84,488,480 programs installed

Should I remove Fun2Save?

What percent of users and experts removed it?
88% remove it12% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Reach 0.0009%

Fun2Save

What is Fun2Save?

Fun2Save is a JustPlug.It web browser extension that is delivered via the WebPick (InstalleRex) download and install manager. It is included with various adware offer bundles and is a cross browser extension that runs with multiple parts including a Windows service, an auto-starting component and the browser toolbar/plugin which is designed to inject advertisements in the browser in form of banner ads, hyper-text links and popups. In addition, some versions might hijack existing advertising on web sites as well as inject affiliate codes in links as coupon offers. The advertisements that are displayed in the browser could include deceptive malvertising ads for 'required' updates of known common programs as well as unwanted pop-ups advertisements. If downloaded these programs install a number of bundled adware utilities and additional browser extensions. Additionally components of the program will modify the browser's default security levels.

Overview

It adds a Browser Helper Object (BHO) to Internet Explorer. The primary executable is named VyGD2UD.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 29 files and is usually about 1.34 MB (1,401,468 bytes).
  • Malware detected in the program
  • Integrates into the web browser
  • Typically distributed through a pay-per-install bundle
  • Injects advertisements unassociated with the underlying web page
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in Fun2Save.
VyGD2UD.exe (113b8fc191b9149d08a92bb5914ff536) has been flagged by the following 19 scanners:
Anti-Virus softwareVersionDetection
AhnLab-V3 2014.01.10 Trojan/Win32.Preloader
avast! 2014.9-140126 Win32:Adware-gen [Adw]
AVG 2015.0.3582 Generic_r
Baidu-International 4.0.3.14126 Adware.Win32.MegaSearch.aaU
Comodo Security 17583 ApplicUnwnt
ESET-NOD32 8.9272 a variant of Win32/AdWare.MultiPlug.K.gen
Fortinet FortiGate 1/26/2014 Adware/Megasearch
IKARUS anti.virus t3scan.2.2.29 Win32.AdWare
K7 AntiVirus 13.175.10794 Adware
K7GW 13.175.10794 Adware ( 00490ca81 )
Kaspersky 14.0.0.4407 not-a-virus:AdWare.Win32.MegaSearch
Kingsoft AntiVirus 331020.49267 Win32.Troj.MegaSearch.at.(kcloud)
Malwarebytes v2014.01.26.03 PUP.Optional.CRXDrop.A
McAfee 5600.7238 PUP-FFY!113B8FC191B9
McAfee-GW-Edition 7.7238 Artemis!113B8FC191B9
Panda Antivirus 14.01.26.03 Trj/Genetic.gen
Sophos 4.96 Generic PUA JM
TrendMicro-HouseCall 7.2.26 TROJ_GEN.R047H07A514
Vba32 AntiVirus 3.12.24.3 BScope.Trojan.Agent
LnR.dll (374367ba293ed2c64cb7bfc4d1fe1417) has been flagged by the following 36 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Application.Generic.708030
Agnitum Outpost 5.5.1.3 PUA.MultiPlug!
