Senses

Senses

Known Toolbar

by Krance Development

What is Senses?

Senses is software application developed by Krance Development. It is most commonly found on computers running Windows 7 with nearly 67.37% of installations running this operating system. Senses's installer is typically 16.00 MB in size and installs around 331 files. The most common release is 1.35.9.29 with 73.62% of all installations currently using this version.

Senses is most popular in the United States with 14.04% of installations residing in this country.

Senses adds 6 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About Senses?

Senses is a web browser extension developed within the CrossRider toolbar framework. It operates by delivering display advertising within the user's browser, presenting ads in the form of banners and contextual text links. These ads are injected into white space areas of the HTML page or over existing ads on the underlying website. The content of the ads typically includes promotions for PC optimization utilities, bundled malware, and other forms of malvertising.

Multiple virus scanners have detected malware in Senses.

utils.exe (MD5: 7d6d2b4fbafe4a9c754560225e7826b0) has been flagged by 48 scanners:
Scanner Software Result
AegisLab AdWare.NSIS.Indirect
avast! NSIS:InstMonetizer-BR [PUP]
Bkav FE HW32.Paked
Dr.Web Trojan.Crossrider.34088
G Data NSIS.Adware.Crossrider
Malwarebytes PUP.Optional.crossRider.A
McAfee Artemis!7D6D2B4FBAFE
McAfee-GW-Edition Artemis
Qihoo-360 HEUR/Malware.QVM20.Gen
Symantec WS.Reputation
Vba32 AntiVirus Trojan.GoogUpdate
Lavasoft Ad-Aware Gen:Application.Heur.7v1@m8BzpAhO
AhnLab-V3 PUP/Win32.CrossRider
Antiy-AVL Trojan/NSIS.GoogUpdate.dq
AVG Crossrider.DEK
Avira ADWARE/CrossRider.Gen7
AVware Crossrider (fs)
Baidu-International Adware.Win32.CrossAd.AX
Bitdefender Gen:Application.Heur.7v1@m8BzpAhO
CAT-QuickHeal PUA.BrightCircle.OD6
Clam AntiVirus Win.Trojan.Crossrider-190
Comodo Security Application.Win32.CrossRider.BMK
Cyren W32/AdLoad.AK2.gen!Eldorado
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AX potentially unwanted
Fortinet FortiGate W32/GoogUpdate.AX!tr
F-Prot W32/AdLoad.AK2.gen!Eldorado
F-Secure Gen:Application.Heur.7v1@m8BzpAhO
IKARUS anti.virus Trojan.GoogUpdate
Jiangmin Trojan/NSIS.apw
K7 AntiVirus Trojan ( 004af2de1 )
K7GW Trojan ( 004af2de1 )
Kaspersky Trojan.NSIS.GoogUpdate.dq
MicroWorld-eScan Gen:Application.Heur.7v1@m8BzpAhO
NANO AntiVirus Trojan.Win32.Crossrider.diklbz
nProtect Trojan/W32.Agent.2021280
Panda Antivirus Trj/Genetic.gen
Sophos Generic PUA DB
SUPERAntiSpyware Adware.CrossRider/Variant
Tencent Trojan.Win32.Qudamah.Gen.1
Trend Micro TROJ_GEN.R002C0ELA14
TrendMicro-HouseCall TROJ_GEN.R002C0ELA14
VIPRE Antivirus Crossrider (fs)
Zillya Trojan.GoogUpdate.Win32.4353
ALYac Adware.Agent.PDC
Emsisoft Anti-Malware Adware.Agent.PDC (B)
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Rising Antivirus PE:Trojan.GoogUpdate!6.1DFB
Agnitum Outpost PUA.Toolbar.CrossRider!
44dcd776-1ddc-4c08-bcb1-87678c8f5a61-11.exe (MD5: e6b13009044621caef14155252029610) has been flagged by 32 scanners:
