Freeven pro

Freeven pro

Known Adware

by Kimahri Software inc.

What is Freeven pro?

Freeven pro is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 57.32% of installations running this operating system. Freeven pro's installer is typically 7.00 MB in size and installs around 181 files. The most common release is 1.34.4.10 with 43.93% of all installations currently using this version.

Freeven pro is most popular in the United States with 34.16% of installations residing in this country.

Freeven pro adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About Freeven pro?

This software is a web browser extension supported by advertisements, which may display banner ads, text hyperlinks, and popups within the user's web browser.

Multiple virus scanners have detected malware in Freeven pro.

utils.exe (MD5: 4a60ed7a41e5a25da8ec351465a278d2) has been flagged by 42 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
Malwarebytes PUP.Optional.CrossRider.A
TrendMicro-HouseCall TROJ_GE.E27CD13C
Lavasoft Ad-Aware Gen:Application.Heur.Du1@mSCeljfO
AhnLab-V3 Win-PUP/CrossRider
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.CroRi.bei
avast! Win32:Crossrider-G [PUP]
AVG CrossRider.A
Avira Adware/CrossRider.AC
AVware Crossrider (fs)
Bitdefender Gen:Application.Heur.Du1@mSCeljfO
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.19952
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/S-a64d6097!Eldorado
F-Secure Gen:Application.Heur.Du1@mSCeljfO
G Data Gen:Application.Heur.Du1@mSCeljfO
K7 AntiVirus Unwanted-Program ( 004ae5be1 )
K7GW Unwanted-Program ( 004ae5be1 )
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.gh
MicroWorld-eScan Gen:Application.Heur.Du1@mSCeljfO
NANO AntiVirus Trojan.Win32.Crossrider.cztbsb
Panda Antivirus PUP/PlusHD
Qihoo-360 Win32/Virus.WebToolbar.80e
Sophos AppRider
Symantec Adware.Crossid!gen1
Trend Micro TROJ_GEN.R0C1C0EJI14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.154
Rising Antivirus PE:Trojan.Win32.Generic.1778C8EE!393791726
Cyren W32/S-a650ccbb!Eldorado
IKARUS anti.virus AdWare.Plush
CAT-QuickHeal PUA.GoogleUpdate.A5
Agnitum Outpost PUA.Toolbar.CrossRider!
Avira AntiVir Adware/CrossRider.AE
Emsisoft Anti-Malware Adware.Generic.931704 (B)
Tencent Win32.Risk.Adware.Afhu
4f687e4b-4bce-416b-af60-c0699d75fa82-4.exe (MD5: be163c7dea67979e6a09cc2e5f6223c0) has been flagged by 25 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.1339
avast! Win32:Malware-gen
AVG Generic_s.BA
Baidu-International Adware.Win32.CrossRider.AD
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
Fortinet FortiGate Riskware/Toolbar_CrossRider
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!BE163C7DEA67
McAfee-GW-Edition Adware-CrossR!BE163C7DEA67
Panda Antivirus PUP/PlusHD
Qihoo-360 Win32/Virus.Adware.01e
Symantec Trojan.ADH.2
TrendMicro-HouseCall TROJ_GEN.F47V0424
VIPRE Antivirus Crossrider (fs)
IKARUS anti.virus AdWare.CrossRider
Sophos Generic PUA AP
Comodo Security ApplicUnwnt
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Bitdefender Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.374062 (B)
F-Secure Gen:Variant.Adware.Kazy.374062
MicroWorld-eScan Gen:Variant.Adware.Kazy.374062
Bkav FE W32.CrossRider.Trojan
Antiy-AVL Trojan/Win32.SGeneric
4f687e4b-4bce-416b-af60-c0699d75fa82-3.exe (MD5: af368a0a902cbcf3006f238133a651e2) has been flagged by 24 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.1389
Baidu-International Adware.Win32.CrossRider.AD
Bkav FE W32.CrossRider.Trojan
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
Fortinet FortiGate Riskware/Toolbar_CrossRider
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!AF368A0A902C
McAfee-GW-Edition Adware-CrossR!AF368A0A902C
Panda Antivirus PUP/PlusHD
Symantec Trojan.ADH.2
TrendMicro-HouseCall TROJ_GEN.F47V0424
VIPRE Antivirus Crossrider (fs)
avast! Win32:Adware-gen [Adw]
Comodo Security ApplicUnwnt
Qihoo-360 Win32/Virus.Adware.769
AVG Agent.X
Bitdefender Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.374062 (B)
F-Secure Gen:Variant.Adware.Kazy.374062
MicroWorld-eScan Gen:Variant.Adware.Kazy.374062
Antiy-AVL Trojan/Win32.SGeneric
Sophos Generic PUA IB
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
4f687e4b-4bce-416b-af60-c0699d75fa82-2.exe (MD5: d7ce1490a14d5b08d67d08d43add68b0) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.1387
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!D7CE1490A14D
McAfee-GW-Edition Adware-CrossR!D7CE1490A14D
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
TrendMicro-HouseCall TROJ_GEN.F47V0509
Symantec WS.Reputation.1
Fortinet FortiGate Riskware/Toolbar_CrossRider
46ebc886-d820-490d-a193-226e77a886ce-5.exe (MD5: cd8c8faa5c62efe1bbfae8d1805b23bd) has been flagged by 13 scanners:
Scanner Software Result
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!CD8C8FAA5C62
McAfee-GW-Edition Adware-CrossR!CD8C8FAA5C62
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
AVG Generic_s.BA
Fortinet FortiGate Riskware/Toolbar_CrossRider
TrendMicro-HouseCall TROJ_GEN.F47V0404
Bkav FE W32.CrossRider.Trojan
Symantec Adware.Crossid

