What is MediaPlayerplus?

MediaPlayerplus is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 58.43% of installations running this operating system. MediaPlayerplus's installer is typically 9.00 MB in size and installs around 206 files. The most common release is 1.34.4.10 with 58.55% of all installations currently using this version.

MediaPlayerplus is most popular in the United States with 27.65% of installations residing in this country.

MediaPlayerplus adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About MediaPlayerplus?

Our web browser extension is supported by ads (adware) and may inject advertising in the user's web browser in the form of banner ads, text hyperlinks, and popups.

Multiple virus scanners have detected malware in MediaPlayerplus.

utils.exe (MD5: 4fd74b9d7799866b2ff64be52a78a220) has been flagged by 38 scanners:

Scanner Software	Version	Result
Baidu-International	4.0.3.14422	Trojan.Win32.VMDetector.E
Bkav FE	1.3.0.4959	HW32.CDB
ESET-NOD32	8.9603	a variant of Win32/Packed.VMDetector.E
Malwarebytes	v2014.04.22.11	PUP.Optional.CrossRider.A
Lavasoft Ad-Aware	12.0.163.0	Gen:Variant.Adware.Plush.1
AhnLab-V3	2014.11.10.00	PUP/Win32.CrossRider
avast!	8.0.1489.320	Win32:Crossrider-AP [PUP]
AVG	15.0.0.4189	Generic.390
Avira	7.11.183.206	Adware/CrossRider.A.1721
AVware	1.5.0.21	Crossrider (fs)
Bitdefender	7.2	Gen:Variant.Adware.Plush.1
Comodo Security	20033	ApplicUnwnt
Dr.Web	7.0.10.8210	Trojan.Crossrider.27550
Emsisoft Anti-Malware	3.0.0.600	Gen:Variant.Adware.Plush.1 (B)
Fortinet FortiGate	5.0.999.0	Riskware/CroRi
F-Prot	4.7.1.166	W32/A-d818135f!Eldorado
F-Secure	11.0.19100.45	Gen:Variant.Adware.Plush.1
G Data	24	Gen:Variant.Adware.Plush.1
IKARUS anti.virus	T3.1.8.3.0	not-a-virus:WebToolbar.CroRi
Kaspersky	12.0.0.1225	not-a-virus:WebToolbar.Win32.CroRi.bei
McAfee	6.0.5.614	Adware-CrossR
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.AdwareCross.th
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Plush.1
NANO AntiVirus	0.28.6.62995	Trojan.Win32.Crossrider.dfxnsz
Qihoo-360	1.0.0.1015	Win32/Virus.Adware.ff4
Symantec	20141.1.0.330	Trojan.ADH.2
Trend Micro	9.740.0.1012	TROJ_GEN.R0C1C0EJF14
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C1C0EJF14
VIPRE Antivirus	34640	Crossrider (fs)
Zillya	2.0.0.1977	Adware.CroRi.Win32.150
K7 AntiVirus	9.185.13943	Unwanted-Program ( 004a9d061 )
K7GW	9.185.13943	Unwanted-Program ( 004a9d061 )
Sophos	4.98.0	AppRider
Avira AntiVir	7.11.157.46	Adware/CrossRider.AC
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
Panda Antivirus	10.0.3.5	PUP/PlusHD
Antiy-AVL	1.0.0.1	not-a-virus:WebToolbar.Win32.CroRi.bei
nProtect	2014-04-10.02	Trojan.Generic.11181062

3afb30f2-c545-4ee2-8e16-a626c7bddeae-4.exe (MD5: 390f0264a03b2f505842937ec1cf318a) has been flagged by 2 scanners:

Scanner Software	Version	Result
Malwarebytes	1.75.0001	PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus	28115	Crossrider (fs)

3afb30f2-c545-4ee2-8e16-a626c7bddeae-3.exe (MD5: d31ad17b16a0808259d62a182b05aaf6) has been flagged by 2 scanners:

Scanner Software	Version	Result
Malwarebytes	1.75.0001	PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus	28115	Crossrider (fs)

3afb30f2-c545-4ee2-8e16-a626c7bddeae-2.exe (MD5: 2a312e9587507b33a2dc313bc6c37d5d) has been flagged by 2 scanners:

Scanner Software	Version	Result
Malwarebytes	1.75.0001	PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus	28115	Crossrider (fs)

35c01418-e0a6-4915-805b-e29ce589ad45-5.exe (MD5: 74fc7d03f4178089ac28b02455d9ec16) has been flagged by 17 scanners:

Scanner Software	Version	Result
AVG	13.0.0.3169	Agent.X
Baidu-International	3.5.1.41473	Adware.Win32.CrossRider.AC
ESET-NOD32	9727	a variant of Win32/Toolbar.CrossRider.AC
G Data	24	Win32.Application.Plush.A
Malwarebytes	1.75.0001	PUP.Optional.MediaPlayerplus.A
McAfee	6.0.4.564	Adware-CrossR!74FC7D03F417
McAfee-GW-Edition	2013	Adware-CrossR!74FC7D03F417
Panda Antivirus	10.0.3.5	PUP/PlusHD
VIPRE Antivirus	28622	Crossrider (fs)
Bkav FE	1.3.0.4959	W32.CrossRider.Trojan
Kingsoft AntiVirus	2013.04.09.267	Win32.Troj.Generic.a.(kcloud)
Avira AntiVir	7.11.148.182	Adware/CrossRider.A.3146
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.F47V0426
Fortinet FortiGate	4	Riskware/Toolbar_CrossRider
Symantec	20131.1.5.61	Adware.Crossid
Qihoo-360	1.0.0.1015	HEUR/Malware.QVM10.Gen
Antiy-AVL	0.1.0.1	Trojan/Win32.SGeneric