Scanner Software Result
AhnLab-V3 PUP/Win32.CrossRider
AVG Berta.0DE
Avira Adware/CrossRider.gr
Baidu-International Adware.Win32.CrossAd.BAD
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.33420
IKARUS anti.virus Trojan.GoogUpdate
Malwarebytes PUP.Optional.Senses.A
McAfee Artemis!E6B130090446
McAfee-GW-Edition BehavesLike.Win32.BadFile.th
Panda Antivirus Trj/Genetic.gen
Qihoo-360 Win32/Virus.Adware.3cc
VIPRE Antivirus Crossrider (fs)
avast! Win32:Crossrider-AI [PUP]
AVware Crossrider (fs)
Fortinet FortiGate Adware/Adwapper
G Data Win32.Adware.Crossrider.L
Kaspersky not-a-virus:AdWare.NSIS.Adwapper.cd
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AY
K7GW Unwanted-Program ( 004afade1 )
Rising Antivirus PE:Malware.Obscure!1.9C59
Symantec WS.Reputation.1
Vba32 AntiVirus AdWare.Adwapper
Antiy-AVL GrayWare[AdWare:not-a-virus]/NSIS.Adwapper
Sophos Generic PUA KK
F-Prot W32/A-9e906728!Eldorado
NANO AntiVirus Riskware.Win32.Crossrider.dgfaxq
nProtect Trojan/W32.Agent.1275800
Zillya Trojan.GoogUpdate.Win32.3087
Tencent Nsis.Adware.Adwapper.Pdwd
SUPERAntiSpyware Adware.Crossrider/Variant
Clam AntiVirus Win.Adware.Agent-12356
426f656b-0c36-44a6-bed9-c608cc9926a6-7.exe (MD5: 7d5fcba7c4aa7fd45dc26bff265074fc) has been flagged by 38 scanners:
Scanner Software Result
avast! Win32:Crossrider-AH [PUP]
AVG Generic.6A1
AVware Crossrider (fs)
Baidu-International PUA.Win32.CrossRider.BAV
Dr.Web Trojan.Crossrider.35288
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AV
Fortinet FortiGate Riskware/CrossRider
G Data Win32.Adware.Crossrider.R
Malwarebytes PUP.Optional.Senses.A
McAfee Artemis!7D5FCBA7C4AA
McAfee-GW-Edition BehavesLike.Win32.BadFile.th
NANO AntiVirus Riskware.Win32.Crossrider.dgkldz
Qihoo-360 HEUR/Malware.QVM10.Gen
VIPRE Antivirus Crossrider (fs)
Avira Adware/CrossRider.pq
IKARUS anti.virus Trojan.GoogUpdate
Kaspersky not-a-virus:AdWare.NSIS.Adwapper.ai
Panda Antivirus Trj/Genetic.gen
Rising Antivirus PE:Malware.Obscure!1.9C59
Tencent Nsis.Adware.Adwapper.Lnoe
Symantec WS.Reputation.1
Zillya Adware.Adwapper.Win32.621
Comodo Security Application.Win32.Plush.GRI
F-Prot W32/A-1a27c920!Eldorado
Sophos Generic PUA GK
Vba32 AntiVirus AdWare.Adwapper
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
AhnLab-V3 PUP/Win32.CrossRider
SUPERAntiSpyware Adware.Crossrider/Variant
Lavasoft Ad-Aware Gen:Variant.Adware.Kazy.132996
Bitdefender Gen:Variant.Adware.Kazy.132996
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.132996 (B)
F-Secure Gen:Variant.Adware.Kazy.132996
MicroWorld-eScan Gen:Variant.Adware.Kazy.132996
K7GW Unwanted-Program ( 004afade1 )
Antiy-AVL GrayWare[AdWare:not-a-virus]/NSIS.Adwapper
nProtect Trojan/W32.Agent.1275800
Clam AntiVirus Win.Adware.Agent-12356
426f656b-0c36-44a6-bed9-c608cc9926a6-11.exe (MD5: 25c6e93f09cf9e8d8fe36fffb474f1fd) has been flagged by 38 scanners:
Scanner Software Result
AhnLab-V3 PUP/Win32.CrossRider
AVG Generic.6A1
Avira Adware/CrossRider.gr
AVware Crossrider (fs)
Baidu-International PUA.Win32.CrossRider.BAV
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AV