AhnLab-V3 2014.11.12.00 Adware/Win32.Agent
Antiy-AVL 1.0.0.1 GrayWare[AdWare:not-a-virus]/Win32.Agent
avast! 8.0.1489.320 Win32:Adware-gen [Adw]
AVG 15.0.0.4189 Generic_r.QD
Avira 7.11.184.98 Adware/MultiPlug.essz
AVware 1.5.0.21 Trojan.Win32.Generic!BT
Baidu-International 3.5.1.41473 Adware.Win32.MultiPlug.77
Bitdefender 7.2 Application.Generic.708030
Bkav FE 1.3.0.4959 W32.BogayP.Trojan
CAT-QuickHeal 14.00 AdWare.Agent.r6 (Not a Virus)
Comodo Security 20055 Application.Win32.MultiPlug.AUAU
Dr.Web 7.0.10.8210 Adware.Plugin.454
ESET-NOD32 10707 a variant of Win32/AdWare.MultiPlug.BN
F-Secure 11.0.19100.45 Application.Generic.708030
G Data 24 Application.Generic.708030
K7 AntiVirus 9.185.13980 Adware ( 004a08151 )
K7GW 9.185.13980 Trojan ( 050000001 )
Kaspersky 12.0.0.1225 not-a-virus:AdWare.Win32.Agent.gpjz
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Generic.a.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.MultiPlug
McAfee 6.0.5.614 Generic PUP.x
McAfee-GW-Edition v2014.2 BehavesLike.Win32.Downloader.gh
MicroWorld-eScan 12.0.250.0 Application.Generic.708030
NANO AntiVirus 0.28.6.62995 Riskware.Win32.Agent.desgnm
Panda Antivirus 4.6.4.1 Adware/Multiplug
Rising Antivirus 25.0.0.11 PE:Trojan.Win32.Generic.1724658A!388261258
Sophos 4.98.0 MultiPlug
Symantec 20141.1.0.330 Adware.Popuppers
Tencent 1.0.0.1 Win32.Adware.Agent.Ljah
Trend Micro 9.740.0.1012 ADW_MULPLUG
TrendMicro-HouseCall 9.700.0.1001 ADW_MULPLUG
Vba32 AntiVirus 3.12.26.3 AdWare.Agent
VIPRE Antivirus 34710 Trojan.Win32.Generic!BT
Zillya 2.0.0.1981 Adware.Agent.Win32.12788
e.exe (1b63b4e4fe4be0d8607d362c3d2f2677) has been flagged by the following 35 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Gen:Variant.Adware.Graftor.146103
Agnitum Outpost 5.5.1.3 PUA.MultiPlug!
AhnLab-V3 2014.08.05.00 Trojan/Win32.Preloader
Avira AntiVir 7.11.165.68 Adware/Graftor.146103
Antiy-AVL 1.0.0.1 Trojan/Win32.SGeneric
avast! 8.0.1489.320 Win32:Dropper-gen [Drp]
AVG 14.0.0.3986 Generic5.AZJV
AVware 1.5.0.16 Trojan.Win32.Generic!BT
Baidu-International 3.5.1.41473 Adware.Win32.MultiPlug.81
Bitdefender 7.2 Gen:Variant.Adware.Graftor.146103
Bkav FE 1.3.0.4959 W32.CanpaktiLTAAI.Adware
CAT-QuickHeal 14.00 AdWare.MultiPlug.r5 (Not a Virus)
Comodo Security 19086 ApplicUnwnt
Emsisoft Anti-Malware 3.0.0.600 Gen:Variant.Adware.Graftor.146103 (B)
ESET-NOD32 10205 a variant of Win32/AdWare.MultiPlug.AG
Fortinet FortiGate 5.1.152.0 Riskware/MultiPlug
F-Secure 11.0.19100.45 Gen:Variant.Adware.Graftor.146103
G Data 24 Gen:Variant.Adware.Graftor.146103
IKARUS anti.virus T3.1.6.1.0 PUA.Generic
K7 AntiVirus 9.182.12951 Adware ( 0049c94b1 )
K7GW 9.182.12951 Adware ( 0049c94b1 )
Kaspersky 12.0.0.1225 not-a-virus:AdWare.Win32.MultiPlug.bqfl
Kingsoft AntiVirus 2013.4.9.267 Win32.Troj.Generic.a.(kcloud)
Malwarebytes 1.75.0.1 PUP.Optional.MultiPlug
McAfee 6.0.4.564 RDN/Generic.bfr!ho
MicroWorld-eScan 12.0.250.0 Gen:Variant.Adware.Graftor.146103
NANO AntiVirus 0.28.2.61349 Riskware.Win32.Graftor.dcodwf
Panda Antivirus 10.0.3.5 Trj/Genetic.gen
Sophos 4.98.0 Generic PUA IB
Symantec 20131.1.5.61 WS.Reputation.1
Tencent 1.0.0.1 Win32.Risk.Adware.Dzkd
Trend Micro 9.740.0.1012 TROJ_SPNR.14GN14
TrendMicro-HouseCall 9.700.0.1001 TROJ_SPNR.14GN14
Vba32 AntiVirus 3.12.26.3 AdWare.MultiPlug
VIPRE Antivirus 31936 Trojan.Win32.Generic!BT
LnR.exe (6d3fd4a94b133387ec5382bab7414eb2) has been flagged by the following 34 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Gen:Variant.Adware.Strictor.61989
AegisLab 1.5 Troj.W32.Gen
Agnitum Outpost 5.5.1.3 PUA.MultiPlug!
