PlusSTotal-9.4

Known Adware

What is PlusSTotal-9.4?

PlusSTotal-9.4 is software application developed by Kimahri Software inc.. It is most commonly found on computers running Windows 7 with nearly 62.50% of installations running this operating system. PlusSTotal-9.4's installer is typically 9.00 MB in size and installs around 157 files. The most common release is 1.34.7.1 with 35.42% of all installations currently using this version.

PlusSTotal-9.4 is most popular in the United States with 97.2% of installations residing in this country.

PlusSTotal-9.4 adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About PlusSTotal-9.4?

This adware operates as an extension and/or add-on within the user's Internet browser, injecting advertising in various forms such as search-related ads, banner and video ads, in-text ads and links, transitional, interstitial and full page ads. These ads and features are not affiliated with the website being visited and are injected into the header or footer area of the web page. Additionally, the software converts words on webpages into hyperlinks that lead to advertisements. Classified as adware and/or a PUP based on its behavior, this software is commonly distributed through third-party download managers and installers, often included as an additional or sponsored offer.

Multiple virus scanners have detected malware in PlusSTotal-9.4.

70bd18d2-120a-40a4-888d-6023dce2ee5a-11.exe (MD5: 949c506cd9474e061413aab9019689a0) has been flagged by 19 scanners:

Scanner Software	Version	Result
AVG	14.0.0.3986	Generic.332
ESET-NOD32	10090	a variant of Win32/Toolbar.CrossRider.AK
IKARUS anti.virus	T3.1.6.1.0	AdWare.Adload
Malwarebytes	1.75.0.1	PUP.Optional.PlusHD.A
NANO AntiVirus	0.28.0.60698	Riskware.Win32.AdLoad.dcabgp
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Symantec	20131.1.5.61	Trojan.ADH.2
VIPRE Antivirus	31252	Crossrider (fs)
Bitdefender	7.2	Gen:Variant.Adware.Kazy.374109
Emsisoft Anti-Malware	3.0.0.599	Gen:Variant.Adware.Kazy.374109 (B)
F-Secure	11.0.19100.45	Gen:Variant.Adware.Kazy.374109
G Data	24	Gen:Variant.Adware.Kazy.374109
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Kazy.374109
Avira AntiVir	7.11.166.78	ADWARE/CrossRider.Gen2
AVware	1.5.0.16	Crossrider (fs)
Baidu-International	3.5.1.41473	Adware.Win64.Crossrider.BF
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
Kingsoft AntiVirus	2013.04.09.267	Win32.Troj.Generic.a.(kcloud)
Sophos	4.98.0	AppRider

6b93058f-1fc5-4421-a112-e0f0546afe14-5.exe (MD5: 5cfc4945a386cb16fa28f562bca83615) has been flagged by 24 scanners:

Scanner Software	Version	Result
AhnLab-V3	2014.07.23.00	PUP/Win32.CrossRider
Avira AntiVir	7.11.163.116	ADWARE/CrossRider.Gen2
AVG	14.0.0.3986	Generic.332
Baidu-International	3.5.1.41473	Adware.Win32.CrossRider.BAH
ESET-NOD32	10138	a variant of Win32/Toolbar.CrossRider.AH
IKARUS anti.virus	T3.1.6.1.0	AdWare.Adload
Malwarebytes	1.75.0.1	PUP.Optional.PlusHD.A
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
Symantec	20131.1.5.61	Trojan.ADH.2
VIPRE Antivirus	31512	Crossrider (fs)
avast!	8.0.1489.320	Win32:Adware-gen [Adw]
G Data	24	Win32.Application.Plush.A
Jiangmin	16.0.100	Adware/Adload.avl
NANO AntiVirus	0.28.0.60253	Riskware.Win32.AdLoad.dbduhk
Sophos	4.98.0	AppRider
F-Prot	4.7.1.166	W32/A-eb9ef301!Eldorado
Bitdefender	7.2	Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware	3.0.0.599	Gen:Variant.Adware.Kazy.374062 (B)
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Kazy.374062
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
F-Secure	11.0.19100.45	Gen:Variant.Adware.Kazy.374062
AVware	1.5.0.16	Crossrider (fs)
Kaspersky	12.0.0.1225	Trojan.NSIS.GoogUpdate.ck

6b93058f-1fc5-4421-a112-e0f0546afe14-4.exe (MD5: 4c245667f2af3468e03fd1efaeaf5c2a) has been flagged by 19 scanners:

