What is DP1815?

DP1815 is software application developed by mrlmedia. It is most commonly found on computers running Windows 7 with nearly 62.12% of installations running this operating system. DP1815's installer is typically 7.00 MB in size and installs around 17 files. The most common release is 1.32.153.0 with 41.67% of all installations currently using this version.

DP1815 is most popular in the United States with 25% of installations residing in this country.

About DP1815?

This software is a web browser extension designed to integrate seamlessly with popular browsers such as Chrome, Firefox, and Edge. Upon installation, the extension will customize the browser's search and home pages and may also impact other features including 404 error handling and DNS redirections. However, it's important to note that this software may alter browser settings that can compromise its security levels. As a potentially unwanted program, it has the potential to disrupt the normal functions and web search behaviors of the browser. Furthermore, the extension may also introduce additional advertisements to the browser in addition to modifying the search provider and default home pages.

Multiple virus scanners have detected malware in DP1815.

DP1815-updater.exe (MD5: d97d4d107c493c29d832bd1c9142ff51) has been flagged by 8 scanners:

Scanner Software	Version	Result
AVG	13.0.0.3169	Generic5.ANJA
Baidu-International	3.5.1.41473	Adware.Win32.CrossRider.X
ESET-NOD32	9461	a variant of Win32/Toolbar.CrossRider.X
Malwarebytes	1.75.0001	PUP.Optional.DP1815.A
Sophos	4.97.0	Generic PUA NI
Symantec	20131.1.5.61	Adware.Crossid
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.R047H05BK14
VIPRE Antivirus	26792	Crossrider (fs)

DP1815-firefoxinstaller.exe (MD5: 66f8d20312f97ad63ac231a2e2610912) has been flagged by 12 scanners:

Scanner Software	Version	Result
AVG	13.0.0.3169	Generic5.ANHX
Baidu-International	3.5.1.41473	Adware.Win32.AddLyrics.83
ESET-NOD32	9490	a variant of Win32/Toolbar.CrossRider.Y
K7 AntiVirus	9.176.11311	Trojan ( 004958cc1 )
K7GW	9.176.11311	Trojan ( 004958cc1 )
Malwarebytes	1.75.0001	PUP.Optional.DP1815.A
McAfee	6.0.4.564	Artemis!66F8D20312F9
Sophos	4.98.0	Generic PUA FG
Symantec	20131.1.5.61	Adware.Crossid
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.R047H05BK14
VIPRE Antivirus	27000	Crossrider (fs)
McAfee-GW-Edition	2013	Artemis!0627280D3C3E

DP1815-enabler.exe (MD5: 0627280d3c3ed8e652f86814a647a3a4) has been flagged by 10 scanners:

Scanner Software	Version	Result
AVG	13.0.0.3169	Generic5.ANCJ
Baidu-International	3.5.1.41473	Adware.Win32.AddLyrics.83
ESET-NOD32	9472	a variant of Win32/Toolbar.CrossRider.X
Malwarebytes	1.75.0001	PUP.Optional.DP1815.A
McAfee	6.0.4.564	Artemis!0627280D3C3E
McAfee-GW-Edition	2013	Artemis!0627280D3C3E
Sophos	4.98.0	Generic PUA KI
Symantec	20131.1.5.61	Adware.Crossid
VIPRE Antivirus	26846	Crossrider (fs)
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.R0C1H05BH14

DP1815-codedownloader.exe (MD5: c2095a7e89f8aa68a370c795b291d738) has been flagged by 8 scanners:

Scanner Software	Version	Result
AVG	13.0.0.3169	Generic5.ANKB
Baidu-International	3.5.1.41473	Adware.Win32.CrossRider.X
ESET-NOD32	9461	a variant of Win32/Toolbar.CrossRider.X
Malwarebytes	1.75.0001	PUP.Optional.DP1815.A
Sophos	4.97.0	Generic PUA OG
Symantec	20131.1.5.61	Adware.Crossid
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.R0C1H05BH14
VIPRE Antivirus	26792	Crossrider (fs)

DP1815-bho64.dll (MD5: 62c8aa3c61c10871f318cb7bfdce36dc) has been flagged by 3 scanners:

Scanner Software	Version	Result
Baidu-International	3.5.1.41473	Adware.Win64.Crossrider.B
ESET-NOD32	9362	a variant of Win64/Toolbar.Crossrider.B
VIPRE Antivirus	25998	Crossrider (fs)

Startup Entries

Startup tasks:

DP1815-firefoxinstaller.exe is automatically launched at startup through a scheduled task named DP1815-firefoxinstaller.
DP1815-updater.exe is automatically launched at startup through a scheduled task named DP1815-updater.
DP1815-enabler.exe is automatically launched at startup through a scheduled task named DP1815-enabler.
DP1815-codedownloader.exe is automatically launched at startup through a scheduled task named DP1815-codedownloader.
DP1815-chromeinstaller.exe is automatically launched at startup through a scheduled task named DP1815-chromeinstaller.

Software Details

URL:

–

Support:

–

Installation path:

C:\Program Files\dp1815

Uninstaller:

C:\Program Files\DP1815\Uninstall.exe /fromcontrolpanel=1

Size:

7.00 MB

Language:

English

DP1815 Executable Details

Primary executable:

DP1815-bg.exe

Name:

DP1815

Path:

C:\Program Files\dp1815\DP1815-bg.exe

MD5:

301df63e0913d1288b99ad63a0be40a6

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

DP1815-chromeinstaller.exe

e5e425097616c10df33f8f210123b201

EXE

DP1815-buttonutil64.exe

324a7f3066c0a0eb3d8dd046b80830ed

EXE

DP1815-buttonutil.exe

788b8b4f55777c937a0f0dfe80910967

DLL

DP1815-bho64.dll

Malware

62c8aa3c61c10871f318cb7bfdce36dc

DLL

DP1815-bho.dll

Adware

62defb01c2d8a7082628a3dbec3ab3ab

EXE

DP1815-bg.exe

301df63e0913d1288b99ad63a0be40a6

CRX

47220.crx

3d1fe163d1aa422a00eb846f9ff1195e