AhnLab-V3 2014.11.03.00 Trojan/Win32.Preloader
Antiy-AVL 1.0.0.1 Trojan/Win32.SGeneric
avast! 8.0.1489.320 Win32:Adware-gen [Adw]
AVG 15.0.0.4189 Generic5.BGRW
Avira 7.11.182.190 TR/Crypt.EPACK.Gen2
AVware 1.5.0.21 Trojan.Win32.Generic!BT
Baidu-International 3.5.1.41473 Adware.Win32.MultiPlug.bAG
Bitdefender 7.2 Gen:Variant.Adware.Strictor.61989
Bkav FE 1.3.0.6185 W32.MultiPlugKB.Adware
Comodo Security 19972 ApplicUnwnt
Emsisoft Anti-Malware 3.0.0.600 Gen:Variant.Adware.Strictor.61989 (B)
ESET-NOD32 10658 a variant of Win32/AdWare.MultiPlug.AG
Fortinet FortiGate 5.0.999.0 Riskware/MultiPlug
F-Secure 11.0.19100.45 Gen:Variant.Adware.Strictor.61989
G Data 24 Gen:Variant.Adware.Strictor.61989
IKARUS anti.virus T3.1.8.3.0 PUA.Multiplug
K7 AntiVirus 9.185.13866 Adware ( 004a07dc1 )
K7GW 9.185.13866 Adware ( 004a07dc1 )
Malwarebytes 1.75.0.1 PUP.Optional.MultiPlug
McAfee 6.0.5.614 RDN/Generic PUP.x!cls
McAfee-GW-Edition v2014.2 BehavesLike.Win32.Downloader.jh
MicroWorld-eScan 12.0.250.0 Gen:Variant.Adware.Strictor.61989
NANO AntiVirus 0.28.6.62995 Trojan.Win32.EPACK.decixf
Rising Antivirus 25.0.0.11 PE:Trojan.Win32.Generic.172FA52D!388998445
Sophos 4.98.0 Generic PUA EM
Symantec 20141.1.0.330 Trojan.Gen
Trend Micro 9.740.0.1012 TROJ_GEN.R0CBC0EHV14
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R0CBC0EHV14
Vba32 AntiVirus 3.12.26.3 AdWare.Agent
VIPRE Antivirus 34452 Trojan.Win32.Generic!BT
ViRobot 2011.4.7.4223 Adware.Strictor.642560
Cp.x64.dll (2a05aaa383857ecbdd6100c34595b5df) has been flagged by the following 31 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Trojan.Generic.11089445
AhnLab-V3 None Trojan/Win32.Preloader
Avira AntiVir 7.11.149.28 ADWARE/Adware.Gen
Antiy-AVL 0.1.0.1 Trojan/Win32.SGeneric
avast! 8.0.1489.320 Win64:Adware-gen [Adw]
AVG 14.0.0.3931 Generic_r.GX
Baidu-International 3.5.1.41473 Adware.Win64.MultiPlug.A
Bitdefender 7.2 Trojan.Generic.11089445
Comodo Security 18259 ApplicUnwnt
Emsisoft Anti-Malware 3.0.0.596 Trojan.Generic.11089445 (B)
ESET-NOD32 9787 a variant of Win64/Adware.MultiPlug.A
F-Secure 11.0.19100.45 Trojan.Generic.11089445
G Data 24 Trojan.Generic.11089445
IKARUS anti.virus T3.1.6.1.0 AdWare.MultiPlug
K7 AntiVirus 9.177.12041 Adware ( 004922f61 )
K7GW 9.177.12041 Adware ( 004922f61 )
Malwarebytes 1.75.0001 PUP.Optional.MultiPlug.A
McAfee 6.0.4.564 Mplug!2A05AAA38385
McAfee-GW-Edition 2013 Mplug!2A05AAA38385
MicroWorld-eScan 12.0.250.0 Trojan.Generic.11089445
Norman 7.04.04 Multiplug.A
nProtect 2014-05-11.01 Trojan.Generic.11089445
Panda Antivirus 10.0.3.5 Trj/CI.A
Qihoo-360 1.0.0.1015 Win32/Trojan.Adware.273
Rising Antivirus 25.0.0.11 PE:Adware.MultiPlug!6.166A
Sophos 4.98.0 MultiPlug
SUPERAntiSpyware 5.6.0.1032 Adware.Multiplug/Variant
Symantec 20131.1.5.61 WS.Reputation.1
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.R0CBH06DC14
VIPRE Antivirus 29122 MPlug
ViRobot 2011.4.7.4223 Adware.Agent.474112
yjZt.dll (6bdd2b931e45fa910c821a3beb07928c) has been flagged by the following 29 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Application.Generic.604038
Agnitum Outpost 5.5.1.3 PUA.BHO!
