Freeven pro

Freeven pro

Known Adware

by Kimahri Software inc.

What is Freeven pro?

Freeven pro is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 57.32% of installations running this operating system. Freeven pro's installer is typically 7.00 MB in size and installs around 181 files. The most common release is 1.34.4.10 with 43.93% of all installations currently using this version.

Freeven pro is most popular in the United States with 34.16% of installations residing in this country.

Freeven pro adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About Freeven pro?

This software is a web browser extension supported by advertisements, which may display banner ads, text hyperlinks, and popups within the user's web browser.

Multiple virus scanners have detected malware in Freeven pro.

utils.exe (MD5: 4a60ed7a41e5a25da8ec351465a278d2) has been flagged by 42 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
Malwarebytes PUP.Optional.CrossRider.A
TrendMicro-HouseCall TROJ_GE.E27CD13C
Lavasoft Ad-Aware Gen:Application.Heur.Du1@mSCeljfO
AhnLab-V3 Win-PUP/CrossRider
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.CroRi.bei
avast! Win32:Crossrider-G [PUP]
AVG CrossRider.A
Avira Adware/CrossRider.AC
AVware Crossrider (fs)
Bitdefender Gen:Application.Heur.Du1@mSCeljfO
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.19952
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/S-a64d6097!Eldorado
F-Secure Gen:Application.Heur.Du1@mSCeljfO
G Data Gen:Application.Heur.Du1@mSCeljfO
K7 AntiVirus Unwanted-Program ( 004ae5be1 )
K7GW Unwanted-Program ( 004ae5be1 )
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.gh
MicroWorld-eScan Gen:Application.Heur.Du1@mSCeljfO
NANO AntiVirus Trojan.Win32.Crossrider.cztbsb
Panda Antivirus PUP/PlusHD
Qihoo-360 Win32/Virus.WebToolbar.80e
Sophos AppRider
Symantec Adware.Crossid!gen1
Trend Micro TROJ_GEN.R0C1C0EJI14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.154
Rising Antivirus PE:Trojan.Win32.Generic.1778C8EE!393791726
Cyren W32/S-a650ccbb!Eldorado
IKARUS anti.virus AdWare.Plush
CAT-QuickHeal PUA.GoogleUpdate.A5
Agnitum Outpost PUA.Toolbar.CrossRider!
Avira AntiVir Adware/CrossRider.AE
Emsisoft Anti-Malware Adware.Generic.931704 (B)
Tencent Win32.Risk.Adware.Afhu
4f687e4b-4bce-416b-af60-c0699d75fa82-4.exe (MD5: be163c7dea67979e6a09cc2e5f6223c0) has been flagged by 25 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.1339
avast! Win32:Malware-gen
AVG Generic_s.BA
Baidu-International Adware.Win32.CrossRider.AD
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
Fortinet FortiGate Riskware/Toolbar_CrossRider
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!BE163C7DEA67
McAfee-GW-Edition Adware-CrossR!BE163C7DEA67
Panda Antivirus PUP/PlusHD
Qihoo-360 Win32/Virus.Adware.01e
Symantec Trojan.ADH.2
TrendMicro-HouseCall TROJ_GEN.F47V0424
VIPRE Antivirus Crossrider (fs)
IKARUS anti.virus AdWare.CrossRider
Sophos Generic PUA AP
Comodo Security ApplicUnwnt
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Bitdefender Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.374062 (B)
F-Secure Gen:Variant.Adware.Kazy.374062
MicroWorld-eScan Gen:Variant.Adware.Kazy.374062
Bkav FE W32.CrossRider.Trojan
Antiy-AVL Trojan/Win32.SGeneric
4f687e4b-4bce-416b-af60-c0699d75fa82-3.exe (MD5: af368a0a902cbcf3006f238133a651e2) has been flagged by 24 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.1389
Baidu-International Adware.Win32.CrossRider.AD
Bkav FE W32.CrossRider.Trojan
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
Fortinet FortiGate Riskware/Toolbar_CrossRider
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!AF368A0A902C
McAfee-GW-Edition Adware-CrossR!AF368A0A902C
Panda Antivirus PUP/PlusHD
Symantec Trojan.ADH.2
TrendMicro-HouseCall TROJ_GEN.F47V0424
VIPRE Antivirus Crossrider (fs)
avast! Win32:Adware-gen [Adw]
Comodo Security ApplicUnwnt
Qihoo-360 Win32/Virus.Adware.769
AVG Agent.X
Bitdefender Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.374062 (B)
F-Secure Gen:Variant.Adware.Kazy.374062
MicroWorld-eScan Gen:Variant.Adware.Kazy.374062
Antiy-AVL Trojan/Win32.SGeneric
Sophos Generic PUA IB
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
4f687e4b-4bce-416b-af60-c0699d75fa82-2.exe (MD5: d7ce1490a14d5b08d67d08d43add68b0) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.1387
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!D7CE1490A14D
McAfee-GW-Edition Adware-CrossR!D7CE1490A14D
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
TrendMicro-HouseCall TROJ_GEN.F47V0509
Symantec WS.Reputation.1
Fortinet FortiGate Riskware/Toolbar_CrossRider
46ebc886-d820-490d-a193-226e77a886ce-5.exe (MD5: cd8c8faa5c62efe1bbfae8d1805b23bd) has been flagged by 13 scanners:
Scanner Software Result
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!CD8C8FAA5C62
McAfee-GW-Edition Adware-CrossR!CD8C8FAA5C62
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
AVG Generic_s.BA
Fortinet FortiGate Riskware/Toolbar_CrossRider
TrendMicro-HouseCall TROJ_GEN.F47V0404
Bkav FE W32.CrossRider.Trojan
Symantec Adware.Crossid