Software Behaviors

Scheduled tasks:
  • Freeven pro-nova.exe is scheduled as a task named 'temp_875f2efa-2a31-4c0f-be39-9293cb48929c-7'.
  • 944b5fda-82a5-4469-9cab-b60c4ca15acb-2.exe is scheduled as a task named 'temp_944b5fda-82a5-4469-9cab-b60c4ca15acb-2'.
  • 32e2de9e-135e-4ba7-9e76-42ce60c8b299-4.exe is scheduled as a task named '32e2de9e-135e-4ba7-9e76-42ce60c8b299-4'.
  • abe37721-6bd3-4a16-8a44-d225ceb704b4-2.exe is scheduled as a task named 'abe37721-6bd3-4a16-8a44-d225ceb704b4-2'.

Startup Entries

Startup tasks:
  • 49faeb04-be5e-4ab0-b0f8-3bd7d649b23b-4.exe is automatically launched at startup through a scheduled task named 49faeb04-be5e-4ab0-b0f8-3bd7d649b23b-4.
  • Freeven pro-codedownloader.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-6.
  • Freeven pro-nova.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-7.
  • b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-5.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-5.
  • b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-4.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-4.
  • b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-3.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-3.

Software Details

URL:
https://crossrider.com/pages/extension_eula
Support:
–
Installation path:
C:\Program Files\freeven pro
Uninstaller:
C:\Program Files\Freeven pro\Uninstall.exe /fromcontrolpanel=1
Size:
7.00 MB
Language:
English

Freeven pro Executable Details

Primary executable:
utils.exe
Name:
Freeven pro
Path:
C:\Program Files\freeven pro\utils.exe
MD5:
4a60ed7a41e5a25da8ec351465a278d2
SHA-1:
–
SHA-256:
–
Files installed by Freeven pro
File Type Filename MD5
EXE
fc7f639b1a80c7e1044cd02af53031da
EXE
800627da4a0c213b0916f2ada4b2b89d
EXE
7bd77513a587db26aab279495f529657
EXE
121058838ddab3721efc42ed89f6d176
EXE
c1b28a987978c5b6bf74eb4ece693cd1
EXE
455afbd50c711c1a2b480ec6fdb7852c
EXE
b5878d64f7210bd24d5edafd9e8e3884
EXE
c4114f609ed90f7f41648c229652f9e5
EXE
a4d6ee8483d51da4555d15fef20df9d5
EXE
c2a442fc8513443efc396d61984eb655