Antiy-AVL 1.0.0.1 Trojan/Win32.TGeneric
avast! 8.0.1489.320 Win32:Dropper-gen [Drp]
AVG 14.0.0.3972 Generic5.APQB
Baidu-International 3.5.1.41473 Adware.Win32.BHO.71
Bitdefender 7.2 Application.Generic.604038
Bkav FE 1.3.0.4959 W32.ToolbarEscort.Adware
CAT-QuickHeal 14.00 AdWare.BHO.r6 (Not a Virus)
Comodo Security 18598 ApplicUnwnt.Win32.InstallRex.ALC
ESET-NOD32 9968 a variant of Win32/AdWare.MultiPlug.T
F-Secure 11.0.19100.45 Application.Generic.604038
G Data 24 Application.Generic.604038
IKARUS anti.virus T3.1.6.1.0 Win32.SuspectCrc
K7 AntiVirus 9.180.12463 Adware ( 004976341 )
K7GW 9.180.12463 Adware ( 004976341 )
Kaspersky 12.0.0.1225 not-a-virus:AdWare.Win32.BHO.bdnc
Malwarebytes 1.75.0.1 PUP.Optional.MultiPlug.A
McAfee 6.0.4.564 RDN/Generic PUP.x!cf3
McAfee-GW-Edition 2013 RDN/Generic PUP.x!cf3
MicroWorld-eScan 12.0.250.0 Application.Generic.604038
NANO AntiVirus 0.28.0.60253 Riskware.Win32.BHO.dbdfeq
Panda Antivirus 10.0.3.5 Trj/CI.A
Sophos 4.98.0 Generic PUA IO
Symantec 20131.1.5.61 Adware.BL
Trend Micro 9.740.0.1012 ADW_MULTIPLUG
TrendMicro-HouseCall 9.700.0.1001 ADW_MULTIPLUG
Vba32 AntiVirus 3.12.26.3 AdWare.BHO
VIPRE Antivirus 30454 Trojan.Win32.Generic!BT
Cp.exe (5779bbb0fe6c50419ddf9f84e73e4905) has been flagged by the following 28 scanners:
Anti-Virus softwareSoftware versionDetection
Agnitum Outpost 5.5.1.3 PUA.MegaSearch!
AhnLab-V3 None Trojan/Win32.Preloader
Avira AntiVir 7.11.143.202 ADWARE/Adware.Gen7
Antiy-AVL 0.1.0.1 GrayWare[AdWare:not-a-virus]/Win32.MegaSearch
avast! 8.0.1489.320 Win32:Adware-gen [Adw]
AVG 13.0.0.3169 Generic_r.GV
Baidu-International 3.5.1.41473 Adware.Win32.MegaSearch.81
CAT-QuickHeal 12.00 Adware.Megasearch.at (Not a Virus)
Comodo Security 18114 ApplicUnwnt
Dr.Web 7.00.9.04080 Trojan.Crossrider.8290
ESET-NOD32 9684 a variant of Win32/AdWare.MultiPlug.K.gen
Fortinet FortiGate 4 Adware/Megasearch
IKARUS anti.virus T3.1.6.1.0 Win32.AdWare
K7 AntiVirus 9.176.11777 Adware ( 00490ca81 )
K7GW 9.176.11777 Adware ( 00490ca81 )
Kaspersky 12.0.0.1225 not-a-virus:AdWare.Win32.MegaSearch.at
Malwarebytes 1.75.0001 PUP.Optional.MultiPlug.A
McAfee 6.0.4.564 PUP-FFY!5779BBB0FE6C
McAfee-GW-Edition 2013 PUP-FFY!5779BBB0FE6C
NANO AntiVirus 0.28.0.59288 Riskware.Win32.MegaSearch.cvwfkf
Panda Antivirus 10.0.3.5 Trj/Genetic.gen
Qihoo-360 1.0.0.1015 HEUR/Malware.QVM10.Gen
Rising Antivirus 25.0.0.11 PE:Malware.MegaSearch!6.17B2
Sophos 4.98.0 MultiPlug
Trend Micro 9.740-1012 TROJ_GEN.R0CBC0PDE14
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.R0CBC0PDE14
Vba32 AntiVirus 3.12.26.0 BScope.Trojan.Agent
VIPRE Antivirus 28282 MegaSearch Toolbar
JnvkXb.exe (a3a7122be69f78be5482b8d8108c99ea) has been flagged by the following 26 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Gen:Variant.Adware.Graftor.146103
Agnitum Outpost 5.5.1.3 PUA.MultiPlug!
