MediaPlayerplus

MediaPlayerplus

Known Adware

by Kimahri Software inc.

What is MediaPlayerplus?

MediaPlayerplus is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 58.43% of installations running this operating system. MediaPlayerplus's installer is typically 9.00 MB in size and installs around 206 files. The most common release is 1.34.4.10 with 58.55% of all installations currently using this version.

MediaPlayerplus is most popular in the United States with 27.65% of installations residing in this country.

MediaPlayerplus adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About MediaPlayerplus?

Our web browser extension is supported by ads (adware) and may inject advertising in the user's web browser in the form of banner ads, text hyperlinks, and popups.

Multiple virus scanners have detected malware in MediaPlayerplus.

utils.exe (MD5: 4fd74b9d7799866b2ff64be52a78a220) has been flagged by 38 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
Malwarebytes PUP.Optional.CrossRider.A
Lavasoft Ad-Aware Gen:Variant.Adware.Plush.1
AhnLab-V3 PUP/Win32.CrossRider
avast! Win32:Crossrider-AP [PUP]
AVG Generic.390
Avira Adware/CrossRider.A.1721
AVware Crossrider (fs)
Bitdefender Gen:Variant.Adware.Plush.1
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.27550
Emsisoft Anti-Malware Gen:Variant.Adware.Plush.1 (B)
Fortinet FortiGate Riskware/CroRi
F-Prot W32/A-d818135f!Eldorado
F-Secure Gen:Variant.Adware.Plush.1
G Data Gen:Variant.Adware.Plush.1
IKARUS anti.virus not-a-virus:WebToolbar.CroRi
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.th
MicroWorld-eScan Gen:Variant.Adware.Plush.1
NANO AntiVirus Trojan.Win32.Crossrider.dfxnsz
Qihoo-360 Win32/Virus.Adware.ff4
Symantec Trojan.ADH.2
Trend Micro TROJ_GEN.R0C1C0EJF14
TrendMicro-HouseCall TROJ_GEN.R0C1C0EJF14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.150
K7 AntiVirus Unwanted-Program ( 004a9d061 )
K7GW Unwanted-Program ( 004a9d061 )
Sophos AppRider
Avira AntiVir Adware/CrossRider.AC
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Panda Antivirus PUP/PlusHD
Antiy-AVL not-a-virus:WebToolbar.Win32.CroRi.bei
nProtect Trojan.Generic.11181062
3afb30f2-c545-4ee2-8e16-a626c7bddeae-4.exe (MD5: 390f0264a03b2f505842937ec1cf318a) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
3afb30f2-c545-4ee2-8e16-a626c7bddeae-3.exe (MD5: d31ad17b16a0808259d62a182b05aaf6) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
3afb30f2-c545-4ee2-8e16-a626c7bddeae-2.exe (MD5: 2a312e9587507b33a2dc313bc6c37d5d) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
35c01418-e0a6-4915-805b-e29ce589ad45-5.exe (MD5: 74fc7d03f4178089ac28b02455d9ec16) has been flagged by 17 scanners:
Scanner Software Result
AVG Agent.X
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.MediaPlayerplus.A
McAfee Adware-CrossR!74FC7D03F417
McAfee-GW-Edition Adware-CrossR!74FC7D03F417
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Avira AntiVir Adware/CrossRider.A.3146
TrendMicro-HouseCall TROJ_GEN.F47V0426
Fortinet FortiGate Riskware/Toolbar_CrossRider
Symantec Adware.Crossid
Qihoo-360 HEUR/Malware.QVM10.Gen
Antiy-AVL Trojan/Win32.SGeneric

Software Behaviors

Scheduled tasks:
  • 3d8c097a-d75d-43d1-aa88-eb4ad99df514-2.exe is scheduled as a task named 'temp_3d8c097a-d75d-43d1-aa88-eb4ad99df514-2'.
  • MediaPlayerplus-nova.exe is scheduled as a task named 'temp_bf878d97-0287-421f-86a1-65974521fc40-7'.

Startup Entries

Startup tasks:
  • ee8000ef-7e62-443e-8287-6d63d292836f-3.exe is automatically launched at startup through a scheduled task named ee8000ef-7e62-443e-8287-6d63d292836f-3.
  • 48782ae5-b338-4216-a537-e1868ae58073-4.exe is automatically launched at startup through a scheduled task named 48782ae5-b338-4216-a537-e1868ae58073-4.
  • MediaPlayerplus-codedownloader.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-1.
  • b0625433-0826-4d86-9af6-bc28310b6329-5.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-5.
  • b0625433-0826-4d86-9af6-bc28310b6329-4.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-4.
  • b0625433-0826-4d86-9af6-bc28310b6329-2.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-2.

Software Details

URL:
https://crossrider.com/pages/privacy
Support:
–
Installation path:
C:\Program Files\mediaplayerplus
Uninstaller:
C:\Program Files\MediaPlayerplus\Uninstall.exe /fromcontrolpanel=1
Size:
9.00 MB
Language:
English

MediaPlayerplus Executable Details

Primary executable:
utils.exe
Name:
MediaPlayerplus
Path:
C:\Program Files\mediaplayerplus\utils.exe
MD5:
4fd74b9d7799866b2ff64be52a78a220
SHA-1:
–
SHA-256:
–
Files installed by MediaPlayerplus
File Type Filename MD5
EXE
036ef58b81ed3117c1310e801bc03d76
EXE
37dc0aa1096c9bdf05948fab7118ef7f
EXE
e050b017503d82769a478a9da026b3ac
EXE
0469038a4214825960d43099f1e5903a
EXE
9d500518332b19eac14d7af56b92a582
EXE
e89a37286a6dcdcf25588b477d2535ee
EXE
e3841d8df7618e60693d339e21266a45
EXE
4d33671648d04e6a3bf6877abd9a3608
EXE
2ba67648c9f3072488b4ff39ad726ccd
EXE
6b39f6e75318b154acc33f87b9a0237f