Software Behaviors

Scheduled tasks:

3d8c097a-d75d-43d1-aa88-eb4ad99df514-2.exe is scheduled as a task named 'temp_3d8c097a-d75d-43d1-aa88-eb4ad99df514-2'.
MediaPlayerplus-nova.exe is scheduled as a task named 'temp_bf878d97-0287-421f-86a1-65974521fc40-7'.

Startup Entries

Startup tasks:

ee8000ef-7e62-443e-8287-6d63d292836f-3.exe is automatically launched at startup through a scheduled task named ee8000ef-7e62-443e-8287-6d63d292836f-3.
48782ae5-b338-4216-a537-e1868ae58073-4.exe is automatically launched at startup through a scheduled task named 48782ae5-b338-4216-a537-e1868ae58073-4.
MediaPlayerplus-codedownloader.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-1.
b0625433-0826-4d86-9af6-bc28310b6329-5.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-5.
b0625433-0826-4d86-9af6-bc28310b6329-4.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-4.
b0625433-0826-4d86-9af6-bc28310b6329-2.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-2.

Software Details

URL:

https://crossrider.com/pages/privacy

Support:

–

Installation path:

C:\Program Files\mediaplayerplus

Uninstaller:

C:\Program Files\MediaPlayerplus\Uninstall.exe /fromcontrolpanel=1

Size:

9.00 MB

Language:

English

MediaPlayerplus Executable Details

Primary executable:

utils.exe

Name:

MediaPlayerplus

Path:

C:\Program Files\mediaplayerplus\utils.exe

MD5:

4fd74b9d7799866b2ff64be52a78a220

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

uninstall.exe

ab91a7350a5fddcdf0a7b0c60e8e4e71

EXE

utils.exe

Malware

4fd74b9d7799866b2ff64be52a78a220

EXE

3afb30f2-c545-4ee2-8e16-a626c7bddeae-4.exe

Malware

390f0264a03b2f505842937ec1cf318a

EXE

3afb30f2-c545-4ee2-8e16-a626c7bddeae-3.exe

Malware

d31ad17b16a0808259d62a182b05aaf6

EXE

3afb30f2-c545-4ee2-8e16-a626c7bddeae-2.exe

Malware

2a312e9587507b33a2dc313bc6c37d5d

EXE

35c01418-e0a6-4915-805b-e29ce589ad45-5.exe

Malware

74fc7d03f4178089ac28b02455d9ec16

EXE

35c01418-e0a6-4915-805b-e29ce589ad45-4.exe

Malware

701e45baa7da31683ea95e6b929a819e

EXE

35c01418-e0a6-4915-805b-e29ce589ad45-3.exe

Malware

1af4f41c9cdb8d4a0e4f4e397b2d8b63

EXE

35c01418-e0a6-4915-805b-e29ce589ad45-2.exe

Malware

8fc8913e86578818b4eccf8bb6861229

EXE

34c732ce-385e-453a-80a0-2300f29d65ac-5.exe

Malware

500f29f0b65cf36aec0a299eeb31c1dc

File Type	Filename	MD5
EXE	uninstall.exe	ab91a7350a5fddcdf0a7b0c60e8e4e71
EXE	utils.exe Malware	4fd74b9d7799866b2ff64be52a78a220
EXE	3afb30f2-c545-4ee2-8e16-a626c7bddeae-4.exe Malware	390f0264a03b2f505842937ec1cf318a
EXE	3afb30f2-c545-4ee2-8e16-a626c7bddeae-3.exe Malware	d31ad17b16a0808259d62a182b05aaf6
EXE	3afb30f2-c545-4ee2-8e16-a626c7bddeae-2.exe Malware	2a312e9587507b33a2dc313bc6c37d5d
EXE	35c01418-e0a6-4915-805b-e29ce589ad45-5.exe Malware	74fc7d03f4178089ac28b02455d9ec16
EXE	35c01418-e0a6-4915-805b-e29ce589ad45-4.exe Malware	701e45baa7da31683ea95e6b929a819e
EXE	35c01418-e0a6-4915-805b-e29ce589ad45-3.exe Malware	1af4f41c9cdb8d4a0e4f4e397b2d8b63
EXE	35c01418-e0a6-4915-805b-e29ce589ad45-2.exe Malware	8fc8913e86578818b4eccf8bb6861229
EXE	34c732ce-385e-453a-80a0-2300f29d65ac-5.exe Malware	500f29f0b65cf36aec0a299eeb31c1dc

MediaPlayerplus

What is MediaPlayerplus?

About MediaPlayerplus?

Multiple virus scanners have detected malware in MediaPlayerplus.

Software Behaviors

Startup Entries

Software Details

MediaPlayerplus Executable Details