Scanner Software	Version	Result
Avira AntiVir	7.11.163.116	ADWARE/CrossRider.Gen2
AVG	14.0.0.3986	Generic.332
Baidu-International	3.5.1.41473	Adware.Win32.CrossRider.BAK
ESET-NOD32	10138	a variant of Win32/Toolbar.CrossRider.AK
Malwarebytes	1.75.0.1	PUP.Optional.PlusHD.A
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Symantec	20131.1.5.61	Trojan.ADH.2
VIPRE Antivirus	31512	Crossrider (fs)
IKARUS anti.virus	T3.1.6.1.0	AdWare.Adload
NANO AntiVirus	0.28.0.60698	Riskware.Win32.AdLoad.dcabgp
Bitdefender	7.2	Gen:Variant.Adware.Kazy.374109
Emsisoft Anti-Malware	3.0.0.599	Gen:Variant.Adware.Kazy.374109 (B)
F-Secure	11.0.19100.45	Gen:Variant.Adware.Kazy.374109
G Data	24	Gen:Variant.Adware.Kazy.374109
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Kazy.374109
AVware	1.5.0.16	Crossrider (fs)
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
Kingsoft AntiVirus	2013.04.09.267	Win32.Troj.Generic.a.(kcloud)
Sophos	4.98.0	AppRider

6b93058f-1fc5-4421-a112-e0f0546afe14-2.exe (MD5: 4b18b90e460b11c06112e5754d78c412) has been flagged by 33 scanners:

Scanner Software	Version	Result
Avira AntiVir	7.11.163.116	ADWARE/CrossRider.Gen2
Antiy-AVL	1.0.0.1	RiskWare[WebToolbar:not-a-virus]/Win32.CrossRider
AVG	14.0.0.3986	Generic.332
Baidu-International	3.5.1.41473	Adware.Win32.CrossRider.BAJ
ESET-NOD32	10138	a variant of Win32/Toolbar.CrossRider.AJ
F-Prot	4.7.1.166	W32/A-eb9ef301!Eldorado
IKARUS anti.virus	T3.1.6.1.0	AdWare.Adload
Malwarebytes	1.75.0.1	PUP.Optional.PlusHD.A
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
Sophos	4.98.0	AppRider
Symantec	20131.1.5.61	Trojan.ADH.2
VIPRE Antivirus	31512	Crossrider (fs)
avast!	8.0.1489.320	Win32:Crossrider-M [PUP]
Avira	7.11.171.22	ADWARE/CrossRider.Gen2
AVware	1.5.0.16	Crossrider (fs)
Kaspersky	12.0.0.1225	Trojan.NSIS.GoogUpdate.ck
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.NSIS.cq.(kcloud)
McAfee	6.0.4.564	Artemis!857BE54B08D4
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.BadFile.jh
Qihoo-360	1.0.0.1015	Win32/Trojan.921
Tencent	1.0.0.1	Nsis.Trojan.Googupdate.Hwmx
Dr.Web	7.0.9.4080	Trojan.Crossrider.27726
Lavasoft Ad-Aware	12.0.163.0	Gen:Variant.Adware.Kazy.374062
Bitdefender	7.2	Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware	3.0.0.599	Gen:Variant.Adware.Kazy.374062 (B)
F-Secure	11.0.19100.45	Gen:Variant.Adware.Kazy.374062
G Data	24	Gen:Variant.Adware.Kazy.374062
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Kazy.374062
K7GW	9.183.12998	Adware ( 0049f20c1 )
NANO AntiVirus	0.28.2.61349	Riskware.Win32.AdLoad.dbqhel
AhnLab-V3	2014.07.21.03	PUP/Win32.CrossRider
Jiangmin	16.0.100	Adware/Adload.avl

6b93058f-1fc5-4421-a112-e0f0546afe14-11.exe (MD5: cfa5579a125525c87370fafe10908571) has been flagged by 14 scanners:

Scanner Software	Version	Result
Avira AntiVir	7.11.163.116	ADWARE/CrossRider.Gen2
AVG	14.0.0.3986	Generic.332
Baidu-International	3.5.1.41473	Adware.Win32.CrossRider.BAK
ESET-NOD32	10138	a variant of Win32/Toolbar.CrossRider.AK
IKARUS anti.virus	T3.1.6.1.0	AdWare.Adload
Malwarebytes	1.75.0.1	PUP.Optional.PlusHD.A
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
VIPRE Antivirus	31512	Crossrider (fs)
NANO AntiVirus	0.28.0.60698	Riskware.Win32.AdLoad.dbrdvm
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
Symantec	20131.1.5.61	WS.Reputation.1
G Data	24	Win32.Application.Plush.A
Kingsoft AntiVirus	2013.04.09.267	Win32.Troj.Generic.a.(kcloud)
Sophos	4.98.0	AppRider

Software Behaviors

Scheduled tasks:: PlusSTotal-9.4-nova.exe is scheduled as a task named 'temp_5080a2b2-dabd-433f-85c7-5f714c227b28-7'.