AhnLab-V3 2014.07.28.00 Trojan/Win32.Preloader
Avira AntiVir 7.11.164.42 Adware/Graftor.146103.8
avast! 8.0.1489.320 Win32:Dropper-gen [Drp]
AVG 14.0.0.3986 Generic5.AYTX
Bitdefender 7.2 Gen:Variant.Adware.Graftor.146103
Bkav FE 1.3.0.4959 W32.MultiPlugCG.Adware
Comodo Security 18993 ApplicUnwnt
Emsisoft Anti-Malware 3.0.0.600 Gen:Variant.Adware.Graftor.146103 (B)
ESET-NOD32 10160 Win32/AdWare.MultiPlug.AG
Fortinet FortiGate 5.1.152.0 Riskware/MultiPlug
F-Secure 11.0.19100.45 Gen:Variant.Adware.Graftor.146103
G Data 24 Gen:Variant.Adware.Graftor.146103
K7 AntiVirus 9.181.12846 Adware ( 0049c94b1 )
K7GW 9.181.12846 Adware ( 0049c94b1 )
Malwarebytes 1.75.0.1 PUP.Optional.MultiPlug
McAfee 6.0.4.564 RDN/Generic.bfr!hk
McAfee-GW-Edition 2013 RDN/Generic.bfr!hk
MicroWorld-eScan 12.0.250.0 Gen:Variant.Adware.Graftor.146103
Panda Antivirus 10.0.3.5 Trj/CI.A
Qihoo-360 1.0.0.1015 Win32/Trojan.Dropper.c9f
Tencent 1.0.0.1 Win32.Risk.Adware.Lmkl
Trend Micro 9.740.0.1012 TROJ_GEN.R0CBC0PGO14
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R0CBC0PGO14
VIPRE Antivirus 31654 Trojan.Win32.Generic!BT
Cp.dll (ea89a5cfcf37d160e1b20b40e5111e89) has been flagged by the following 26 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Application.Generic.607493
Agnitum Outpost 5.5.1.3 PUA.MultiPlug!
AhnLab-V3 None Adware/Win32.Graftor
Avira AntiVir 7.11.144.142 ADWARE/Adware.Gen
AVG 13.0.0.3169 Generic_r.GU
Baidu-International 3.5.1.41473 Adware.Win32.MultiPlug.N
Bitdefender 7.2 Application.Generic.607493
Comodo Security 18139 ApplicUnwnt.Win32.InstallRex.ALC
ESET-NOD32 9702 a variant of Win32/AdWare.MultiPlug.N
Fortinet FortiGate 4 Riskware/MultiPlug
F-Secure 11.0.19100.45 Application.Generic.607493
G Data 24 Application.Generic.607493
IKARUS anti.virus T3.1.6.1.0 AdWare.MegaSearch
K7 AntiVirus 9.176.11806 Adware ( 004923a41 )
K7GW 9.176.11806 Adware ( 004923a41 )
Malwarebytes 1.75.0001 PUP.Optional.MultiPlug.A
McAfee 6.0.4.564 Adware-FHP
McAfee-GW-Edition 2013 Adware-FHP
MicroWorld-eScan 12.0.250.0 Application.Generic.607493
NANO AntiVirus 0.28.0.59288 Riskware.Win32.MultiPlug.cvyxyu
Panda Antivirus 10.0.3.5 Trj/CI.A
Rising Antivirus 25.0.0.11 PE:Malware.Adware!6.1293
Sophos 4.98.0 MultiPlug
SUPERAntiSpyware 5.6.0.1032 Adware.Multiplug/Variant
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.R047H06CO14
VIPRE Antivirus 28442 JustPlugIt (fs)
7xiAGhPl.x64.dll (2399176cdc9056ed5fc364c12b555b23) has been flagged by the following 23 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Application.Generic.626740
Agnitum Outpost 5.5.1.3 PUA.MultiPlug!
