Freeven pro

Freeven pro

Known Adware

by Kimahri Software inc.

What is Freeven pro?

Freeven pro is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 57.32% of installations running this operating system. Freeven pro's installer is typically 7.00 MB in size and installs around 181 files. The most common release is 1.34.4.10 with 43.93% of all installations currently using this version.

Freeven pro is most popular in the United States with 34.16% of installations residing in this country.

Freeven pro adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About Freeven pro?

This software is a web browser extension supported by advertisements, which may display banner ads, text hyperlinks, and popups within the user's web browser.

Multiple virus scanners have detected malware in Freeven pro.

utils.exe (MD5: 4a60ed7a41e5a25da8ec351465a278d2) has been flagged by 42 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
Malwarebytes PUP.Optional.CrossRider.A
TrendMicro-HouseCall TROJ_GE.E27CD13C
Lavasoft Ad-Aware Gen:Application.Heur.Du1@mSCeljfO
AhnLab-V3 Win-PUP/CrossRider
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.CroRi.bei
avast! Win32:Crossrider-G [PUP]
AVG CrossRider.A
Avira Adware/CrossRider.AC
AVware Crossrider (fs)
Bitdefender Gen:Application.Heur.Du1@mSCeljfO
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.19952
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/S-a64d6097!Eldorado
F-Secure Gen:Application.Heur.Du1@mSCeljfO
G Data Gen:Application.Heur.Du1@mSCeljfO
K7 AntiVirus Unwanted-Program ( 004ae5be1 )
K7GW Unwanted-Program ( 004ae5be1 )
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.gh
MicroWorld-eScan Gen:Application.Heur.Du1@mSCeljfO
NANO AntiVirus Trojan.Win32.Crossrider.cztbsb
Panda Antivirus PUP/PlusHD
Qihoo-360 Win32/Virus.WebToolbar.80e
Sophos AppRider
Symantec Adware.Crossid!gen1
Trend Micro TROJ_GEN.R0C1C0EJI14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.154
Rising Antivirus PE:Trojan.Win32.Generic.1778C8EE!393791726
Cyren W32/S-a650ccbb!Eldorado
IKARUS anti.virus AdWare.Plush
CAT-QuickHeal PUA.GoogleUpdate.A5
Agnitum Outpost PUA.Toolbar.CrossRider!
Avira AntiVir Adware/CrossRider.AE
Emsisoft Anti-Malware Adware.Generic.931704 (B)
Tencent Win32.Risk.Adware.Afhu
4f687e4b-4bce-416b-af60-c0699d75fa82-4.exe (MD5: be163c7dea67979e6a09cc2e5f6223c0) has been flagged by 25 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.1339
avast! Win32:Malware-gen
AVG Generic_s.BA
Baidu-International Adware.Win32.CrossRider.AD
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
Fortinet FortiGate Riskware/Toolbar_CrossRider
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!BE163C7DEA67
McAfee-GW-Edition Adware-CrossR!BE163C7DEA67
Panda Antivirus PUP/PlusHD
Qihoo-360 Win32/Virus.Adware.01e
Symantec Trojan.ADH.2
TrendMicro-HouseCall TROJ_GEN.F47V0424
VIPRE Antivirus Crossrider (fs)
IKARUS anti.virus AdWare.CrossRider
Sophos Generic PUA AP
Comodo Security ApplicUnwnt
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Bitdefender Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.374062 (B)
F-Secure Gen:Variant.Adware.Kazy.374062
MicroWorld-eScan Gen:Variant.Adware.Kazy.374062
Bkav FE W32.CrossRider.Trojan
Antiy-AVL Trojan/Win32.SGeneric
4f687e4b-4bce-416b-af60-c0699d75fa82-3.exe (MD5: af368a0a902cbcf3006f238133a651e2) has been flagged by 24 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.1389
Baidu-International Adware.Win32.CrossRider.AD
Bkav FE W32.CrossRider.Trojan
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
Fortinet FortiGate Riskware/Toolbar_CrossRider
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!AF368A0A902C
McAfee-GW-Edition Adware-CrossR!AF368A0A902C
Panda Antivirus PUP/PlusHD
Symantec Trojan.ADH.2
TrendMicro-HouseCall TROJ_GEN.F47V0424
VIPRE Antivirus Crossrider (fs)
avast! Win32:Adware-gen [Adw]
Comodo Security ApplicUnwnt
Qihoo-360 Win32/Virus.Adware.769
AVG Agent.X
Bitdefender Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.374062 (B)
F-Secure Gen:Variant.Adware.Kazy.374062
MicroWorld-eScan Gen:Variant.Adware.Kazy.374062
Antiy-AVL Trojan/Win32.SGeneric
Sophos Generic PUA IB
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
4f687e4b-4bce-416b-af60-c0699d75fa82-2.exe (MD5: d7ce1490a14d5b08d67d08d43add68b0) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.1387
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!D7CE1490A14D
McAfee-GW-Edition Adware-CrossR!D7CE1490A14D
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
TrendMicro-HouseCall TROJ_GEN.F47V0509
Symantec WS.Reputation.1
Fortinet FortiGate Riskware/Toolbar_CrossRider
46ebc886-d820-490d-a193-226e77a886ce-5.exe (MD5: cd8c8faa5c62efe1bbfae8d1805b23bd) has been flagged by 13 scanners:
Scanner Software Result
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!CD8C8FAA5C62
McAfee-GW-Edition Adware-CrossR!CD8C8FAA5C62
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
AVG Generic_s.BA
Fortinet FortiGate Riskware/Toolbar_CrossRider
TrendMicro-HouseCall TROJ_GEN.F47V0404
Bkav FE W32.CrossRider.Trojan
Symantec Adware.Crossid

