Freeven pro 1.2

Freeven pro 1.2

Known Adware

by Kimahri Software inc.

What is Freeven pro 1.2?

Freeven pro 1.2 is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 62.22% of installations running this operating system. Freeven pro 1.2's installer is typically 8.00 MB in size and installs around 142 files. The most common release is 1.34.4.10 with 56.67% of all installations currently using this version.

Freeven pro 1.2 is most popular in France with 32.22% of installations residing in this country.

Freeven pro 1.2 adds 1 scheduled task to the Windows Task Scheduler launching the program at randomly scheduled times.

About Freeven pro 1.2?

Freeven Pro is a web browser plugin that enhances the user's browsing experience by delivering relevant and targeted advertising. This software may display a variety of advertisements including banners, popups, popunders, and text-hyperlinks. It is designed to provide users with potentially useful content while they browse the internet.

Multiple virus scanners have detected malware in Freeven pro 1.2.

utils.exe (MD5: b51f5fb5bdc68ffba96c07b1374ba709) has been flagged by 39 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
G Data Win32.Trojan.Agent.X9Z0BI
Kingsoft AntiVirus Win32.Troj.Generic_a.a.(kcloud)
Malwarebytes PUP.Optional.Feven.A
TrendMicro-HouseCall TROJ_GEN.F47V0505
Lavasoft Ad-Aware Gen:Application.Heur.Du1@m0hEdtmO
AhnLab-V3 PUP/Win32.CrossRider
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.CroRi.bei
avast! Win32:Crossrider-AG [PUP]
AVG CrossRider.A
Avira TR/Spy.ZBot.sifbd
AVware Crossrider (fs)
Bitdefender Gen:Application.Heur.Du1@m0hEdtmO
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.19952
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/S-a64d6097!Eldorado
F-Secure Gen:Application.Heur.Du1@m0hEdtmO
IKARUS anti.virus Trojan.Spy.ZBot
K7 AntiVirus Unwanted-Program ( 004ae5be1 )
K7GW Unwanted-Program ( 004ae5be1 )
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.gh
MicroWorld-eScan Gen:Application.Heur.Du1@m0hEdtmO
NANO AntiVirus Trojan.Win32.Crossrider.cztbsb
Panda Antivirus PUP/PlusHD
Qihoo-360 Win32/Trojan.34d
Sophos AppRider
Symantec Adware.Crossid!gen1
Trend Micro TROJ_GEN.R0C1C0EJM14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.1158
Agnitum Outpost PUA.Toolbar.CrossRider!
Avira AntiVir Adware/CrossRider.AB
Emsisoft Anti-Malware Adware.Generic.937044 (B)
Rising Antivirus PE:Trojan.Win32.Generic.16C09263!381719139
82ae69f3-1d7e-4dcd-9988-2754b1ab4ab5-2.exe (MD5: 87a59a937da1e7a39853aed134c9c3ff) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.AD
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!87A59A937DA1
McAfee-GW-Edition Adware-CrossR!87A59A937DA1
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Sophos AppRider
TrendMicro-HouseCall TROJ_GEN.F47V0510
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-5.exe (MD5: 23a60e06dbf4b8b026cf5c64a41b5e6b) has been flagged by 11 scanners:
Scanner Software Result
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!23A60E06DBF4
McAfee-GW-Edition Adware-CrossR!23A60E06DBF4
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-4.exe (MD5: 4a7c1dd55da5fb516ad6c0cf4fc245f6) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.3158
Baidu-International Adware.Win32.CrossRider.AD
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!4A7C1DD55DA5
McAfee-GW-Edition Adware-CrossR!4A7C1DD55DA5
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Generic5.ARQF
Sophos AppRider
TrendMicro-HouseCall TROJ_GEN.F47V0510
IKARUS anti.virus AdWare.MediaPlayerplus
7626c49e-4ebf-4bf6-8742-6371bc0b03ca-3.exe (MD5: 3495d1d442ef3f6e94a046e1a8bb855e) has been flagged by 26 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.3181
Baidu-International Adware.Win32.CrossRider.AD
Bitdefender Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.374062 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
F-Secure Gen:Variant.Adware.Kazy.374062
G Data Gen:Variant.Adware.Kazy.374062
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!3495D1D442EF
McAfee-GW-Edition Adware-CrossR!3495D1D442EF
MicroWorld-eScan Gen:Variant.Adware.Kazy.374062
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Agnitum Outpost PUA.Toolbar.CrossRider!
Antiy-AVL Trojan/Win32.SGeneric
AVG Agent.X
Fortinet FortiGate Riskware/Toolbar_CrossRider
IKARUS anti.virus AdWare.CrossRider
Sophos Generic PUA ID
Qihoo-360 Win32/Virus.Adware.244
TrendMicro-HouseCall TROJ_GEN.F47V0429
Symantec Adware.BL
Comodo Security ApplicUnwnt
Bkav FE W32.CrossRider.Trojan
avast! Win32:Malware-gen
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)