AhnLab-V3 2014.06.19.00 Trojan/Win64.Preloader
Avira AntiVir 7.11.155.128 APPL/Multiplug.C.403968
Antiy-AVL 1.0.0.1 Trojan/Win32.SGeneric
avast! 8.0.1489.320 Win64:Adware-gen [Adw]
AVG 14.0.0.3972 Generic_r.KM
Baidu-International 3.5.1.41473 Adware.Win64.MultiPlug.81
Bitdefender 7.2 Application.Generic.626740
Comodo Security 18590 ApplicUnwnt
ESET-NOD32 9962 a variant of Win64/Adware.MultiPlug.C
F-Secure 11.0.19100.45 Application.Generic.626740
G Data 24 Application.Generic.626740
IKARUS anti.virus T3.1.6.1.0 AdWare.MultiPlug
Malwarebytes 1.75.0.1 PUP.Optional.MultiPlug.A
McAfee 6.0.4.564 RDN/Generic PUP.x!cd3
McAfee-GW-Edition 2013 RDN/Generic PUP.x!cd3
MicroWorld-eScan 12.0.250.0 Application.Generic.626740
Panda Antivirus 10.0.3.5 Trj/CI.A
Qihoo-360 1.0.0.1015 Win32/Trojan.Adware.814
Tencent 1.0.0.1 Win64.Adware.Multiplug.Hqlt
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R03WH06F114
VIPRE Antivirus 30420 Win64.Adware.MultiPlug
JnvkXb.dll (5e418b12120edc3609d744bb467cb45e) has been flagged by the following 23 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Application.Generic.673611
Agnitum Outpost 5.5.1.3 PUA.MultiPlug!
AhnLab-V3 2014.07.28.00 Adware/Win32.Agent
Avira AntiVir 7.11.164.42 SPR/Tool.448512.2
avast! 8.0.1489.320 Win32:Adware-gen [Adw]
AVG 14.0.0.3986 Generic5.AYVB
Bitdefender 7.2 Application.Generic.673611
Bkav FE 1.3.0.4959 W32.MultiPlugCP.Adware
Comodo Security 18993 ApplicUnwnt
ESET-NOD32 10160 a variant of Win32/AdWare.MultiPlug.AG
Fortinet FortiGate 5.1.152.0 Riskware/MultiPlug
F-Secure 11.0.19100.45 Application.Generic.673611
G Data 24 Application.Generic.673611
K7 AntiVirus 9.181.12846 Adware ( 0049c94b1 )
K7GW 9.181.12846 Trojan ( 050000001 )
Malwarebytes 1.75.0.1 PUP.Optional.MultiPlug
McAfee 6.0.4.564 RDN/Generic PUP.x!chv
McAfee-GW-Edition 2013 RDN/Generic PUP.x!chv
MicroWorld-eScan 12.0.250.0 Application.Generic.673611
Panda Antivirus 10.0.3.5 Trj/CI.A
Sophos 4.98.0 Generic PUA LG
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R0C9H06GC14
VIPRE Antivirus 31654 Trojan.Win32.Generic!BT
7xiAGhPl.exe (83c728a3d4b56127985b096478a943f8) has been flagged by the following 21 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Application.Generic.623657
Agnitum Outpost 5.5.1.3 PUA.MultiPlug!
