MediaPlayerplus

MediaPlayerplus

Known Adware

by Kimahri Software inc.

What is MediaPlayerplus?

MediaPlayerplus is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 58.43% of installations running this operating system. MediaPlayerplus's installer is typically 9.00 MB in size and installs around 206 files. The most common release is 1.34.4.10 with 58.55% of all installations currently using this version.

MediaPlayerplus is most popular in the United States with 27.65% of installations residing in this country.

MediaPlayerplus adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About MediaPlayerplus?

Our web browser extension is supported by ads (adware) and may inject advertising in the user's web browser in the form of banner ads, text hyperlinks, and popups.

Multiple virus scanners have detected malware in MediaPlayerplus.

utils.exe (MD5: 4fd74b9d7799866b2ff64be52a78a220) has been flagged by 38 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
Malwarebytes PUP.Optional.CrossRider.A
Lavasoft Ad-Aware Gen:Variant.Adware.Plush.1
AhnLab-V3 PUP/Win32.CrossRider
avast! Win32:Crossrider-AP [PUP]
AVG Generic.390
Avira Adware/CrossRider.A.1721
AVware Crossrider (fs)
Bitdefender Gen:Variant.Adware.Plush.1
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.27550
Emsisoft Anti-Malware Gen:Variant.Adware.Plush.1 (B)
Fortinet FortiGate Riskware/CroRi
F-Prot W32/A-d818135f!Eldorado
F-Secure Gen:Variant.Adware.Plush.1
G Data Gen:Variant.Adware.Plush.1
IKARUS anti.virus not-a-virus:WebToolbar.CroRi
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.th
MicroWorld-eScan Gen:Variant.Adware.Plush.1
NANO AntiVirus Trojan.Win32.Crossrider.dfxnsz
Qihoo-360 Win32/Virus.Adware.ff4
Symantec Trojan.ADH.2
Trend Micro TROJ_GEN.R0C1C0EJF14
TrendMicro-HouseCall TROJ_GEN.R0C1C0EJF14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.150
K7 AntiVirus Unwanted-Program ( 004a9d061 )
K7GW Unwanted-Program ( 004a9d061 )
Sophos AppRider
Avira AntiVir Adware/CrossRider.AC
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Panda Antivirus PUP/PlusHD
Antiy-AVL not-a-virus:WebToolbar.Win32.CroRi.bei
nProtect Trojan.Generic.11181062
3afb30f2-c545-4ee2-8e16-a626c7bddeae-4.exe (MD5: 390f0264a03b2f505842937ec1cf318a) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
3afb30f2-c545-4ee2-8e16-a626c7bddeae-3.exe (MD5: d31ad17b16a0808259d62a182b05aaf6) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
3afb30f2-c545-4ee2-8e16-a626c7bddeae-2.exe (MD5: 2a312e9587507b33a2dc313bc6c37d5d) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
35c01418-e0a6-4915-805b-e29ce589ad45-5.exe (MD5: 74fc7d03f4178089ac28b02455d9ec16) has been flagged by 17 scanners:
Scanner Software Result
AVG Agent.X
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.MediaPlayerplus.A
McAfee Adware-CrossR!74FC7D03F417
McAfee-GW-Edition Adware-CrossR!74FC7D03F417
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Avira AntiVir Adware/CrossRider.A.3146
TrendMicro-HouseCall TROJ_GEN.F47V0426
Fortinet FortiGate Riskware/Toolbar_CrossRider
Symantec Adware.Crossid
Qihoo-360 HEUR/Malware.QVM10.Gen
Antiy-AVL Trojan/Win32.SGeneric

Software Behaviors

Scheduled tasks:
  • 3d8c097a-d75d-43d1-aa88-eb4ad99df514-2.exe is scheduled as a task named 'temp_3d8c097a-d75d-43d1-aa88-eb4ad99df514-2'.
  • MediaPlayerplus-nova.exe is scheduled as a task named 'temp_bf878d97-0287-421f-86a1-65974521fc40-7'.

Startup Entries

Startup tasks:
  • ee8000ef-7e62-443e-8287-6d63d292836f-3.exe is automatically launched at startup through a scheduled task named ee8000ef-7e62-443e-8287-6d63d292836f-3.
  • 48782ae5-b338-4216-a537-e1868ae58073-4.exe is automatically launched at startup through a scheduled task named 48782ae5-b338-4216-a537-e1868ae58073-4.
  • MediaPlayerplus-codedownloader.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-1.
  • b0625433-0826-4d86-9af6-bc28310b6329-5.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-5.
  • b0625433-0826-4d86-9af6-bc28310b6329-4.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-4.
  • b0625433-0826-4d86-9af6-bc28310b6329-2.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-2.

Software Details

URL:
https://crossrider.com/pages/privacy
Support:
–
Installation path:
C:\Program Files\mediaplayerplus
Uninstaller:
C:\Program Files\MediaPlayerplus\Uninstall.exe /fromcontrolpanel=1
Size:
9.00 MB
Language:
English

MediaPlayerplus Executable Details

Primary executable:
utils.exe
Name:
MediaPlayerplus
Path:
C:\Program Files\mediaplayerplus\utils.exe
MD5:
4fd74b9d7799866b2ff64be52a78a220
SHA-1:
–
SHA-256:
–
Files installed by MediaPlayerplus
File Type Filename MD5
EXE
9bd6722fc1c47f202fad03191c958f25
EXE
b5539a7f8b9e77fafd4b4fea240b4c3c
EXE
184b7f871a5a2f4455a54db1a88c6774
EXE
b543066ac1d51fc519ebad1a635ff933
EXE
93543d6239a16ceb1418892178eb8d02
EXE
b8ba00cb246c0b837435d5874f53178b
EXE
fdcfc4aa2c220a1feb54cdcdf0fb46e4
EXE
cd31f6d3af079859b937ef89d00c1557
EXE
c616a102eccbfb962950a6d83221f4fc
EXE
357c5a8aff3ddd01d76b4fd8d40dad1e