power app

power app

Known Adware

by Naruto Source

What is power app?

power app is software application developed by Naruto Source. It is most commonly found on computers running Windows 7 with nearly 50.00% of installations running this operating system. power app's installer is typically 18.00 MB in size and installs around 53 files.

power app is most popular in the United States with 94.12% of installations residing in this country.

power app adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times.

About power app?

Power App is an adware program that may display unwanted advertisements within the user's web browser. This includes the insertion of ads into web pages and overlaying existing page content with advertisements, banners, coupons, or text links. The program communicates with its servers to fetch new offers, and tracks the domain names of visited pages, the displayed ads, and the user's interaction with them.

Multiple virus scanners have detected malware in power app.

utils.exe (MD5: 37bf6234f2e7812b2554578491fdd1f3) has been flagged by 38 scanners:
Scanner Software Result
avast! Win32:Malware-gen
Bkav FE HW32.Paked
Dr.Web Trojan.Crossrider.32438
G Data NSIS.Adware.Crossrider
IKARUS anti.virus AdWare.CrossRider
Malwarebytes PUP.Optional.crossRider.A
McAfee Artemis!37BF6234F2E7
McAfee-GW-Edition Artemis
NANO AntiVirus Trojan.Win32.Crossrider.dewext
Qihoo-360 HEUR/QVM20.1.Malware.Gen
Rising Antivirus PE:Malware.Obscure!1.9C59
SUPERAntiSpyware Adware.Crossrider/Variant
AhnLab-V3 PUP/Win32.CrossRider
Antiy-AVL GrayWare[AdWare:not-a-virus]/NSIS.Adwapper.ai
AVG Generic.D77
Avira Adware/CrossRider.pq
AVware Crossrider (fs)
Baidu-International PUA.Win32.CrossRider.BAR
CAT-QuickHeal AdWare.NSIS.r5 (Not a Virus)
Comodo Security ApplicUnwnt
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AR
Fortinet FortiGate Adware/Adwapper
F-Prot W32/A-ea13b6b6!Eldorado
K7 AntiVirus Unwanted-Program ( 004a9d071 )
K7GW Unwanted-Program ( 004a9d071 )
Kaspersky not-a-virus:AdWare.NSIS.Adwapper.ai
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
nProtect Trojan-Clicker/W32.Agent.901992.B
Sophos Generic PUA NC
Symantec PUA.Gen.2
Tencent Nsis.Adware.Adwapper.Ebrg
Trend Micro TROJ_GEN.R0C1C0EJI14
TrendMicro-HouseCall TROJ_GEN.R0C1C0EJI14
Vba32 AntiVirus AdWare.Adwapper
VIPRE Antivirus Crossrider (fs)
Zillya Adware.Adwapper.Win32.201
Clam AntiVirus Win.Trojan.Crossrider-47
Panda Antivirus Trj/Genetic.gen
power app-codedownloader.exe (MD5: 5d1bcbe14a1e1e5c262135b2a2ac49cf) has been flagged by 35 scanners:
Scanner Software Result
AhnLab-V3 Win-PUP/CrossRider
Antiy-AVL GrayWare[AdWare:not-a-virus]/NSIS.Adwapper.ai
avast! Win32:Crossrider-AI [PUP]
AVG Generic.D77
Avira Adware/CrossRider.pq
AVware Crossrider (fs)
Baidu-International PUA.Win32.CrossRider.bAV
CAT-QuickHeal AdWare.NSIS.g5 (Not a Virus)
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.31451
Fortinet FortiGate Adware/Adwapper
F-Prot W32/A-ea13b6b6!Eldorado
G Data Win32.Adware.Crossrider.M
K7 AntiVirus Unwanted-Program ( 004a9d071 )
K7GW Unwanted-Program ( 004a9d071 )
Kaspersky not-a-virus:AdWare.NSIS.Adwapper.ai
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.PowerApp.A
McAfee Artemis!5D1BCBE14A1E
McAfee-GW-Edition BehavesLike.Win32.PUP.th
NANO AntiVirus Riskware.Win32.Crossrider.devuka
nProtect Trojan-Clicker/W32.Agent.1075560.B
Qihoo-360 Win32/Virus.Adware.970
Sophos Generic PUA AN
Symantec PUA.Gen.2
Tencent Nsis.Adware.Adwapper.Swbj
TrendMicro-HouseCall TROJ_GEN.F0C2H00IT14
Vba32 AntiVirus AdWare.Adwapper
VIPRE Antivirus Crossrider (fs)
Zillya Trojan.GoogUpdate.Win32.2797
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AV
Rising Antivirus PE:Malware.Obscure!1.9C59
Trend Micro TROJ_GEN.R0C1C0EJK14
IKARUS anti.virus Trojan.GoogUpdate
Panda Antivirus Trj/Genetic.gen
