What is TubeSaver-15?

TubeSaver-15 is software application developed by PassWizard. It is most commonly found on computers running Windows 7 with nearly 55.56% of installations running this operating system. TubeSaver-15's installer is typically 7.00 MB in size and installs around 15 files.

TubeSaver-15 is most popular in the United States with 69.23% of installations residing in this country.

About TubeSaver-15?

TubeSaver is a web browser toolbar and extension that may be categorized as potentially unwanted. It aims to control the user's browsing experience by modifying the search provider and redirecting web searches to affiliated search engines. The program engages in various behaviors to increase the likelihood of user interaction with sponsored advertising through search and other ad-supported techniques, including changing the default home page, search provider, built-in search box, and address bar of the web browser. Additionally, it has the capability to alter the 'new tab' functionality to launch the modified search portal page.

Multiple virus scanners have detected malware in TubeSaver-15.

utils.exe (MD5: ccb3ded198f0b37553553208131baef9) has been flagged by 23 scanners:

Scanner Software	Version	Result
Baidu-International	4.0.3.14126	Trojan.Win32.Packed.VMDetector.B
Dr.Web	9.0.0.026	Trojan.Crossrider.9
ESET-NOD32	8.9015	Win32/Packed.VMDetector.B
Malwarebytes	v2014.01.26.02	PUP.Optional.Lyrics.A
Symantec	1/26/2014 rev. 1	WS.Reputation
TrendMicro-HouseCall	7.2.26	TROJ_GEN.F47V1023
AhnLab-V3	2013.11.07.00	Adware/Win32.Lyckriks
Antiy-AVL	2.0.3.7	AdWare/Win32.Lyckriks
AVG	13.0.0.3169	Generic5.AIKL
Bitdefender	7.2.5028.0	Adware.Generic.606321
Bkav FE	1.3.0.4261	W32.Clodd68.Trojan.f258
Emsisoft Anti-Malware	3.0.0.589	Adware.Generic.606321 (B)
Fortinet FortiGate	5.1.147.0	Adware/Lyckriks
F-Secure	11.0.19100.45	Adware.Generic.606321
G Data	22	Adware.Generic.606321
Jiangmin	16.0.100	AdWare/Lyckriks.cu
K7 AntiVirus	9.173.10112	Riskware
K7GW	12.7.0.14	Riskware
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
MicroWorld-eScan	12.0.250.0	Adware.Generic.606321
NANO AntiVirus	0.26.0.55974	Trojan.Win32.Crossrider.ciwoce
Vba32 AntiVirus	3.12.24.3	AdWare.Lyckriks
VIPRE Antivirus	23112	Crossrider (fs)

TubeSaver-15-updater.exe (MD5: 8fc5bc7dd8ec56dd032a5e1b52fc7633) has been flagged by 7 scanners:

Scanner Software	Version	Result
AVG	13.0.0.3169	Generic_r.GS
Baidu-International	3.5.1.41473	Trojan.Win32.Toolbar.CrossRider.I
ESET-NOD32	9015	a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.Lyrics.A
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0CBH07K213
VIPRE Antivirus	23112	Crossrider (fs)

TubeSaver-15-enabler.exe (MD5: 060e284bfa4601173c6307b99c6878bf) has been flagged by 7 scanners:

Scanner Software	Version	Result
AVG	13.0.0.3169	Generic5.AJKA
Baidu-International	3.5.1.41473	Trojan.Win32.Toolbar.CrossRider.I
ESET-NOD32	9015	a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.Lyrics.A
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F47V1021
VIPRE Antivirus	23112	Crossrider (fs)

TubeSaver-15-bho.dll (MD5: c16a4768ff79e8d283e32578baeedad5) has been flagged by 22 scanners:

Scanner Software	Version	Result
AhnLab-V3	2013.11.07.00	Adware/Win32.Lyckriks
Antiy-AVL	2.0.3.7	AdWare/Win32.Lyckriks
AVG	13.0.0.3169	Generic5.AIKL
Baidu-International	3.5.1.41473	AdWare.Win32.Lyckriks.acSn
Bitdefender	7.2.5028.0	Adware.Generic.606321
Bkav FE	1.3.0.4261	W32.Clodd68.Trojan.f258
Dr.Web		Trojan.Crossrider.7
Emsisoft Anti-Malware	3.0.0.589	Adware.Generic.606321 (B)
ESET-NOD32	9015	a variant of Win32/Toolbar.CrossRider.H
Fortinet FortiGate	5.1.147.0	Adware/Lyckriks
F-Secure	11.0.19100.45	Adware.Generic.606321
G Data	22	Adware.Generic.606321
Jiangmin	16.0.100	AdWare/Lyckriks.cu
K7 AntiVirus	9.173.10112	Riskware
K7GW	12.7.0.14	Riskware
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.Lyrics.A
MicroWorld-eScan	12.0.250.0	Adware.Generic.606321
NANO AntiVirus	0.26.0.55974	Trojan.Win32.Crossrider.ciwoce
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R011H07JI13
Vba32 AntiVirus	3.12.24.3	AdWare.Lyckriks
VIPRE Antivirus	23112	Crossrider (fs)

Startup Entries

Startup tasks:

TubeSaver-15-chromeinstaller.exe is automatically launched at startup through a scheduled task named TubeSaver-15-chromeinstaller.
TubeSaver-15-updater.exe is automatically launched at startup through a scheduled task named TubeSaver-15-updater.
TubeSaver-15-enabler.exe is automatically launched at startup through a scheduled task named TubeSaver-15-enabler.
TubeSaver-15-codedownloader.exe is automatically launched at startup through a scheduled task named TubeSaver-15-codedownloader.

Software Details

URL:

–

Support:

–

Installation path:

C:\Program Files\tubesaver-15

Uninstaller:

C:\Program Files\TubeSaver-15\Uninstall.exe /fromcontrolpanel=1

Size:

7.00 MB

Language:

English

TubeSaver-15 Executable Details

Primary executable:

utils.exe

Name:

TubeSaver-15

Path:

C:\Program Files\tubesaver-15\utils.exe

MD5:

ccb3ded198f0b37553553208131baef9

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

TubeSaver-15-buttonutil64.exe

cffcf2cbc1205423e1f5266edeea38d7

EXE

TubeSaver-15-buttonutil.exe

63639b39b61815a64d520481d995eb13

DLL

TubeSaver-15-bho64.dll

1454e4def2617d25ab3acd3fd4c20b86

DLL

TubeSaver-15-bho.dll

Malware

c16a4768ff79e8d283e32578baeedad5

EXE

TubeSaver-15-bg.exe

fa3b5c0c455bfe3aeba51940d3b2ba68