What is Video-Saver-1?

Video-Saver-1 is software application developed by YTSsaver. It is most commonly found on computers running Windows 7 with nearly 66.67% of installations running this operating system. Video-Saver-1's installer is typically 3.00 MB in size and installs around 17 files.

Video-Saver-1 is most popular in the United States with 56.25% of installations residing in this country.

About Video-Saver-1?

Introducing Video-Saver-1, a web browser extension designed to enhance your online experience. This ad-supported software delivers various popup and banner ads, while also customizing your web browser's search and home page settings. This versatile plugin is compatible with Internet Explorer (as a BHO), Chrome (as an extension), and Firefox (as an add-in). In addition, Video-Saver-1 may occasionally monitor user behavior and display rival advertisements, as agreed upon in the End User License Agreement. Please note that this toolbar is often bundled with third-party download managers/installers or distributed through questionable online ads.

Multiple virus scanners have detected malware in Video-Saver-1.

utils.exe (MD5: 59e8ef44537aac8370829ed5fdd810be) has been flagged by 27 scanners:

Scanner Software	Version	Result
Baidu-International	4.0.3.14126	Trojan.Win32.VMDetector.B
Dr.Web	9.0.0.026	Trojan.Crossrider.9
ESET-NOD32	8.9121	Win32/Packed.ScrambleWrapper.C
Kingsoft AntiVirus	331020.49267	Win32.Troj.Generic.a.(kcloud)
Symantec	1/26/2014 rev. 1	WS.Reputation
TrendMicro-HouseCall	7.2.26	TROJ_GEN.F47V1117
Lavasoft Ad-Aware	12.0.163.0	Adware.Generic.625573
Antiy-AVL	2.0.3.7	AdWare/Win32.Lyckriks
AVG	13.0.0.3169	Generic5.AIKL
Bitdefender	7.2.5028.0	Adware.Generic.625573
Bkav FE	1.3.0.4562	W32.Clodd68.Trojan.f258
Emsisoft Anti-Malware	3.0.0.589	Adware.Generic.625573 (B)
Fortinet FortiGate	5.1.147.0	Adware/Lyckriks
F-Secure	11.0.19100.45	Adware.Generic.625573
G Data	22	Adware.Generic.625573
K7 AntiVirus	9.174.10380	Riskware ( 0040eff71 )
K7GW	9.174.10380	Riskware ( 0040eff71 )
MicroWorld-eScan	12.0.250.0	Adware.Generic.625573
NANO AntiVirus	0.28.0.56582	Trojan.Win32.Crossrider.cnftcw
Vba32 AntiVirus	3.12.24.3	AdWare.Lyckriks
VIPRE Antivirus	23942	Crossrider (fs)
McAfee	5.600.0.1067	Artemis!36397ED943F6
McAfee-GW-Edition	2013	Artemis!36397ED943F6
Sophos	4.97.0	Generic PUA AF
AhnLab-V3	2013.12.30.00	Adware/Win32.Lyckriks
Jiangmin	16.0.100	AdWare/Lyckriks.dm
Kaspersky	12.0.0.1221	not-a-virus:AdWare.Win32.Lyckriks.ly

Video-Saver-1-firefoxinstaller.exe (MD5: 36397ed943f693426cbf00ad727fdf7e) has been flagged by 22 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Adware.Generic.664729
Baidu-International	3.5.1.41473	HackTool.Win32.CrossRider.J
Bitdefender	7.2.5028.0	Adware.Generic.664729
Emsisoft Anti-Malware	3.0.0.596	Adware.Generic.664729 (B)
ESET-NOD32	9371	a variant of Win32/Toolbar.CrossRider.J
Fortinet FortiGate	5.1.147.0	Riskware/Toolbar_CrossRider
F-Secure	11.0.19100.45	Adware.Generic.664729
G Data	24	Adware.Generic.664729
K7 AntiVirus	9.175.11028	Trojan ( 0048e2ed1 )
K7GW	9.175.11028	Trojan ( 0048e2ed1 )
McAfee	5.600.0.1067	Artemis!36397ED943F6
McAfee-GW-Edition	2013	Artemis!36397ED943F6
MicroWorld-eScan	12.0.250.0	Adware.Generic.664729
Sophos	4.97.0	Generic PUA AF
Symantec	20131.1.5.61	Adware.FindLyrics
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C1H05KF13
VIPRE Antivirus	26060	Crossrider (fs)
AhnLab-V3	2013.12.30.00	Adware/Win32.Lyckriks
Antiy-AVL	2.0.3.7	AdWare/Win32.Lyckriks
AVG	13.0.0.3169	Generic5.AIIQ
Jiangmin	16.0.100	AdWare/Lyckriks.dm
Kaspersky	12.0.0.1221	not-a-virus:AdWare.Win32.Lyckriks.ly

Video-Saver-1-chromeinstaller.exe (MD5: 9b25d0f470196fc6556603f68e66c501) has been flagged by 16 scanners:

Scanner Software	Version	Result
AhnLab-V3	2013.12.30.00	Adware/Win32.Lyckriks
Antiy-AVL	2.0.3.7	AdWare/Win32.Lyckriks
AVG	13.0.0.3169	Generic5.AIIQ
Baidu-International	3.5.1.41473	Adware.Win32.Lyckriks.AX
ESET-NOD32	9190	a variant of Win32/Toolbar.CrossRider.K
Fortinet FortiGate	5.1.147.0	Adware/Lyckriks
Jiangmin	16.0.100	AdWare/Lyckriks.dm
K7 AntiVirus	9.174.10656	Trojan ( 0048e4111 )
K7GW	9.174.10661	Trojan ( 0048e4111 )
Kaspersky	12.0.0.1221	not-a-virus:AdWare.Win32.Lyckriks.ly
McAfee	5.600.0.1067	Artemis!9B25D0F47019
McAfee-GW-Edition	2013	Artemis!9B25D0F47019
Sophos	4.96.0	Generic PUA NK
Symantec	20131.1.5.61	Adware.FindLyrics
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.RFFFH07KF13
VIPRE Antivirus	24876	Crossrider (fs)

Video-Saver-1-bho.dll (MD5: 4c43e2b861ad20bd317afd2a80534aef) has been flagged by 27 scanners:

Scanner Software	Version	Result
Lavasoft Ad-Aware	12.0.163.0	Adware.Generic.625573
Antiy-AVL	2.0.3.7	AdWare/Win32.Lyckriks
AVG	13.0.0.3169	Generic5.AIKL
Baidu-International	3.5.1.41473	AdWare.Win32.Lyckriks.ag
Bitdefender	7.2.5028.0	Adware.Generic.625573
Bkav FE	1.3.0.4562	W32.Clodd68.Trojan.f258
Dr.Web		Trojan.Crossrider.7
Emsisoft Anti-Malware	3.0.0.589	Adware.Generic.625573 (B)
ESET-NOD32	9121	a variant of Win32/Toolbar.CrossRider.H
Fortinet FortiGate	5.1.147.0	Adware/Lyckriks
F-Secure	11.0.19100.45	Adware.Generic.625573
G Data	22	Adware.Generic.625573
K7 AntiVirus	9.174.10380	Riskware ( 0040eff71 )
K7GW	9.174.10380	Riskware ( 0040eff71 )
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
MicroWorld-eScan	12.0.250.0	Adware.Generic.625573
NANO AntiVirus	0.28.0.56582	Trojan.Win32.Crossrider.cnftcw
Symantec	20131.1.5.61	Adware.Adpopup
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.RFFFH07KE13
Vba32 AntiVirus	3.12.24.3	AdWare.Lyckriks
VIPRE Antivirus	23942	Crossrider (fs)
McAfee	5.600.0.1067	Artemis!36397ED943F6
McAfee-GW-Edition	2013	Artemis!36397ED943F6
Sophos	4.97.0	Generic PUA AF
AhnLab-V3	2013.12.30.00	Adware/Win32.Lyckriks
Jiangmin	16.0.100	AdWare/Lyckriks.dm
Kaspersky	12.0.0.1221	not-a-virus:AdWare.Win32.Lyckriks.ly

Startup Entries

Startup tasks:

Video-Saver-1-updater.exe is automatically launched at startup through a scheduled task named Video-Saver-1-updater.
Video-Saver-1-firefoxinstaller.exe is automatically launched at startup through a scheduled task named Video-Saver-1-firefoxinstaller.
Video-Saver-1-enabler.exe is automatically launched at startup through a scheduled task named Video-Saver-1-enabler.
Video-Saver-1-codedownloader.exe is automatically launched at startup through a scheduled task named Video-Saver-1-codedownloader.
Video-Saver-1-chromeinstaller.exe is automatically launched at startup through a scheduled task named Video-Saver-1-chromeinstaller.

Software Details

URL:

–

Support:

–

Installation path:

C:\Program Files\video-saver-1

Uninstaller:

C:\Program Files\Video-Saver-1\Uninstall.exe /fromcontrolpanel=1

Size:

3.00 MB

Language:

English

Video-Saver-1 Executable Details

Primary executable:

utils.exe

Name:

Video-Saver-1

Path:

C:\Program Files\video-saver-1\utils.exe

MD5:

59e8ef44537aac8370829ed5fdd810be

SHA-1:

–

SHA-256:

–

File Type

Filename

MD5

EXE

Video-Saver-1-codedownloader.exe

3f2ad5bb30ab9d3bedc5f6af70a80f72

EXE

Video-Saver-1-chromeinstaller.exe

Malware

9b25d0f470196fc6556603f68e66c501

EXE

Video-Saver-1-buttonutil64.exe

af3da0053f8ddc1e46dc5f1748f9dbde

EXE

Video-Saver-1-buttonutil.exe

15a6de81c04f4922003e189ed7a9cf08

DLL

Video-Saver-1-bho64.dll

2f9321f01cd0d098b8001c8fcfe302af

DLL

Video-Saver-1-bho.dll

Adware

4c43e2b861ad20bd317afd2a80534aef

EXE

Video-Saver-1-bg.exe

5adf54e613d44d833a705f04c826f3a7

File Type	Filename	MD5
EXE	Video-Saver-1-codedownloader.exe	3f2ad5bb30ab9d3bedc5f6af70a80f72
EXE	Video-Saver-1-chromeinstaller.exe Malware	9b25d0f470196fc6556603f68e66c501
EXE	Video-Saver-1-buttonutil64.exe	af3da0053f8ddc1e46dc5f1748f9dbde
EXE	Video-Saver-1-buttonutil.exe	15a6de81c04f4922003e189ed7a9cf08
DLL	Video-Saver-1-bho64.dll	2f9321f01cd0d098b8001c8fcfe302af
DLL	Video-Saver-1-bho.dll Adware	4c43e2b861ad20bd317afd2a80534aef
EXE	Video-Saver-1-bg.exe	5adf54e613d44d833a705f04c826f3a7