Freeven pro

Freeven pro

Known Adware

by Kimahri Software inc.

What is Freeven pro?

Freeven pro is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 57.32% of installations running this operating system. Freeven pro's installer is typically 7.00 MB in size and installs around 181 files. The most common release is 1.34.4.10 with 43.93% of all installations currently using this version.

Freeven pro is most popular in the United States with 34.16% of installations residing in this country.

Freeven pro adds 4 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About Freeven pro?

This software is a web browser extension supported by advertisements, which may display banner ads, text hyperlinks, and popups within the user's web browser.

Multiple virus scanners have detected malware in Freeven pro.

utils.exe (MD5: 4a60ed7a41e5a25da8ec351465a278d2) has been flagged by 42 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
Malwarebytes PUP.Optional.CrossRider.A
TrendMicro-HouseCall TROJ_GE.E27CD13C
Lavasoft Ad-Aware Gen:Application.Heur.Du1@mSCeljfO
AhnLab-V3 Win-PUP/CrossRider
Antiy-AVL GrayWare[WebToolbar:not-a-virus]/Win32.CroRi.bei
avast! Win32:Crossrider-G [PUP]
AVG CrossRider.A
Avira Adware/CrossRider.AC
AVware Crossrider (fs)
Bitdefender Gen:Application.Heur.Du1@mSCeljfO
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.19952
Fortinet FortiGate Riskware/Toolbar_CrossRider
F-Prot W32/S-a64d6097!Eldorado
F-Secure Gen:Application.Heur.Du1@mSCeljfO
G Data Gen:Application.Heur.Du1@mSCeljfO
K7 AntiVirus Unwanted-Program ( 004ae5be1 )
K7GW Unwanted-Program ( 004ae5be1 )
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.gh
MicroWorld-eScan Gen:Application.Heur.Du1@mSCeljfO
NANO AntiVirus Trojan.Win32.Crossrider.cztbsb
Panda Antivirus PUP/PlusHD
Qihoo-360 Win32/Virus.WebToolbar.80e
Sophos AppRider
Symantec Adware.Crossid!gen1
Trend Micro TROJ_GEN.R0C1C0EJI14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.154
Rising Antivirus PE:Trojan.Win32.Generic.1778C8EE!393791726
Cyren W32/S-a650ccbb!Eldorado
IKARUS anti.virus AdWare.Plush
CAT-QuickHeal PUA.GoogleUpdate.A5
Agnitum Outpost PUA.Toolbar.CrossRider!
Avira AntiVir Adware/CrossRider.AE
Emsisoft Anti-Malware Adware.Generic.931704 (B)
Tencent Win32.Risk.Adware.Afhu
4f687e4b-4bce-416b-af60-c0699d75fa82-4.exe (MD5: be163c7dea67979e6a09cc2e5f6223c0) has been flagged by 25 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.1339
avast! Win32:Malware-gen
AVG Generic_s.BA
Baidu-International Adware.Win32.CrossRider.AD
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
Fortinet FortiGate Riskware/Toolbar_CrossRider
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!BE163C7DEA67
McAfee-GW-Edition Adware-CrossR!BE163C7DEA67
Panda Antivirus PUP/PlusHD
Qihoo-360 Win32/Virus.Adware.01e
Symantec Trojan.ADH.2
TrendMicro-HouseCall TROJ_GEN.F47V0424
VIPRE Antivirus Crossrider (fs)
IKARUS anti.virus AdWare.CrossRider
Sophos Generic PUA AP
Comodo Security ApplicUnwnt
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Bitdefender Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.374062 (B)
F-Secure Gen:Variant.Adware.Kazy.374062
MicroWorld-eScan Gen:Variant.Adware.Kazy.374062
Bkav FE W32.CrossRider.Trojan
Antiy-AVL Trojan/Win32.SGeneric
4f687e4b-4bce-416b-af60-c0699d75fa82-3.exe (MD5: af368a0a902cbcf3006f238133a651e2) has been flagged by 24 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.1389
Baidu-International Adware.Win32.CrossRider.AD
Bkav FE W32.CrossRider.Trojan
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AD
Fortinet FortiGate Riskware/Toolbar_CrossRider
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!AF368A0A902C
McAfee-GW-Edition Adware-CrossR!AF368A0A902C
Panda Antivirus PUP/PlusHD
Symantec Trojan.ADH.2
TrendMicro-HouseCall TROJ_GEN.F47V0424
VIPRE Antivirus Crossrider (fs)
avast! Win32:Adware-gen [Adw]
Comodo Security ApplicUnwnt
Qihoo-360 Win32/Virus.Adware.769
AVG Agent.X
Bitdefender Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.374062 (B)
F-Secure Gen:Variant.Adware.Kazy.374062
MicroWorld-eScan Gen:Variant.Adware.Kazy.374062
Antiy-AVL Trojan/Win32.SGeneric
Sophos Generic PUA IB
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
4f687e4b-4bce-416b-af60-c0699d75fa82-2.exe (MD5: d7ce1490a14d5b08d67d08d43add68b0) has been flagged by 14 scanners:
Scanner Software Result
Avira AntiVir Adware/CrossRider.A.1387
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!D7CE1490A14D
McAfee-GW-Edition Adware-CrossR!D7CE1490A14D
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
AVG Agent.X
TrendMicro-HouseCall TROJ_GEN.F47V0509
Symantec WS.Reputation.1
Fortinet FortiGate Riskware/Toolbar_CrossRider
46ebc886-d820-490d-a193-226e77a886ce-5.exe (MD5: cd8c8faa5c62efe1bbfae8d1805b23bd) has been flagged by 13 scanners:
Scanner Software Result
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.Feven.A
McAfee Adware-CrossR!CD8C8FAA5C62
McAfee-GW-Edition Adware-CrossR!CD8C8FAA5C62
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
AVG Generic_s.BA
Fortinet FortiGate Riskware/Toolbar_CrossRider
TrendMicro-HouseCall TROJ_GEN.F47V0404
Bkav FE W32.CrossRider.Trojan
Symantec Adware.Crossid