Software Behaviors

Scheduled tasks:
  • 3a5251b6-001c-41b9-abed-e5533a7352ad-2.exe is scheduled as a task named 'temp_3a5251b6-001c-41b9-abed-e5533a7352ad-2'.

Startup Entries

Startup tasks:
  • Freeven pro 1.2-codedownloader.exe is automatically launched at startup through a scheduled task named 58ca19a3-7453-414d-9a34-2a6d788be601-6.
  • Freeven pro 1.2-nova.exe is automatically launched at startup through a scheduled task named 58ca19a3-7453-414d-9a34-2a6d788be601-7.
  • 4990dbc4-063d-41b4-a280-e9fab40f04de-4.exe is automatically launched at startup through a scheduled task named 4990dbc4-063d-41b4-a280-e9fab40f04de-4.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-5.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-5.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-4.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-4.
  • 38a42648-bd73-4777-8dc8-b17dc2695900-2.exe is automatically launched at startup through a scheduled task named 38a42648-bd73-4777-8dc8-b17dc2695900-2.

Software Details

URL:
–
Support:
–
Installation path:
C:\Program Files\freeven pro 1.2
Uninstaller:
C:\Program Files\Freeven pro 1.2\Uninstall.exe /fcp=1
Size:
8.00 MB
Language:
English

Freeven pro 1.2 Executable Details

Primary executable:
utils.exe
Name:
Freeven pro 1.2
Path:
C:\Program Files\freeven pro 1.2\utils.exe
MD5:
b51f5fb5bdc68ffba96c07b1374ba709
SHA-1:
–
SHA-256:
–
Files installed by Freeven pro 1.2
File Type Filename MD5
EXE
03561084-c5c1-4b22-a4ba-ff5b7a313236-4.exe
Malware
439ace7f7ffb8d41db835c03790453a4
EXE
03561084-c5c1-4b22-a4ba-ff5b7a313236-3.exe
Adware
54a56f84b43f8ffc3b442cfa440b86e8
EXE
03561084-c5c1-4b22-a4ba-ff5b7a313236-2.exe
Malware
f7be00ce8faa2fc16dd805e6bde00d6c
EXE
03054d68-2463-4412-9fed-39b5930a908e-4.exe
Malware
f8f9427d468d26b5a1ca3c0c2bf6706d
EXE
03054d68-2463-4412-9fed-39b5930a908e-3.exe
Malware
80bd77b56dad9b91c3c72f8c60f69aea
EXE
9cdcc58c-4ea0-46f9-97ff-4e4807fe74e0-2.exe
Adware
529bd272d964c96ce3f213ed429c50a2
EXE
9cdcc58c-4ea0-46f9-97ff-4e4807fe74e0-3.exe
Adware
ce158c33c38355b98995e5712ec9a50d
EXE
9cdcc58c-4ea0-46f9-97ff-4e4807fe74e0-4.exe
Adware
5f0c28a322c767fe18a7f9033b018a46
EXE
9cdcc58c-4ea0-46f9-97ff-4e4807fe74e0-5.exe
Adware
46f9655881541722c64819b5b6911e4e
EXE
Freeven pro 1.2-bg.exe
3e9b8567ae13880e834107364d52ca9c