AhnLab-V3 2014.05.30.00 Dropper/Win32.Preloader
Avira AntiVir 7.11.152.10 SPR/Tool.460800.1
AVG 14.0.0.3955 Generic_r.JW
Baidu-International 3.5.1.41473 Adware.Win32.MultiPlug.81
Bitdefender 7.2 Application.Generic.623657
Bkav FE 1.3.0.4959 W32.PatgeasM.Trojan
Comodo Security 18367 Application.Win32.MultiPlug.SJ
Fortinet FortiGate 4 Riskware/MultiPlug
F-Secure 11.0.19100.45 Application.Generic.623657
G Data 24 Application.Generic.623657
K7 AntiVirus 9.178.12244 Adware ( 004976341 )
K7GW 9.178.12244 Adware ( 004976341 )
Malwarebytes 1.75.0001 PUP.Optional.MultiPlug.A
McAfee 6.0.4.564 RDN/Generic.dx!dcf
McAfee-GW-Edition 2013 Heuristic.BehavesLike.Win32.Suspicious.H
MicroWorld-eScan 12.0.250.0 Application.Generic.623657
Panda Antivirus 10.0.3.5 Trj/Genetic.gen
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.R0CBH06ES14
VIPRE Antivirus 29736 Trojan.Win32.Generic!BT
G_X4nqbEt.exe (fc3111aead5ade33bea2477e65f7ceea) has been flagged by the following 19 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Gen:Variant.Adware.Graftor.146103
AhnLab-V3 2014.08.15.00 Trojan/Win32.Preloader
Avira AntiVir 7.11.167.76 Adware/Graftor.146103.159
avast! 8.0.1489.320 Win32:Adware-gen [Adw]
AVG 14.0.0.4007 Generic_r.QQ
AVware 1.5.0.16 Trojan.Win32.Generic!BT
Baidu-International 3.5.1.41473 Trojan.Win32.MultiPlug.bAG
Bitdefender 7.2 Gen:Variant.Adware.Graftor.146103
Comodo Security 19190 ApplicUnwnt
Emsisoft Anti-Malware 3.0.0.600 Gen:Variant.Adware.Graftor.146103 (B)
Fortinet FortiGate 5.1.152.0 Riskware/MultiPlug
F-Secure 11.0.19100.45 Gen:Variant.Adware.Graftor.146103
IKARUS anti.virus T3.1.7.5.0 not-a-virus:AdWare.MultiPlug
McAfee 6.0.4.564 Artemis!FC3111AEAD5A
McAfee-GW-Edition 2013.2 Artemis!FC3111AEAD5A
MicroWorld-eScan 12.0.250.0 Gen:Variant.Adware.Graftor.146103
Symantec 20131.1.5.61 Trojan.Gen
TrendMicro-HouseCall 9.700.0.1001 TROJ_GEN.R047H09HB14
VIPRE Antivirus 32210 Trojan.Win32.Generic!BT
Tri.exe (692b15082eeaa2006c68b39d78f49dbf) has been flagged by the following 18 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Application.Generic.649799
AhnLab-V3 2014.06.19.00 Dropper/Win32.Preloader
Avira AntiVir 7.11.155.148 SPR/Tool.643072.7
AVG 14.0.0.3972 Generic5.AVZR
Baidu-International 3.5.1.41473 Adware.Win32.MultiPlug.81
Bitdefender 7.2 Application.Generic.649799
Comodo Security 18592 ApplicUnwnt
ESET-NOD32 9963 a variant of Win32/AdWare.MultiPlug.Y
Fortinet FortiGate 5.1.152.0 Riskware/MultiPlug
F-Secure 11.0.19100.45 Application.Generic.649799
G Data 24 Application.Generic.649799
Malwarebytes 1.75.0.1 PUP.Optional.MultiPlug.A
McAfee 6.0.4.564 Artemis!692B15082EEA
McAfee-GW-Edition 2013 Heuristic.BehavesLike.Win32.Suspicious.H
MicroWorld-eScan 12.0.250.0 Application.Generic.649799
Sophos 4.98.0 Generic PUA EI
TrendMicro-HouseCall 9.700.0.1001 Suspicious_GEN.F47V0611
VIPRE Antivirus 30426 Win32.Malware!Drop
G_X4nqbEt.dll (6566ddcfad781f881556d2f4fcb49eaa) has been flagged by the following 11 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2014.08.13.02 Adware/Win32.Agent
