MediaPlayerplus

MediaPlayerplus

Known Adware

by Kimahri Software inc.

What is MediaPlayerplus?

MediaPlayerplus is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 58.43% of installations running this operating system. MediaPlayerplus's installer is typically 9.00 MB in size and installs around 206 files. The most common release is 1.34.4.10 with 58.55% of all installations currently using this version.

MediaPlayerplus is most popular in the United States with 27.65% of installations residing in this country.

MediaPlayerplus adds 2 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About MediaPlayerplus?

Our web browser extension is supported by ads (adware) and may inject advertising in the user's web browser in the form of banner ads, text hyperlinks, and popups.

Multiple virus scanners have detected malware in MediaPlayerplus.

utils.exe (MD5: 4fd74b9d7799866b2ff64be52a78a220) has been flagged by 38 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.VMDetector.E
Bkav FE HW32.CDB
ESET-NOD32 a variant of Win32/Packed.VMDetector.E
Malwarebytes PUP.Optional.CrossRider.A
Lavasoft Ad-Aware Gen:Variant.Adware.Plush.1
AhnLab-V3 PUP/Win32.CrossRider
avast! Win32:Crossrider-AP [PUP]
AVG Generic.390
Avira Adware/CrossRider.A.1721
AVware Crossrider (fs)
Bitdefender Gen:Variant.Adware.Plush.1
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.27550
Emsisoft Anti-Malware Gen:Variant.Adware.Plush.1 (B)
Fortinet FortiGate Riskware/CroRi
F-Prot W32/A-d818135f!Eldorado
F-Secure Gen:Variant.Adware.Plush.1
G Data Gen:Variant.Adware.Plush.1
IKARUS anti.virus not-a-virus:WebToolbar.CroRi
Kaspersky not-a-virus:WebToolbar.Win32.CroRi.bei
McAfee Adware-CrossR
McAfee-GW-Edition BehavesLike.Win32.AdwareCross.th
MicroWorld-eScan Gen:Variant.Adware.Plush.1
NANO AntiVirus Trojan.Win32.Crossrider.dfxnsz
Qihoo-360 Win32/Virus.Adware.ff4
Symantec Trojan.ADH.2
Trend Micro TROJ_GEN.R0C1C0EJF14
TrendMicro-HouseCall TROJ_GEN.R0C1C0EJF14
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CroRi.Win32.150
K7 AntiVirus Unwanted-Program ( 004a9d061 )
K7GW Unwanted-Program ( 004a9d061 )
Sophos AppRider
Avira AntiVir Adware/CrossRider.AC
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Panda Antivirus PUP/PlusHD
Antiy-AVL not-a-virus:WebToolbar.Win32.CroRi.bei
nProtect Trojan.Generic.11181062
3afb30f2-c545-4ee2-8e16-a626c7bddeae-4.exe (MD5: 390f0264a03b2f505842937ec1cf318a) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
3afb30f2-c545-4ee2-8e16-a626c7bddeae-3.exe (MD5: d31ad17b16a0808259d62a182b05aaf6) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
3afb30f2-c545-4ee2-8e16-a626c7bddeae-2.exe (MD5: 2a312e9587507b33a2dc313bc6c37d5d) has been flagged by 2 scanners:
Scanner Software Result
Malwarebytes PUP.Optional.MediaPlayerplus.A
VIPRE Antivirus Crossrider (fs)
35c01418-e0a6-4915-805b-e29ce589ad45-5.exe (MD5: 74fc7d03f4178089ac28b02455d9ec16) has been flagged by 17 scanners:
Scanner Software Result
AVG Agent.X
Baidu-International Adware.Win32.CrossRider.AC
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AC
G Data Win32.Application.Plush.A
Malwarebytes PUP.Optional.MediaPlayerplus.A
McAfee Adware-CrossR!74FC7D03F417
McAfee-GW-Edition Adware-CrossR!74FC7D03F417
Panda Antivirus PUP/PlusHD
VIPRE Antivirus Crossrider (fs)
Bkav FE W32.CrossRider.Trojan
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Avira AntiVir Adware/CrossRider.A.3146
TrendMicro-HouseCall TROJ_GEN.F47V0426
Fortinet FortiGate Riskware/Toolbar_CrossRider
Symantec Adware.Crossid
Qihoo-360 HEUR/Malware.QVM10.Gen
Antiy-AVL Trojan/Win32.SGeneric

Software Behaviors

Scheduled tasks:
  • 3d8c097a-d75d-43d1-aa88-eb4ad99df514-2.exe is scheduled as a task named 'temp_3d8c097a-d75d-43d1-aa88-eb4ad99df514-2'.
  • MediaPlayerplus-nova.exe is scheduled as a task named 'temp_bf878d97-0287-421f-86a1-65974521fc40-7'.

Startup Entries

Startup tasks:
  • ee8000ef-7e62-443e-8287-6d63d292836f-3.exe is automatically launched at startup through a scheduled task named ee8000ef-7e62-443e-8287-6d63d292836f-3.
  • 48782ae5-b338-4216-a537-e1868ae58073-4.exe is automatically launched at startup through a scheduled task named 48782ae5-b338-4216-a537-e1868ae58073-4.
  • MediaPlayerplus-codedownloader.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-1.
  • b0625433-0826-4d86-9af6-bc28310b6329-5.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-5.
  • b0625433-0826-4d86-9af6-bc28310b6329-4.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-4.
  • b0625433-0826-4d86-9af6-bc28310b6329-2.exe is automatically launched at startup through a scheduled task named b0625433-0826-4d86-9af6-bc28310b6329-2.

Software Details

URL:
https://crossrider.com/pages/privacy
Support:
–
Installation path:
C:\Program Files\mediaplayerplus
Uninstaller:
C:\Program Files\MediaPlayerplus\Uninstall.exe /fromcontrolpanel=1
Size:
9.00 MB
Language:
English

MediaPlayerplus Executable Details

Primary executable:
utils.exe
Name:
MediaPlayerplus
Path:
C:\Program Files\mediaplayerplus\utils.exe
MD5:
4fd74b9d7799866b2ff64be52a78a220
SHA-1:
–
SHA-256:
–
Files installed by MediaPlayerplus
File Type Filename MD5
EXE
1f74e3785a6689493e09096312e51dfa
EXE
b306f258c86a117f0441ce01b97495fd
EXE
6790678da5422e908ad256e1085a4550
EXE
96dd2e5eabdadad52b3a065fbab97adc
EXE
a860eb4ad3b39173d1934f41d2e141b7
EXE
6c80d5c4f1ef99bb1e46e3fb10389f48
EXE
2902c2ee04b10ba78f808528e15608e6
EXE
50b4be3b907850c935afb34d369638c9
EXE
7adf0c51e482bb9fa1d31960b93f1145
EXE
3db90e5769e97b21048eb9a366c5a190