TubeSaver-1

TubeSaver-1

Known Toolbar

by YTSsaver

What is TubeSaver-1?

TubeSaver-1 is software application developed by YTSsaver. It is most commonly found on computers running Windows 7 with nearly 56.94% of installations running this operating system. TubeSaver-1's installer is typically 5.00 MB in size and installs around 16 files. The most common release is 1.28.153.3 with 81.94% of all installations currently using this version.

TubeSaver-1 is most popular in Germany with 35.48% of installations residing in this country.

About TubeSaver-1?

TubeSaver-1 is a browser extension designed to integrate seamlessly with Chrome, Firefox, and Internet Explorer. This extension will enhance the browser's search and home pages, as well as provide features to help with 404 errors and DNS redirections. However, it may also modify certain browser settings that could potentially compromise its security. It's important to note that TubeSaver-1 is considered a potentially unwanted program as it has the potential to interfere with the normal functions of the browser and web search behaviors. Additionally, the toolbar may also push additional advertisements to the browser.

Multiple virus scanners have detected malware in TubeSaver-1.

utils.exe (MD5: 20de00f6d97ce55d4fc3fbbc1f1f644a) has been flagged by 26 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.Packed.ScrambleWrapper.C
ESET-NOD32 Win32/Packed.ScrambleWrapper.C
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
TrendMicro-HouseCall TROJ_GEN.F47V0919
Lavasoft Ad-Aware Adware.Generic.619824
Antiy-AVL AdWare/Win32.Lyckriks
AVG Generic5.AIIQ
Bitdefender Adware.Generic.619824
Bkav FE W32.Cloddb9.Trojan.e51a
Emsisoft Anti-Malware Adware.Generic.619824 (B)
Fortinet FortiGate Adware/Lyckriks
G Data Adware.Generic.619824
Jiangmin AdWare/Lyckriks.dm
K7 AntiVirus Trojan ( 0048c68d1 )
K7GW Trojan ( 0048c68d1 )
Kaspersky not-a-virus:AdWare.Win32.Lyckriks.ly
Malwarebytes PUP.Optional.Lyrics.A
McAfee Artemis!73683785C4F8
McAfee-GW-Edition Artemis!73683785C4F8
MicroWorld-eScan Adware.Generic.619824
Sophos Generic PUA JD
Symantec Adware.FindLyrics
VIPRE Antivirus Crossrider (fs)
Panda Antivirus Suspicious file
Dr.Web Trojan.Crossrider.7
Vba32 AntiVirus AdWare.Lyckriks
TubeSaver-1-updater.exe (MD5: 79e8a8b32f9d96a6defe2c4b6140aa55) has been flagged by 6 scanners:
Scanner Software Result
AVG Generic_r.GS
Baidu-International Trojan.Win32.Toolbar.Aeeh
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Lyrics.A
VIPRE Antivirus Crossrider (fs)
TubeSaver-1-firefoxinstaller.exe (MD5: e55b5d2113c000c4b5950ebe331e7db8) has been flagged by 24 scanners:
Scanner Software Result
Lavasoft Ad-Aware Adware.Generic.656715
Baidu-International HackTool.Win32.CrossRider.J
Bitdefender Adware.Generic.656715
Bkav FE W32.Clod8f9.Trojan.a807
Emsisoft Anti-Malware Adware.Generic.656715 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
G Data Adware.Generic.656715
K7 AntiVirus Trojan ( 0048e2ed1 )
K7GW Trojan ( 0048e2ed1 )
Malwarebytes PUP.Optional.Lyrics.A
McAfee Artemis!E55B5D2113C0
McAfee-GW-Edition Artemis!E55B5D2113C0
MicroWorld-eScan Adware.Generic.656715
Panda Antivirus Suspicious file
Symantec Adware.FindLyrics
TrendMicro-HouseCall TROJ_GEN.R0C9H05JJ13
VIPRE Antivirus Crossrider (fs)
Antiy-AVL AdWare/Win32.Lyckriks
AVG Generic5.AIKL
Dr.Web Trojan.Crossrider.7
Fortinet FortiGate Adware/Lyckriks
Jiangmin AdWare/Lyckriks.cu
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Vba32 AntiVirus AdWare.Lyckriks
TubeSaver-1-enabler.exe (MD5: 8c3ed14146d50a40bc13fd3feed4f3f6) has been flagged by 11 scanners:
Scanner Software Result
AVG Generic5.AJKA
Baidu-International Trojan.Win32.Toolbar.CrossRider.J
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
K7 AntiVirus Trojan ( 0048c68d1 )
K7GW Trojan ( 0048c68d1 )
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Lyrics.A
McAfee Artemis!8C3ED14146D5
McAfee-GW-Edition Heuristic.BehavesLike.Win32.Suspicious-BAY.K
TrendMicro-HouseCall TROJ_GEN.F47V1106
VIPRE Antivirus Crossrider (fs)
TubeSaver-1-codedownloader.exe (MD5: 5dfc5203144b91aec15c06160861a675) has been flagged by 6 scanners:
Scanner Software Result
AVG Generic_r.GS
Baidu-International Trojan.Win32.Toolbar.AGNr
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Lyrics.A
VIPRE Antivirus Crossrider (fs)

Startup Entries

Startup tasks:
  • TubeSaver-1-enabler.exe is automatically launched at startup through a scheduled task named TubeSaver-1-enabler.
  • TubeSaver-1-firefoxinstaller.exe is automatically launched at startup through a scheduled task named TubeSaver-1-firefoxinstaller.
  • TubeSaver-1-updater.exe is automatically launched at startup through a scheduled task named TubeSaver-1-updater.
  • TubeSaver-1-codedownloader.exe is automatically launched at startup through a scheduled task named TubeSaver-1-codedownloader.
  • TubeSaver-1-chromeinstaller.exe is automatically launched at startup through a scheduled task named TubeSaver-1-chromeinstaller.

Software Details

URL:
–
Support:
–
Installation path:
C:\Program Files\tubesaver-1
Uninstaller:
C:\Program Files\TubeSaver-1\Uninstall.exe /fromcontrolpanel=1
Size:
5.00 MB
Language:
English

TubeSaver-1 Executable Details

Primary executable:
utils.exe
Name:
TubeSaver-1
Path:
C:\Program Files\tubesaver-1\utils.exe
MD5:
20de00f6d97ce55d4fc3fbbc1f1f644a
SHA-1:
–
SHA-256:
–
Files installed by TubeSaver-1
File Type Filename MD5
EXE
756f238d9d267a4a550f792f5522c68e
EXE
20de00f6d97ce55d4fc3fbbc1f1f644a
EXE
910a5ccb2182b14e17501449d66183c9
DLL
1cfc8dd0f86898a108b4fc9ef20ec126
DLL
4e7a8480eaaa72d05c1e66b9d160570a
EXE
79e8a8b32f9d96a6defe2c4b6140aa55
EXE
e55b5d2113c000c4b5950ebe331e7db8
EXE
8c3ed14146d50a40bc13fd3feed4f3f6
EXE
5dfc5203144b91aec15c06160861a675
EXE
73683785c4f82f4e3c54012f81cec12c