Software Behaviors

Scheduled tasks:
  • Freeven pro-nova.exe is scheduled as a task named 'temp_875f2efa-2a31-4c0f-be39-9293cb48929c-7'.
  • 944b5fda-82a5-4469-9cab-b60c4ca15acb-2.exe is scheduled as a task named 'temp_944b5fda-82a5-4469-9cab-b60c4ca15acb-2'.
  • 32e2de9e-135e-4ba7-9e76-42ce60c8b299-4.exe is scheduled as a task named '32e2de9e-135e-4ba7-9e76-42ce60c8b299-4'.
  • abe37721-6bd3-4a16-8a44-d225ceb704b4-2.exe is scheduled as a task named 'abe37721-6bd3-4a16-8a44-d225ceb704b4-2'.

Startup Entries

Startup tasks:
  • 49faeb04-be5e-4ab0-b0f8-3bd7d649b23b-4.exe is automatically launched at startup through a scheduled task named 49faeb04-be5e-4ab0-b0f8-3bd7d649b23b-4.
  • Freeven pro-codedownloader.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-6.
  • Freeven pro-nova.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-7.
  • b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-5.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-5.
  • b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-4.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-4.
  • b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-3.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-3.

Software Details

URL:
https://crossrider.com/pages/extension_eula
Support:
–
Installation path:
C:\Program Files\freeven pro
Uninstaller:
C:\Program Files\Freeven pro\Uninstall.exe /fromcontrolpanel=1
Size:
7.00 MB
Language:
English

Freeven pro Executable Details

Primary executable:
utils.exe
Name:
Freeven pro
Path:
C:\Program Files\freeven pro\utils.exe
MD5:
4a60ed7a41e5a25da8ec351465a278d2
SHA-1:
–
SHA-256:
–
Files installed by Freeven pro
File Type Filename MD5
EXE
uninstall.exe
ab91a7350a5fddcdf0a7b0c60e8e4e71
EXE
utils.exe
Adware
4a60ed7a41e5a25da8ec351465a278d2
EXE
4f687e4b-4bce-416b-af60-c0699d75fa82-4.exe
Malware
be163c7dea67979e6a09cc2e5f6223c0
EXE
4f687e4b-4bce-416b-af60-c0699d75fa82-3.exe
Malware
af368a0a902cbcf3006f238133a651e2
EXE
4f687e4b-4bce-416b-af60-c0699d75fa82-2.exe
Toolbar
d7ce1490a14d5b08d67d08d43add68b0
EXE
49faeb04-be5e-4ab0-b0f8-3bd7d649b23b-4.exe
169503e36ddbbcdb242f7cd184526778
EXE
46ebc886-d820-490d-a193-226e77a886ce-5.exe
Adware
cd8c8faa5c62efe1bbfae8d1805b23bd
EXE
46ebc886-d820-490d-a193-226e77a886ce-4.exe
Toolbar
da6f20854441af5e9e8525bbec98cfac
EXE
46ebc886-d820-490d-a193-226e77a886ce-3.exe
Malware
04c2e52a85685087adac7a1bba60154d
EXE
46ebc886-d820-490d-a193-226e77a886ce-2.exe
Toolbar
b5df1e1257ebd2ed2d05c65ead588a6e