MediaPlayerplus

MediaPlayerplus

Known Adware

by Kimahri Software inc.

What is MediaPlayerplus?

MediaPlayerplus is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 58.43% of installations running this operating system. MediaPlayerplus's installer is typically 9.00 MB in size and installs around 206 files. The most common release is 1.34.4.10 with 58.55% of all installations currently using this version.

MediaPlayerplus is most popular in the United States with 27.65% of installations residing in this country.

MediaPlayerplus adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About MediaPlayerplus?

Our web browser extension is supported by ads (adware) and may inject advertising in the user's web browser in the form of banner ads, text hyperlinks, and popups.

Multiple virus scanners have detected malware in MediaPlayerplus.

utils.exe (MD5: 4fd74b9d7799866b2ff64be52a78a220) has been flagged by 38 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
Malwarebytes PUP.Optional.CrossRider.A
Lavasoft Ad-Aware Gen:Variant.Adware.Plush.1
AhnLab-V3 PUP/Win32.CrossRider
avast! Win32:Crossrider-AP [PUP]
AVG Generic.390
Avira Adware/CrossRider.A.1721
AVware Crossrider (fs)
Bitdefender Gen:Variant.Adware.Plush.1
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.27550
Emsisoft Anti-Malware Gen:Variant.Adware.Plush.1 (B)
Fortinet FortiGate Riskware/CroRi
F-Prot W32/A-d818135f!Eldorado
F-Secure Gen:Variant.Adware.Plush.1
G Data Gen:Variant.Adware.Plush.1
IKARUS anti.virus not-a-virus:WebToolbar.CroRi
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.th
MicroWorld-eScan Gen:Variant.Adware.Plush.1
NANO AntiVirus Trojan.Win32.Crossrider.dfxnsz
Qihoo-360 Win32/Virus.Adware.ff4
Symantec Trojan.ADH.2
Trend Micro TROJ_GEN.R0C1C0EJF14
TrendMicro-HouseCall TROJ_GEN.R0C1C0EJF14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.150
K7 AntiVirus Unwanted-Program ( 004a9d061 )
K7GW Unwanted-Program ( 004a9d061 )
Sophos AppRider
Avira AntiVir Adware/CrossRider.AC
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Panda Antivirus PUP/PlusHD
Antiy-AVL not-a-virus:WebToolbar.Win32.CroRi.bei
nProtect Trojan.Generic.11181062
3afb30f2-c545-4ee2-8e16-a626c7bddeae-4.exe (MD5: 390f0264a03b2f505842937ec1cf318a) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
3afb30f2-c545-4ee2-8e16-a626c7bddeae-3.exe (MD5: d31ad17b16a0808259d62a182b05aaf6) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
3afb30f2-c545-4ee2-8e16-a626c7bddeae-2.exe (MD5: 2a312e9587507b33a2dc313bc6c37d5d) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
35c01418-e0a6-4915-805b-e29ce589ad45-5.exe (MD5: 74fc7d03f4178089ac28b02455d9ec16) has been flagged by 17 scanners:
Scanner Software Result
AVG Agent.X
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.MediaPlayerplus.A
McAfee Adware-CrossR!74FC7D03F417
McAfee-GW-Edition Adware-CrossR!74FC7D03F417
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Avira AntiVir Adware/CrossRider.A.3146
TrendMicro-HouseCall TROJ_GEN.F47V0426
Fortinet FortiGate Riskware/Toolbar_CrossRider
Symantec Adware.Crossid
Qihoo-360 HEUR/Malware.QVM10.Gen
Antiy-AVL Trojan/Win32.SGeneric

Software Behaviors

Scheduled tasks:
  • 3d8c097a-d75d-43d1-aa88-eb4ad99df514-2.exe is scheduled as a task named 'temp_3d8c097a-d75d-43d1-aa88-eb4ad99df514-2'.
  • MediaPlayerplus-nova.exe is scheduled as a task named 'temp_bf878d97-0287-421f-86a1-65974521fc40-7'.

Startup Entries

Startup tasks:
  • ee8000ef-7e62-443e-8287-6d63d292836f-3.exe is automatically launched at startup through a scheduled task named ee8000ef-7e62-443e-8287-6d63d292836f-3.
  • 48782ae5-b338-4216-a537-e1868ae58073-4.exe is automatically launched at startup through a scheduled task named 48782ae5-b338-4216-a537-e1868ae58073-4.
  • MediaPlayerplus-codedownloader.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-1.
  • b0625433-0826-4d86-9af6-bc28310b6329-5.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-5.
  • b0625433-0826-4d86-9af6-bc28310b6329-4.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-4.
  • b0625433-0826-4d86-9af6-bc28310b6329-2.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-2.

Software Details

URL:
https://crossrider.com/pages/privacy
Support:
–
Installation path:
C:\Program Files\mediaplayerplus
Uninstaller:
C:\Program Files\MediaPlayerplus\Uninstall.exe /fromcontrolpanel=1
Size:
9.00 MB
Language:
English

MediaPlayerplus Executable Details

Primary executable:
utils.exe
Name:
MediaPlayerplus
Path:
C:\Program Files\mediaplayerplus\utils.exe
MD5:
4fd74b9d7799866b2ff64be52a78a220
SHA-1:
–
SHA-256:
–
Files installed by MediaPlayerplus
File Type Filename MD5
EXE
3a0a139c9b327d2ff055449a264e5487
EXE
b32202d10eb060ba77d2b301e0e2829d
EXE
0d0839708a27cb236c1f62431a7a042d
EXE
546dbe7638f6f9c9a54e9899cac63adf
EXE
d3ee27b877d04b4077f322df5bb26c90
EXE
a857ddda1b51f789726dd72a866ec798
EXE
bc3176ba666e2631bcb7f2a91a64b454
EXE
14201e1bc74a5619e604a3b991c9d9d6
EXE
d238531f08047a0363712bf40958b244
EXE
5271b333a3e7c38fd3f8e2e172cb9258