power app-bho.dll (MD5: d1fc696b801adf4666010697ba18ea8e) has been flagged by 26 scanners:
Scanner Software Result
AhnLab-V3 PUP/Win32.BHO
Antiy-AVL RiskWare[WebToolbar:not-a-virus]/Win32.CrossRider
AVG Generic.D77
Avira Adware/CrossRider.pq
AVware Crossrider (fs)
Dr.Web Trojan.Crossrider.30979
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AF
G Data Win32.Adware.Crossrider.K
IKARUS anti.virus AdWare.WebToolbar.CroRi
K7 AntiVirus Unwanted-Program ( 004a9d071 )
K7GW Trojan ( 020000001 )
Kaspersky not-a-virus:AdWare.NSIS.Adwapper.ai
Malwarebytes PUP.Optional.PowerApp.A
NANO AntiVirus Riskware.Win32.Crossrider.dfefbf
Panda Antivirus Trj/Chgt.F
Rising Antivirus PE:Malware.Obscure!1.9C59
Sophos AppRider
Symantec Adware.Crossid
VIPRE Antivirus Crossrider (fs)
Zillya Adware.CrossRider.Win32.126
Baidu-International Adware.NSIS.Adwapper.aH
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
McAfee Artemis!3F450903DC63
McAfee-GW-Edition BehavesLike.Win32.BadFile.dh
Qihoo-360 Win32/Virus.Adware.970
Tencent Nsis.Adware.Adwapper.Lkdq
f8a94cd7-e773-4a50-8f01-fa86eb585fac-5.exe (MD5: 4b85e48fe4dd51e06ee10e1b109f0996) has been flagged by 35 scanners:
Scanner Software Result
AhnLab-V3 PUP/Win32.CrossRider
Antiy-AVL GrayWare[AdWare:not-a-virus]/NSIS.Adwapper.ai
avast! Win32:Crossrider-AG [PUP]
AVG Generic.D77
Avira Adware/CrossRider.pq
AVware Crossrider (fs)
Baidu-International PUA.Win32.CrossRider.BAV
CAT-QuickHeal AdWare.NSIS.r5 (Not a Virus)
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.31451
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AV
Fortinet FortiGate Adware/Adwapper
F-Prot W32/A-ea13b6b6!Eldorado
G Data Win32.Adware.Crossrider.L
K7 AntiVirus Unwanted-Program ( 004a9f361 )
K7GW Unwanted-Program ( 004a9f361 )
Kaspersky not-a-virus:AdWare.NSIS.Adwapper.ai
Malwarebytes PUP.Optional.PowerApp.A
McAfee Artemis!4B85E48FE4DD
McAfee-GW-Edition BehavesLike.Win32.PUP.dh
NANO AntiVirus Riskware.Win32.Crossrider.deyvqc
nProtect Trojan-Clicker/W32.Agent.978280
Panda Antivirus Trj/Genetic.gen
Qihoo-360 Win32/Virus.Adware.970
Rising Antivirus PE:Malware.Obscure!1.9C59
Sophos Generic PUA GA
Symantec PUA.Gen.2
Tencent Nsis.Adware.Adwapper.Pezt
TrendMicro-HouseCall TROJ_GEN.F0C2H00IP14
Vba32 AntiVirus AdWare.Adwapper
VIPRE Antivirus Crossrider (fs)
Zillya Trojan.GoogUpdate.Win32.2794
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Trend Micro TROJ_GEN.R0C1C0EJE14
IKARUS anti.virus Trojan.GoogUpdate
f8a94cd7-e773-4a50-8f01-fa86eb585fac-2.exe (MD5: bd9bb9fb807a4a1f27c6bb98f60061d1) has been flagged by 35 scanners:
Scanner Software Result
AhnLab-V3 Win-PUP/CrossRider
Antiy-AVL GrayWare[AdWare:not-a-virus]/NSIS.Adwapper.ai
avast! Win32:Crossrider-AG [PUP]
AVG Generic.D77
Avira Adware/CrossRider.pq
AVware Crossrider (fs)
Baidu-International PUA.Win32.CrossRider.bAV
CAT-QuickHeal AdWare.NSIS.r5 (Not a Virus)
Comodo Security ApplicUnwnt
Dr.Web Trojan.Crossrider.31451
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.AV
Fortinet FortiGate Adware/Adwapper
F-Prot W32/A-ea13b6b6!Eldorado
G Data Win32.Adware.Crossrider.L
IKARUS anti.virus Trojan.NSIS.GoogUpdate
K7 AntiVirus Unwanted-Program ( 004a9d071 )
K7GW Unwanted-Program ( 004a9d071 )
Kaspersky not-a-virus:AdWare.NSIS.Adwapper.ai
Malwarebytes PUP.Optional.PowerApp.A
McAfee Artemis!BD9BB9FB807A
McAfee-GW-Edition BehavesLike.Win32.Trojan.ch
NANO AntiVirus Riskware.Win32.Crossrider.deyujc
nProtect Trojan-Clicker/W32.Agent.901992
Panda Antivirus Trj/Genetic.gen
Qihoo-360 Win32/Virus.Adware.970
Rising Antivirus PE:Malware.Obscure!1.9C59
Sophos Generic PUA NB
Symantec PUA.Gen.2
Tencent Nsis.Adware.Adwapper.Pitv
Trend Micro TROJ_GEN.R0C1C0EKF14
TrendMicro-HouseCall TROJ_GEN.R0C1C0EKF14
Vba32 AntiVirus AdWare.Adwapper
VIPRE Antivirus Crossrider (fs)
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Zillya Trojan.GoogUpdate.Win32.2892