F-Prot W32/A-fe3c301b!Eldorado
Malwarebytes PUP.Optional.Senses.A
McAfee Artemis!25C6E93F09CF
McAfee-GW-Edition BehavesLike.Win32.BadFile.th
Panda Antivirus Trj/Genetic.gen
Qihoo-360 HEUR/Malware.QVM10.Gen
Sophos Generic PUA GL
VIPRE Antivirus Crossrider (fs)
avast! Win32:Crossrider-AI [PUP]
Dr.Web Trojan.Crossrider.37346
G Data Win32.Adware.Crossrider.R
IKARUS anti.virus Trojan.GoogUpdate
SUPERAntiSpyware Adware.Crossrider/Variant
Symantec Adware.Crossid
nProtect Trojan/W32.Agent.865176
Rising Antivirus PE:Malware.Obscure!1.9C59
Vba32 AntiVirus AdWare.Adwapper
Zillya Trojan.GoogUpdate.Win32.3095
Antiy-AVL GrayWare[AdWare:not-a-virus]/NSIS.Adwapper
Kaspersky not-a-virus:AdWare.NSIS.Adwapper.cd
Tencent Nsis.Adware.Adwapper.Sxym
Fortinet FortiGate Adware/Adwapper
NANO AntiVirus Riskware.Win32.Crossrider.dgkldz
Comodo Security Application.Win32.Plush.GRI
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Lavasoft Ad-Aware Gen:Variant.Adware.Kazy.132996
Bitdefender Gen:Variant.Adware.Kazy.132996
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.132996 (B)
F-Secure Gen:Variant.Adware.Kazy.132996
MicroWorld-eScan Gen:Variant.Adware.Kazy.132996
K7GW Unwanted-Program ( 004afade1 )
Clam AntiVirus Win.Adware.Agent-12356
41140839-4dc1-40e1-8845-26b909bab058-7.exe (MD5: 89c60c06c4a6d7fe3c606b693d61a0c4) has been flagged by 46 scanners:
Scanner Software Result
Lavasoft Ad-Aware Gen:Application.Heur.bv1@maGrtAbO
AhnLab-V3 Win-PUP/CrossRider
avast! Win32:Crossrider-AI [PUP]
AVG Berta.0DE
Avira ADWARE/CrossRider.Gen
AVware Crossrider (fs)
Baidu-International Adware.Win32.CrossAd.AV
Bitdefender Gen:Application.Heur.bv1@maGrtAbO
Bkav FE W32.HfsAdware.CB48
CAT-QuickHeal PUA.BrightCircle.OD6
Comodo Security ApplicUnwnt
Cyren W32/A-6583813c!Eldorado
Dr.Web Trojan.Crossrider.33788
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AV potentially unwanted
Fortinet FortiGate Riskware/CrossRider
F-Prot W32/A-6583813c!Eldorado
F-Secure Gen:Application.Heur.bv1@maGrtAbO
G Data Gen:Application.Heur.bv1@maGrtAbO
Jiangmin Trojan/NSIS.bet
K7 AntiVirus Unwanted-Program ( 004b15731 )
K7GW Unwanted-Program ( 004b15731 )
Malwarebytes PUP.Optional.Senses.A
McAfee Artemis!89C60C06C4A6
MicroWorld-eScan Gen:Application.Heur.bv1@maGrtAbO
NANO AntiVirus Trojan.Win32.Crossrider.dfokep
nProtect Trojan/W32.Agent.1067416
Panda Antivirus Trj/Genetic.gen
Qihoo-360 Win32/Virus.Adware.de5
Rising Antivirus PE:Trojan.GoogUpdate!6.1DFB
Sophos Generic PUA BE
Symantec Trojan.Gen
Tencent Win32.Adware.Bp-browser.Luqs
Trend Micro TROJ_GEN.R0C2C0ECA15
TrendMicro-HouseCall TROJ_GEN.R0C2C0ECA15
Vba32 AntiVirus Trojan.GoogUpdate
VIPRE Antivirus Crossrider (fs)
Zillya Adware.Adwapper.Win32.451
Antiy-AVL GrayWare[AdWare:not-a-virus]/NSIS.Adwapper.ai
Clam AntiVirus Win.Adware.Plush-54
IKARUS anti.virus Trojan.GoogUpdate
Kaspersky not-a-virus:AdWare.NSIS.Adwapper.ai
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
McAfee-GW-Edition BehavesLike.Win32.PUP.th
Emsisoft Anti-Malware Gen:Variant.Adware.Kazy.454784 (B)
SUPERAntiSpyware Adware.Crossrider/Variant
Agnitum Outpost PUA.Toolbar.CrossRider!