Software Behaviors

Scheduled tasks:
  • Freeven pro-nova.exe is scheduled as a task named 'temp_875f2efa-2a31-4c0f-be39-9293cb48929c-7'.
  • 944b5fda-82a5-4469-9cab-b60c4ca15acb-2.exe is scheduled as a task named 'temp_944b5fda-82a5-4469-9cab-b60c4ca15acb-2'.
  • 32e2de9e-135e-4ba7-9e76-42ce60c8b299-4.exe is scheduled as a task named '32e2de9e-135e-4ba7-9e76-42ce60c8b299-4'.
  • abe37721-6bd3-4a16-8a44-d225ceb704b4-2.exe is scheduled as a task named 'abe37721-6bd3-4a16-8a44-d225ceb704b4-2'.

Startup Entries

Startup tasks:
  • 49faeb04-be5e-4ab0-b0f8-3bd7d649b23b-4.exe is automatically launched at startup through a scheduled task named 49faeb04-be5e-4ab0-b0f8-3bd7d649b23b-4.
  • Freeven pro-codedownloader.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-6.
  • Freeven pro-nova.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-7.
  • b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-5.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-5.
  • b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-4.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-4.
  • b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-3.exe is automatically launched at startup through a scheduled task named b0ce1fdc-e2d9-448c-ac51-c29d8ddb3769-3.

Software Details

URL:
https://crossrider.com/pages/extension_eula
Support:
–
Installation path:
C:\Program Files\freeven pro
Uninstaller:
C:\Program Files\Freeven pro\Uninstall.exe /fromcontrolpanel=1
Size:
7.00 MB
Language:
English

Freeven pro Executable Details

Primary executable:
utils.exe
Name:
Freeven pro
Path:
C:\Program Files\freeven pro\utils.exe
MD5:
4a60ed7a41e5a25da8ec351465a278d2
SHA-1:
–
SHA-256:
–
Files installed by Freeven pro
File Type Filename MD5
EXE
8c926c9bddc514d51721810549931684
EXE
d800d4c37b42e60fa009f56dc8c1e55a
EXE
01b330acaf5370068348f6d78f1040dd
EXE
cbe07bbf47026bd4ae0bbb34166c091d
EXE
0babbc016b65d094cc29821e930bb48a
EXE
d1d38ea62434aa4b970d3fbb53868cb6
EXE
03e5d0344052b2ac5f761f197dfbd52d
EXE
b61ddea118f16d693d937f50918d09b3
EXE
36258c6b3b8e3913d6c6f86cd9064ee7
EXE
58f4250cca5755e6d5fa4c5058b3681c