MediaPlayerplus

MediaPlayerplus

Known Adware

by Kimahri Software inc.

What is MediaPlayerplus?

MediaPlayerplus is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 58.43% of installations running this operating system. MediaPlayerplus's installer is typically 9.00 MB in size and installs around 206 files. The most common release is 1.34.4.10 with 58.55% of all installations currently using this version.

MediaPlayerplus is most popular in the United States with 27.65% of installations residing in this country.

MediaPlayerplus adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About MediaPlayerplus?

Our web browser extension is supported by ads (adware) and may inject advertising in the user's web browser in the form of banner ads, text hyperlinks, and popups.

Multiple virus scanners have detected malware in MediaPlayerplus.

utils.exe (MD5: 4fd74b9d7799866b2ff64be52a78a220) has been flagged by 38 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
Malwarebytes PUP.Optional.CrossRider.A
Lavasoft Ad-Aware Gen:Variant.Adware.Plush.1
AhnLab-V3 PUP/Win32.CrossRider
avast! Win32:Crossrider-AP [PUP]
AVG Generic.390
Avira Adware/CrossRider.A.1721
AVware Crossrider (fs)
Bitdefender Gen:Variant.Adware.Plush.1
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.27550
Emsisoft Anti-Malware Gen:Variant.Adware.Plush.1 (B)
Fortinet FortiGate Riskware/CroRi
F-Prot W32/A-d818135f!Eldorado
F-Secure Gen:Variant.Adware.Plush.1
G Data Gen:Variant.Adware.Plush.1
IKARUS anti.virus not-a-virus:WebToolbar.CroRi
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.th
MicroWorld-eScan Gen:Variant.Adware.Plush.1
NANO AntiVirus Trojan.Win32.Crossrider.dfxnsz
Qihoo-360 Win32/Virus.Adware.ff4
Symantec Trojan.ADH.2
Trend Micro TROJ_GEN.R0C1C0EJF14
TrendMicro-HouseCall TROJ_GEN.R0C1C0EJF14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.150
K7 AntiVirus Unwanted-Program ( 004a9d061 )
K7GW Unwanted-Program ( 004a9d061 )
Sophos AppRider
Avira AntiVir Adware/CrossRider.AC
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Panda Antivirus PUP/PlusHD
Antiy-AVL not-a-virus:WebToolbar.Win32.CroRi.bei
nProtect Trojan.Generic.11181062
3afb30f2-c545-4ee2-8e16-a626c7bddeae-4.exe (MD5: 390f0264a03b2f505842937ec1cf318a) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
3afb30f2-c545-4ee2-8e16-a626c7bddeae-3.exe (MD5: d31ad17b16a0808259d62a182b05aaf6) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
3afb30f2-c545-4ee2-8e16-a626c7bddeae-2.exe (MD5: 2a312e9587507b33a2dc313bc6c37d5d) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
35c01418-e0a6-4915-805b-e29ce589ad45-5.exe (MD5: 74fc7d03f4178089ac28b02455d9ec16) has been flagged by 17 scanners:
Scanner Software Result
AVG Agent.X
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.MediaPlayerplus.A
McAfee Adware-CrossR!74FC7D03F417
McAfee-GW-Edition Adware-CrossR!74FC7D03F417
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Avira AntiVir Adware/CrossRider.A.3146
TrendMicro-HouseCall TROJ_GEN.F47V0426
Fortinet FortiGate Riskware/Toolbar_CrossRider
Symantec Adware.Crossid
Qihoo-360 HEUR/Malware.QVM10.Gen
Antiy-AVL Trojan/Win32.SGeneric

Software Behaviors

Scheduled tasks:
  • 3d8c097a-d75d-43d1-aa88-eb4ad99df514-2.exe is scheduled as a task named 'temp_3d8c097a-d75d-43d1-aa88-eb4ad99df514-2'.
  • MediaPlayerplus-nova.exe is scheduled as a task named 'temp_bf878d97-0287-421f-86a1-65974521fc40-7'.

Startup Entries

Startup tasks:
  • ee8000ef-7e62-443e-8287-6d63d292836f-3.exe is automatically launched at startup through a scheduled task named ee8000ef-7e62-443e-8287-6d63d292836f-3.
  • 48782ae5-b338-4216-a537-e1868ae58073-4.exe is automatically launched at startup through a scheduled task named 48782ae5-b338-4216-a537-e1868ae58073-4.
  • MediaPlayerplus-codedownloader.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-1.
  • b0625433-0826-4d86-9af6-bc28310b6329-5.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-5.
  • b0625433-0826-4d86-9af6-bc28310b6329-4.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-4.
  • b0625433-0826-4d86-9af6-bc28310b6329-2.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-2.

Software Details

URL:
https://crossrider.com/pages/privacy
Support:
–
Installation path:
C:\Program Files\mediaplayerplus
Uninstaller:
C:\Program Files\MediaPlayerplus\Uninstall.exe /fromcontrolpanel=1
Size:
9.00 MB
Language:
English

MediaPlayerplus Executable Details

Primary executable:
utils.exe
Name:
MediaPlayerplus
Path:
C:\Program Files\mediaplayerplus\utils.exe
MD5:
4fd74b9d7799866b2ff64be52a78a220
SHA-1:
–
SHA-256:
–
Files installed by MediaPlayerplus
File Type Filename MD5
EXE
aa938696e6c10781b0e7f642d3f2b14f
EXE
e12807526890e81b8afd7fcbd7424091
EXE
45936053be5e82bbe5e9b10a74c14c4d
EXE
f269cfd9dc09305b18c87cf71c342444
EXE
694253a675725038b9fd4cc5257e1a6c
EXE
683aec77559fe372fe8a3a2328c585aa
EXE
e698d1d23024404abcfcb87ac0fcaa20
EXE
0016f852a800536ec94978862c95a7a0
EXE
1547d716199976830c13aba353cf2e3d
EXE
a8fedfd20f10fb2ec3138816bd3109ff