Software Behaviors

Scheduled tasks:
  • 8062332e-a62f-402b-a6a8-327ce378ef1c-5.exe is scheduled as a task named '8062332e-a62f-402b-a6a8-327ce378ef1c-5'.
  • 8062332e-a62f-402b-a6a8-327ce378ef1c-4.exe is scheduled as a task named '8062332e-a62f-402b-a6a8-327ce378ef1c-4'.
  • 8062332e-a62f-402b-a6a8-327ce378ef1c-11.exe is scheduled as a task named '8062332e-a62f-402b-a6a8-327ce378ef1c-3'.

Startup Entries

Startup tasks:
  • f72b67e1-57fc-4138-a4cc-a615d5287985-7.exe is automatically launched at startup through a scheduled task named f72b67e1-57fc-4138-a4cc-a615d5287985-1.
  • f72b67e1-57fc-4138-a4cc-a615d5287985-6.exe is automatically launched at startup through a scheduled task named f72b67e1-57fc-4138-a4cc-a615d5287985-6.
  • f72b67e1-57fc-4138-a4cc-a615d5287985-5.exe is automatically launched at startup through a scheduled task named f72b67e1-57fc-4138-a4cc-a615d5287985-5_user.
  • f72b67e1-57fc-4138-a4cc-a615d5287985-4.exe is automatically launched at startup through a scheduled task named f72b67e1-57fc-4138-a4cc-a615d5287985-4.
  • f72b67e1-57fc-4138-a4cc-a615d5287985-11.exe is automatically launched at startup through a scheduled task named f72b67e1-57fc-4138-a4cc-a615d5287985-3.
  • f72b67e1-57fc-4138-a4cc-a615d5287985-2.exe is automatically launched at startup through a scheduled task named f72b67e1-57fc-4138-a4cc-a615d5287985-2.

Software Details

URL:
https://crossrider.com/install/63439-power-app
Support:
–
Installation path:
C:\Program Files\power app
Uninstaller:
C:\Program Files\power app\Uninstall.exe /fcp=1
Size:
18.00 MB
Language:
English

power app Executable Details

Primary executable:
utils.exe
Name:
power app
Path:
C:\Program Files\power app\utils.exe
MD5:
37bf6234f2e7812b2554578491fdd1f3
SHA-1:
–
SHA-256:
–
Files installed by power app
File Type Filename MD5
CRX
34a5587a-42b1-4d80-90d7-acfc980a4624.crx
3d4eaba5fb1f0da96161b7b9bd9ffe4c
DLL
34a5587a-42b1-4d80-90d7-acfc980a4624.dll
50b476b22549a850191bc5ad2b524383
CRX
8ae2ddf6-1a2e-4b7d-9df5-b2ca00d2bd38.crx
2afefe8858ba6841219a75bd42bc5d86
DLL
9d21aa0b-dd89-4ea4-a9af-502dc5d65541.dll
d03b5629636bdd34dc5d4f5808f74a43
XPI
f9afd838-d6cb-47bd-b134-bfd620a8cb27.xpi
13d31a8a8c99678b3234a34a7bd86245
CRX
15124a81-8349-4c38-9696-f3827a81fd93.crx
9589d672bc22067589a38942b05f07a1
CRX
f8a94cd7-e773-4a50-8f01-fa86eb585fac.crx
8f3253b193c51946fbaf883145c0081e
XPI
f8a94cd7-e773-4a50-8f01-fa86eb585fac.xpi
4bca3c67fb5cbe796db34bbecb02523e
DLL
682bad73-1894-4d17-98b1-b3258bf0532b.dll
562f860e09d4a1ba0f963924a106d0d4
CRX
794965d3-9eac-4f6f-b6bd-e029119c7b44.crx
30b4d6a4fc201baf9ab40c1839eed6d8