5080a2b2-dabd-433f-85c7-5f714c227b28-2.exe is scheduled as a task named 'temp_5080a2b2-dabd-433f-85c7-5f714c227b28-2'.

PlusSTotal-9.4-novainstaller.exe is scheduled as a task named '8fb073d1-4c4e-4614-85b9-94de43c9266d-6'.

Startup Entries

Startup tasks:: 0773f67d-35e4-4d8a-9a81-d51fa80a445c-4.exe is automatically launched at startup through a scheduled task named 0773f67d-35e4-4d8a-9a81-d51fa80a445c-4.

PlusSTotal-9.4-codedownloader.exe is automatically launched at startup through a scheduled task named d54992d9-331e-46e5-a1c9-beeb90488aed-6.

PlusSTotal-9.4-nova.exe is automatically launched at startup through a scheduled task named d54992d9-331e-46e5-a1c9-beeb90488aed-7.

d54992d9-331e-46e5-a1c9-beeb90488aed-5.exe is automatically launched at startup through a scheduled task named d54992d9-331e-46e5-a1c9-beeb90488aed-5.

d54992d9-331e-46e5-a1c9-beeb90488aed-4.exe is automatically launched at startup through a scheduled task named d54992d9-331e-46e5-a1c9-beeb90488aed-4.

d54992d9-331e-46e5-a1c9-beeb90488aed-3.exe is automatically launched at startup through a scheduled task named d54992d9-331e-46e5-a1c9-beeb90488aed-3.

Software Details

URL:: –
Support:: –
Installation path:: C:\Program Files\plusstotal-9.4
Uninstaller:: C:\Program Files\PlusSTotal-9.4\Uninstall.exe /fcp=1
Size:: 9.00 MB
Language:: English

PlusSTotal-9.4 Executable Details

Primary executable:: utils.exe
Name:: PlusSTotal-9.4
Path:: C:\Program Files\plusstotal-9.4\utils.exe
MD5:: –
SHA-1:: –
SHA-256:: –

Files installed by PlusSTotal-9.4

File Type	Filename	MD5
EXE	70bd18d2-120a-40a4-888d-6023dce2ee5a-5.exe Malware	f6fcd33572b444445d754567921226b8
CRX	360-53164.crx	b41c9471ee8e51eca761ac05ec7e6ad5
CRX	53164.crx	c0853705f0b8e0087f5170ff2646a21a
XPI	53164.xpi	e66a80aa13fd9c837ccd35e89907cef1
CRX	0773f67d-35e4-4d8a-9a81-d51fa80a445c.crx	3d364208de5b7411a4e690c9a0b9d174
XPI	0773f67d-35e4-4d8a-9a81-d51fa80a445c.xpi	27fa76d8a910442e71ca5bd64e705213
CRX	12df6dd2-fdb1-4f82-ba43-3ce6b445caaa.crx	24071c64691b22bbc7da0aeb4d06299b
EXE	baac4e07-a9e0-45ab-be42-fb9acfba0496-11.exe Adware	3e380b313629021431b1135f236f2297
EXE	baac4e07-a9e0-45ab-be42-fb9acfba0496-2.exe	b0b45eb182981f83bf62e15081e53d5b
EXE	baac4e07-a9e0-45ab-be42-fb9acfba0496-4.exe	49958068e70b88bc723af19d85c2e37f

Repair PlusSTotal-9.4

Having issues with PlusSTotal-9.4?

We recommend Fortect System Repair to automatically fix these issues

Download Now

Popularity

17% of users keep PlusSTotal-9.4 installed

Overall Rating

Bad

Known Versions (9)

1.34.8.12: 12.50%
1.34.7.29: 4.17%
1.34.7.1: 35.42%
1.34.6.10: 12.50%
1.34.5.29: 8.33%
1.34.5.22: 6.25%
1.34.5.12: 14.58%
1.34.5.4: 2.08%
1.34.4.10: 4.17%

Geography Distribution