Software Behaviors

Scheduled tasks:
  • Freeven pro-nova.exe is scheduled as a task named 'temp_875f2efa-2a31-4c0f-be39-9293cb48929c-7'.
  • 944b5fda-82a5-4469-9cab-b60c4ca15acb-2.exe is scheduled as a task named 'temp_944b5fda-82a5-4469-9cab-b60c4ca15acb-2'.
  • 32e2de9e-135e-4ba7-9e76-42ce60c8b299-4.exe is scheduled as a task named '32e2de9e-135e-4ba7-9e76-42ce60c8b299-4'.
  • abe37721-6bd3-4a16-8a44-d225ceb704b4-2.exe is scheduled as a task named 'abe37721-6bd3-4a16-8a44-d225ceb704b4-2'.

Startup Entries

Startup tasks:
  • 49faeb04-be5e-4ab0-b0f8-3bd7d649b23b-4.exe is automatically launched at startup through a scheduled task named 49faeb04-be5e-4ab0-b0f8-3bd7d649b23b-4.
  • Freeven pro-codedownloader.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-6.
  • Freeven pro-nova.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-7.
  • b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-5.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-5.
  • b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-4.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-4.
  • b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-3.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-3.

Software Details

URL:
https://crossrider.com/pages/extension_eula
Support:
–
Installation path:
C:\Program Files\freeven pro
Uninstaller:
C:\Program Files\Freeven pro\Uninstall.exe /fromcontrolpanel=1
Size:
7.00 MB
Language:
English

Freeven pro Executable Details

Primary executable:
utils.exe
Name:
Freeven pro
Path:
C:\Program Files\freeven pro\utils.exe
MD5:
4a60ed7a41e5a25da8ec351465a278d2
SHA-1:
–
SHA-256:
–
Files installed by Freeven pro
File Type Filename MD5
EXE
56269cca6c8e40ca60a210bba81978a5
EXE
0895cd18225e5e7f8e41be57759086c3
EXE
04c5e8aa32b03c1679c9b87729b3e598
EXE
d442e9dcebe0124ecca9930107fae065
EXE
93b0c81905bbe3e947a6b2daf55a00c3
EXE
d88f78a6fb3d7d8ba145f6c700a0c851
EXE
6b59d4c88705607ca523d498a19fe100
EXE
3fbda66e52cc0e82d7585897c43737b4
EXE
35b1e066ea0c9e2079ec974f9657b1e7
EXE
58da788e0c57f43d19528d0810e0ed6d