Software Behaviors

Scheduled tasks:
  • c2488e1f-429d-405f-8456-3db78f403101-4.exe is scheduled as a task named 'c2488e1f-429d-405f-8456-3db78f403101-4'.
  • 7e8305ea-9a8d-48a4-9ac4-2f095dc1b624-5.exe is scheduled as a task named '7e8305ea-9a8d-48a4-9ac4-2f095dc1b624-5'.
  • 7e8305ea-9a8d-48a4-9ac4-2f095dc1b624-2.exe is scheduled as a task named '7e8305ea-9a8d-48a4-9ac4-2f095dc1b624-2'.
  • Senses-codedownloader.exe is scheduled as a task named '77395672-6ac3-4711-ba58-61c6c5015a05-1'.
  • 3af2830d-58a0-4583-9510-eb291ff8aa4b-11.exe is scheduled as a task named '3af2830d-58a0-4583-9510-eb291ff8aa4b-3'.
  • c728c8aa-78e1-4fdd-a535-59e4f9b47e2e-2.exe is scheduled as a task named 'temp_c728c8aa-78e1-4fdd-a535-59e4f9b47e2e-2'.

Startup Entries

Startup tasks:
  • 8b8af638-f8bc-4972-8c79-82d268796676-7.exe is automatically launched at startup through a scheduled task named f05d462b-2a6a-4a9f-b2be-c19282ef01af-1.
  • 61a0e478-5e7d-4e17-a92a-b732a2453430-7.exe is automatically launched at startup through a scheduled task named ee7b4f0f-a0c2-40ef-8fa5-2a05a9ba731b-1.
  • Senses-codedownloader.exe is automatically launched at startup through a scheduled task named ee7b4f0f-a0c2-40ef-8fa5-2a05a9ba731b-7.
  • ee7b4f0f-a0c2-40ef-8fa5-2a05a9ba731b-4.exe is automatically launched at startup through a scheduled task named ee7b4f0f-a0c2-40ef-8fa5-2a05a9ba731b-4.
  • ee7b4f0f-a0c2-40ef-8fa5-2a05a9ba731b-11.exe is automatically launched at startup through a scheduled task named ee7b4f0f-a0c2-40ef-8fa5-2a05a9ba731b-3.
  • 61a0e478-5e7d-4e17-a92a-b732a2453430-11.exe is automatically launched at startup through a scheduled task named 61a0e478-5e7d-4e17-a92a-b732a2453430-3.

Software Details

URL:
–
Support:
–
Installation path:
C:\Program Files\senses
Uninstaller:
C:\Program Files\Senses\Uninstall.exe /fcp=1
Size:
16.00 MB
Language:
English

Senses Executable Details

Primary executable:
utils.exe
Name:
Senses
Path:
C:\Program Files\senses\utils.exe
MD5:
7d6d2b4fbafe4a9c754560225e7826b0
SHA-1:
–
SHA-256:
–
Files installed by Senses
File Type Filename MD5
EXE
44dcd776-1ddc-4c08-bcb1-87678c8f5a61-7.exe
Malware
e85b776244d71334577e241746d1a09b
CRX
44dcd776-1ddc-4c08-bcb1-87678c8f5a61.crx
bc31d6ddf767eafcccde59389993ade8
XPI
44dcd776-1ddc-4c08-bcb1-87678c8f5a61.xpi
198db34661912cdeb80bf700f730ec93
EXE
918d70ad-e60d-4ae4-a7ce-08a3afaf7514-64.exe
5ed051314103d7ca8a4787a8d406842e
XPI
918d70ad-e60d-4ae4-a7ce-08a3afaf7514.xpi
13eee633aecdfc36feb8af73e3e6ec9b
DLL
986d367a-9cde-4720-b210-f9f9d57f9143.dll
44dcf4e59e840af0448ea6c3d9f5f80e
DLL
aafdcf46-e560-473c-9dd0-794c2f511d65.dll
672811c01c65c495c8ed239f4368e794
CRX
f2e908be-d1af-4025-a933-a3db49a7fac8.crx
f569389cdf9f36625f0d70daa6a0e815
CRX
257bb20a-8918-498d-b7e0-1f76f19b016f.crx
6635cb56fd5404a86e20ecc2c58b986a
DLL
257bb20a-8918-498d-b7e0-1f76f19b016f.dll
3638f5c11569a6a391d48fd80fff9801