operating system. Freeven pro 1.2's installer is typically 8.00 MB in size and installs around 142 files. The most common release is 1.34.4.10 with 56.67% of all installations currently using this version.

Freeven pro 1.2 is most popular in France with 32.22% of installations residing in this country.

Freeven pro 1.2 adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About Freeven pro 1.2?

Freeven Pro is a web browser plugin that enhances the user's browsing experience by delivering relevant and targeted advertising. This software may display a variety of advertisements including banners, popups, popunders, and text-hyperlinks. It is designed to provide users with potentially useful content while they browse the internet.

Multiple virus scanners have detected malware in Freeven pro 1.2.

utils.exe (MD5: b51f5fb5bdc68ffba96c07b1374ba709) has been flagged by 39 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
G Data Win32.Trojan.Agent.X9Z0BI
Kingsoft AntiVirus Win32.Troj.Generic_a.a.(kcloud)
Malwarebytes PUP.Optional.Feven.A
TrendMicro-HouseCall TROJ_GEN.F47V0505
Lavasoft Ad-Aware Gen:Application.Heur.Du1@m0hEdtmO
AhnLab-V3 PUP/Win32.CrossRider
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.CroRi.bei
avast! Win32:Crossrider-AG [PUP]
AVG CrossRider.A
Avira TR/Spy.ZBot.sifbd
AVware Crossrider (fs)
Bitdefender Gen:Application.Heur.Du1@m0hEdtmO
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.19952
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/S-a64d6097!Eldorado
F-Secure Gen:Application.Heur.Du1@m0hEdtmO
IKARUS anti.virus Trojan.Spy.ZBot
K7 AntiVirus Unwanted-Program ( 004ae5be1 )
K7GW Unwanted-Program ( 004ae5be1 )
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.gh
MicroWorld-eScan Gen:Application.Heur.Du1@m0hEdtmO
NANO AntiVirus Trojan.Win32.Crossrider.cztbsb
Panda Antivirus PUP/PlusHD
Qihoo-360 Win32/Trojan.34d
Sophos AppRider
Symantec Adware.Crossid!gen1
Trend Micro TROJ_GEN.R0C1C0EJM14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.1158
Agnitum Outpost PUA.Toolbar.CrossRider!
Avira AntiVir Adware/CrossRider.AB
Emsisoft Anti-Malware Adware.Generic.937044 (B)
Rising Antivirus PE:Trojan.Win32.Generic.16C09263!381719139
82ae69f3-1d7e-4dcd-9988-2754b1ab4ab5-2.exe (MD5: 87a59a937da1e7a39853aed134c9c3ff) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.AD
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!87A59A937DA1
McAfee-GW-Edition Adware-CrossR!87A59A937DA1
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Sophos AppRider
TrendMicro-HouseCall TROJ_GEN.F47V0510
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-5.exe (MD5: 23a60e06dbf4b8b026cf5c64a41b5e6b) has been flagged by 11 scanners:
Scanner Software Result
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!23A60E06DBF4
McAfee-GW-Edition Adware-CrossR!23A60E06DBF4
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-4.exe (MD5: 4a7c1dd55da5fb516ad6c0cf4fc245f6) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.3158
Baidu-International Adware.Win32.CrossRider.AD
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!4A7C1DD55DA5
McAfee-GW-Edition Adware-CrossR!4A7C1DD55DA5
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Generic5.ARQF
Sophos AppRider
TrendMicro-HouseCall TROJ_GEN.F47V0510
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-3.exe (MD5: 3495d1d442ef3f6e94a046e1a8bb855e) has been flagged by 26 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.3181
Baidu-International Adware.Win32.CrossRider.AD
Bitdefender Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.374062 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
F-Secure Gen:Variant.Adware.Kazy.374062
G Data Gen:Variant.Adware.Kazy.374062
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!3495D1D442EF
McAfee-GW-Edition Adware-CrossR!3495D1D442EF
MicroWorld-eScan Gen:Variant.Adware.Kazy.374062
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Agnitum Outpost PUA.Toolbar.CrossRider!
Antiy-AVL Trojan/Win32.SGeneric
AVG Agent.X
Fortinet FortiGate Riskware/Toolbar_CrossRider
IKARUS anti.virus AdWare.CrossRider
Sophos Generic PUA ID
Qihoo-360 Win32/Virus.Adware.244
TrendMicro-HouseCall TROJ_GEN.F47V0429
Symantec Adware.BL
Comodo Security ApplicUnwnt
Bkav FE W32.CrossRider.Trojan
avast! Win32:Malware-gen
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)

Software Behaviors

Scheduled tasks:
  • 3a5251b6-001c-41b9-abed-e5533a7352ad-2.exe is scheduled as a task named 'temp_3a5251b6-001c-41b9-abed-e5533a7352ad-2'.

Startup Entries

Startup tasks:
  • Freeven pro 1.2-codedownloader.exe is automatically launched at startup through a scheduled task named 58ca19a3-7453-414d-9a34-2a6d788be601-6.
  • Freeven pro 1.2-nova.exe is automatically launched at startup through a scheduled task named 58ca19a3-7453-414d-9a34-2a6d788be601-7.
  • 4990dbc4-063d-41b4-a280-e9fab40f04de-4.exe is automatically launched at startup through a scheduled task named 4990dbc4-063d-41b4-a280-e9fab40f04de-4.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-5.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-5.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-4.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-4.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-2.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-2.

Software Details

URL:
–
Support:
–
Installation path:
C:\Program Files\freeven pro 1.2
Uninstaller:
C:\Program Files\Freeven pro 1.2\Uninstall.exe /fcp=1
Size:
8.00 MB
Language:
English

Freeven pro 1.2 Executable Details

Primary executable:
utils.exe
Name:
Freeven pro 1.2
Path:
C:\Program Files\freeven pro 1.2\utils.exe
MD5:
b51f5fb5bdc68ffba96c07b1374ba709
SHA-1:
–
SHA-256:
–
Files installed by Freeven pro 1.2
File Type Filename MD5
EXE
3a5251b6-001c-41b9-abed-e5533a7352ad-4.exe
Adware
1ebe31ede8d1ad15dc985070c16f4eb3
EXE
3a5251b6-001c-41b9-abed-e5533a7352ad-3.exe
Malware
381aca4649900db00ea8adb0df62727f
EXE
3a5251b6-001c-41b9-abed-e5533a7352ad-2.exe
Adware
89bc81dccdf129119b42a788c783a368
EXE
38a42648-bd73-4777-8dc8-b17dc2695900-5.exe
Malware
764b42fa3db596dcd6fb4cefafc6b3fd
EXE
38a42648-bd73-4777-8dc8-b17dc2695900-4.exe
Adware
fc4f4426b55852830dd3388b67575308
EXE
38a42648-bd73-4777-8dc8-b17dc2695900-3.exe
Malware
5883d8cf5fef56f50f33987cbb6fa739
EXE
38a42648-bd73-4777-8dc8-b17dc2695900-2.exe
Adware
4c0e979cd93f1953f0b60baf4ba1471d
EXE
189fc146-3210-49a3-8b2d-e928f9f2561f-5.exe
Adware
bf365994a16c71f855389ebad9b1931f
EXE
189fc146-3210-49a3-8b2d-e928f9f2561f-4.exe
Toolbar
dcbcc2585e534e5e17e4083231cdcd14
EXE
189fc146-3210-49a3-8b2d-e928f9f2561f-3.exe
Adware
067aaaaa4ab4a3d85b8f07670a8b167a