TubeSaver-1

TubeSaver-1

Known Toolbar

by YTSsaver

What is TubeSaver-1?

TubeSaver-1 is software application developed by YTSsaver. It is most commonly found on computers running Windows 7 with nearly 56.94% of installations running this operating system. TubeSaver-1's installer is typically 5.00 MB in size and installs around 16 files. The most common release is 1.28.153.3 with 81.94% of all installations currently using this version.

TubeSaver-1 is most popular in Germany with 35.48% of installations residing in this country.

About TubeSaver-1?

TubeSaver-1 is a browser extension designed to integrate seamlessly with Chrome, Firefox, and Internet Explorer. This extension will enhance the browser's search and home pages, as well as provide features to help with 404 errors and DNS redirections. However, it may also modify certain browser settings that could potentially compromise its security. It's important to note that TubeSaver-1 is considered a potentially unwanted program as it has the potential to interfere with the normal functions of the browser and web search behaviors. Additionally, the toolbar may also push additional advertisements to the browser.

Multiple virus scanners have detected malware in TubeSaver-1.

utils.exe (MD5: 20de00f6d97ce55d4fc3fbbc1f1f644a) has been flagged by 26 scanners:
Scanner Software Result
Baidu-International Trojan.Win32.Packed.ScrambleWrapper.C
ESET-NOD32 Win32/Packed.ScrambleWrapper.C
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
TrendMicro-HouseCall TROJ_GEN.F47V0919
Lavasoft Ad-Aware Adware.Generic.619824
Antiy-AVL AdWare/Win32.Lyckriks
AVG Generic5.AIIQ
Bitdefender Adware.Generic.619824
Bkav FE W32.Cloddb9.Trojan.e51a
Emsisoft Anti-Malware Adware.Generic.619824 (B)
Fortinet FortiGate Adware/Lyckriks
G Data Adware.Generic.619824
Jiangmin AdWare/Lyckriks.dm
K7 AntiVirus Trojan ( 0048c68d1 )
K7GW Trojan ( 0048c68d1 )
Kaspersky not-a-virus:AdWare.Win32.Lyckriks.ly
Malwarebytes PUP.Optional.Lyrics.A
McAfee Artemis!73683785C4F8
McAfee-GW-Edition Artemis!73683785C4F8
MicroWorld-eScan Adware.Generic.619824
Sophos Generic PUA JD
Symantec Adware.FindLyrics
VIPRE Antivirus Crossrider (fs)
Panda Antivirus Suspicious file
Dr.Web Trojan.Crossrider.7
Vba32 AntiVirus AdWare.Lyckriks
TubeSaver-1-updater.exe (MD5: 79e8a8b32f9d96a6defe2c4b6140aa55) has been flagged by 6 scanners:
Scanner Software Result
AVG Generic_r.GS
Baidu-International Trojan.Win32.Toolbar.Aeeh
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Lyrics.A
VIPRE Antivirus Crossrider (fs)
TubeSaver-1-firefoxinstaller.exe (MD5: e55b5d2113c000c4b5950ebe331e7db8) has been flagged by 24 scanners:
Scanner Software Result
Lavasoft Ad-Aware Adware.Generic.656715
Baidu-International HackTool.Win32.CrossRider.J
Bitdefender Adware.Generic.656715
Bkav FE W32.Clod8f9.Trojan.a807
Emsisoft Anti-Malware Adware.Generic.656715 (B)
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
G Data Adware.Generic.656715
K7 AntiVirus Trojan ( 0048e2ed1 )
K7GW Trojan ( 0048e2ed1 )
Malwarebytes PUP.Optional.Lyrics.A
McAfee Artemis!E55B5D2113C0
McAfee-GW-Edition Artemis!E55B5D2113C0
MicroWorld-eScan Adware.Generic.656715
Panda Antivirus Suspicious file
Symantec Adware.FindLyrics
TrendMicro-HouseCall TROJ_GEN.R0C9H05JJ13
VIPRE Antivirus Crossrider (fs)
Antiy-AVL AdWare/Win32.Lyckriks
AVG Generic5.AIKL
Dr.Web Trojan.Crossrider.7
Fortinet FortiGate Adware/Lyckriks
Jiangmin AdWare/Lyckriks.cu
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Vba32 AntiVirus AdWare.Lyckriks
TubeSaver-1-enabler.exe (MD5: 8c3ed14146d50a40bc13fd3feed4f3f6) has been flagged by 11 scanners:
Scanner Software Result
AVG Generic5.AJKA
Baidu-International Trojan.Win32.Toolbar.CrossRider.J
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
K7 AntiVirus Trojan ( 0048c68d1 )
K7GW Trojan ( 0048c68d1 )
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Lyrics.A
McAfee Artemis!8C3ED14146D5
McAfee-GW-Edition Heuristic.BehavesLike.Win32.Suspicious-BAY.K
TrendMicro-HouseCall TROJ_GEN.F47V1106
VIPRE Antivirus Crossrider (fs)
TubeSaver-1-codedownloader.exe (MD5: 5dfc5203144b91aec15c06160861a675) has been flagged by 6 scanners:
Scanner Software Result
AVG Generic_r.GS
Baidu-International Trojan.Win32.Toolbar.AGNr
ESET-NOD32 a variant of Win32/Toolbar.CrossRider.J
Kingsoft AntiVirus Win32.Troj.Generic.a.(kcloud)
Malwarebytes PUP.Optional.Lyrics.A
VIPRE Antivirus Crossrider (fs)

Startup Entries

Startup tasks:
  • TubeSaver-1-enabler.exe is automatically launched at startup through a scheduled task named TubeSaver-1-enabler.
  • TubeSaver-1-firefoxinstaller.exe is automatically launched at startup through a scheduled task named TubeSaver-1-firefoxinstaller.
  • TubeSaver-1-updater.exe is automatically launched at startup through a scheduled task named TubeSaver-1-updater.
  • TubeSaver-1-codedownloader.exe is automatically launched at startup through a scheduled task named TubeSaver-1-codedownloader.
  • TubeSaver-1-chromeinstaller.exe is automatically launched at startup through a scheduled task named TubeSaver-1-chromeinstaller.

Software Details

URL:
–
Support:
–
Installation path:
C:\Program Files\tubesaver-1
Uninstaller:
C:\Program Files\TubeSaver-1\Uninstall.exe /fromcontrolpanel=1
Size:
5.00 MB
Language:
English

TubeSaver-1 Executable Details

Primary executable:
utils.exe
Name:
TubeSaver-1
Path:
C:\Program Files\tubesaver-1\utils.exe
MD5:
20de00f6d97ce55d4fc3fbbc1f1f644a
SHA-1:
–
SHA-256:
–
Files installed by TubeSaver-1
File Type Filename MD5
EXE
673abd3e86786c6c3aeb48634c31d0fc
EXE
a82fcbfe74bd211c1f677438502739b7
DLL
b3849ba61698df622973e561c578cce8
DLL
27b7dec48fdbe9454937e0f40e26bcf9
EXE
18b676b0d8366892116d8c5969dca839
CRX
6a73cc43738bb822a3d9eadfc8415841