TubeSaver-15

TubeSaver-15

Known Toolbar

by PassWizard

What is TubeSaver-15?

TubeSaver-15 is software application developed by PassWizard. It is most commonly found on computers running Windows 7 with nearly 55.56% of installations running this operating system. TubeSaver-15's installer is typically 7.00 MB in size and installs around 15 files.

TubeSaver-15 is most popular in the United States with 69.23% of installations residing in this country.

About TubeSaver-15?

TubeSaver is a web browser toolbar and extension that may be categorized as potentially unwanted. It aims to control the user's browsing experience by modifying the search provider and redirecting web searches to affiliated search engines. The program engages in various behaviors to increase the likelihood of user interaction with sponsored advertising through search and other ad-supported techniques, including changing the default home page, search provider, built-in search box, and address bar of the web browser. Additionally, it has the capability to alter the 'new tab' functionality to launch the modified search portal page.

Multiple virus scanners have detected malware in TubeSaver-15.

utils.exe (MD5: ccb3ded198f0b37553553208131baef9) has been flagged by 23 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.Packed.VMDetector.B
Dr.Web Trojan.Crossrider.9
ESET-NOD32 Win32/Packed.VMDetector.B
Malwarebytes PUP.Optional.Lyrics.A
Symantec WS.Reputation
TrendMicro-HouseCall TROJ_GEN.F47V1023
AhnLab-V3 Adware/Win32.Lyckriks
Antiy-AVL AdWare/Win32.Lyckriks
AVG Generic5.AIKL
Bitdefender Adware.Generic.606321
Bkav FE W32.Clodd68.Trojan.f258
Emsisoft Anti-Malware Adware.Generic.606321 (B)
Fortinet FortiGate Adware/Lyckriks
F-Secure Adware.Generic.606321
G Data Adware.Generic.606321
Jiangmin AdWare/Lyckriks.cu
K7 AntiVirus Riskware
K7GW Riskware
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
MicroWorld-eScan Adware.Generic.606321
NANO AntiVirus Trojan.Win32.Crossrider.ciwoce
Vba32 AntiVirus AdWare.Lyckriks
VIPRE Antivirus Crossrider (fs)
TubeSaver-15-updater.exe (MD5: 8fc5bc7dd8ec56dd032a5e1b52fc7633) has been flagged by 7 scanners:
Scanner Software Result
AVG Generic_r.GS
Baidu-International Trojan.Win32.Toolbar.CrossRider.I
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Lyrics.A
TrendMicro-HouseCall TROJ_GEN.R0CBH07K213
VIPRE Antivirus Crossrider (fs)
TubeSaver-15-enabler.exe (MD5: 060e284bfa4601173c6307b99c6878bf) has been flagged by 7 scanners:
Scanner Software Result
AVG Generic5.AJKA
Baidu-International Trojan.Win32.Toolbar.CrossRider.I
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Lyrics.A
TrendMicro-HouseCall TROJ_GEN.F47V1021
VIPRE Antivirus Crossrider (fs)
TubeSaver-15-bho.dll (MD5: c16a4768ff79e8d283e32578baeedad5) has been flagged by 22 scanners:
Scanner Software Result
AhnLab-V3 Adware/Win32.Lyckriks
Antiy-AVL AdWare/Win32.Lyckriks
AVG Generic5.AIKL
Baidu-International AdWare.Win32.Lyckriks.acSn
Bitdefender Adware.Generic.606321
Bkav FE W32.Clodd68.Trojan.f258
Dr.Web Trojan.Crossrider.7
Emsisoft Anti-Malware Adware.Generic.606321 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.H
Fortinet FortiGate Adware/Lyckriks
F-Secure Adware.Generic.606321
G Data Adware.Generic.606321
Jiangmin AdWare/Lyckriks.cu
K7 AntiVirus Riskware
K7GW Riskware
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Lyrics.A
MicroWorld-eScan Adware.Generic.606321
NANO AntiVirus Trojan.Win32.Crossrider.ciwoce
TrendMicro-HouseCall TROJ_GEN.R011H07JI13
Vba32 AntiVirus AdWare.Lyckriks
VIPRE Antivirus Crossrider (fs)

Startup Entries

Startup tasks:
  • TubeSaver-15-chromeinstaller.exe is automatically launched at startup through a scheduled task named TubeSaver-15-chromeinstaller.
  • TubeSaver-15-updater.exe is automatically launched at startup through a scheduled task named TubeSaver-15-updater.
  • TubeSaver-15-enabler.exe is automatically launched at startup through a scheduled task named TubeSaver-15-enabler.
  • TubeSaver-15-codedownloader.exe is automatically launched at startup through a scheduled task named TubeSaver-15-codedownloader.

Software Details

URL:
Support:
Installation path:
C:\Program Files\tubesaver-15
Uninstaller:
C:\Program Files\TubeSaver-15\Uninstall.exe /fromcontrolpanel=1
Size:
7.00 MB
Language:
English

TubeSaver-15 Executable Details

Primary executable:
utils.exe
Name:
TubeSaver-15
Path:
C:\Program Files\tubesaver-15\utils.exe
MD5:
ccb3ded198f0b37553553208131baef9
SHA-1:
SHA-256:
Files installed by TubeSaver-15
File Type Filename MD5
EXE
756f238d9d267a4a550f792f5522c68e
EXE
utils.exe
Malware
ccb3ded198f0b37553553208131baef9
EXE
ff1c9c8dba7853d54dd441912480033e
DLL
3370ce6774fa740517aa7d672b955f9d
DLL
1ab1b668ffc0ad1f21cf57594cf5d6e1
EXE
8fc5bc7dd8ec56dd032a5e1b52fc7633
EXE
9e0d3dc9f5d5e2cf7fd7cea3a7ed18c5
EXE
060e284bfa4601173c6307b99c6878bf
EXE
250ef55e5aae9634bbfc8eaa127fdaf2
EXE
c14bb537f424880eb3970d067bbd5e55