AVG 14.0.0.4007 Generic_r.QD
AVware 1.5.0.16 Trojan.Win32.Generic!BT
Baidu-International 3.5.1.41473 Trojan.Win32.MultiPlug.BAY
Comodo Security 19174 Application.Win32.MultiPlug.AUAU
ESET-NOD32 10247 a variant of Win32/AdWare.MultiPlug.AY
IKARUS anti.virus T3.1.6.1.0 PUA.BHO
K7 AntiVirus 9.183.13029 Adware ( 0049f06f1 )
Malwarebytes 1.75.0.1 PUP.Optional.MultiPlug
TrendMicro-HouseCall 9.700.0.1001 Suspicious_GEN.F47V0811
VIPRE Antivirus 32174 Trojan.Win32.Generic!BT
R1dWbpxuU.exe (6cb0e030d27ab41c08823d43767436ea) has been flagged by the following 10 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Gen:Variant.Graftor.150430
AhnLab-V3 2014.08.10.00 Trojan/Win32.Preloader
avast! 8.0.1489.320 Win32:MultiPlug-BG [PUP]
AVG 14.0.0.4007 Generic_r.QQ
Baidu-International 3.5.1.41473 Trojan.Win32.MultiPlug.BAG
Bitdefender 7.2 Gen:Variant.Graftor.150430
Emsisoft Anti-Malware 3.0.0.600 Gen:Variant.Graftor.150430 (B)
ESET-NOD32 10230 a variant of Win32/AdWare.MultiPlug.AG
G Data 24 Gen:Variant.Graftor.150430
MicroWorld-eScan 12.0.250.0 Gen:Variant.Graftor.150430
VyGD2UD.dll (adfdd9859a2e253863ad2841ed8bb460) has been flagged by the following 10 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2014.01.10.00 Adware/Win32.Graftor
Avira AntiVir 7.11.124.138 ADWARE/Adware.Gen
AVG 13.0.0.3169 Generic_r.GU
Baidu-International 3.5.1.41473 Adware.Win32.MultiPlug.40
Comodo Security 17584 ApplicUnwnt
ESET-NOD32 9272 a variant of Win32/AdWare.MultiPlug.N
Fortinet FortiGate 5.1.147.0 Riskware/MultiPlug
Malwarebytes 1.75.0.1 PUP.Optional.MultiPlug.A
Rising Antivirus 25.0.0.11 PE:Malware.Adware!6.1293
VIPRE Antivirus 25278 JustPlugIt (fs)
JnvkXb.x64.dll (337519d300e79fcf5b8deb21fe1d031f) has been flagged by the following 7 scanners:
Anti-Virus softwareSoftware versionDetection
AhnLab-V3 2014.07.31.03 Trojan/Win64.Preloader
AVG 14.0.0.3986 Generic_r.QB
IKARUS anti.virus T3.1.6.1.0 PUA.Multiplug
Malwarebytes 1.75.0.1 PUP.Optional.Preload
McAfee 6.0.4.564 Artemis!337519D300E7
McAfee-GW-Edition 2013 Artemis!337519D300E7
TrendMicro-HouseCall 9.700.0.1001 Suspicious_GEN.F47V0703
yjZt.exe (ef38514253e4dafb6823f236bc47bb5f) has been flagged by the following 7 scanners:
Anti-Virus softwareSoftware versionDetection
AVG 13.0.0.3169 Generic5.AOBP
Comodo Security 17878 ApplicUnwnt
ESET-NOD32 9495 a variant of Win32/AdWare.MultiPlug.S
Malwarebytes 1.75.0001 PUP.Optional.MultiPlug.A
Qihoo-360 1.0.0.1015 HEUR/Malware.QVM10.Gen
Trend Micro 9.740-1012 ADW_MULTIPLUG
TrendMicro-HouseCall 9.700-1001 ADW_MULTIPLUG
       View all 413 all detections
Fun2Save has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: Fun2SAve
Installation folder: C:\ProgramData\fun2save
Uninstaller: "C:\ProgramData\Fun2Save\VyGD2UD.exe" /s /n /C:"ExecuteCommands;UninstallCommands" ""
Estimated size: 1.34 MB

Program filesFiles installed by Fun2Save

Program executable:VyGD2UD.exe (Malware detected)
Path:C:\ProgramData\fun2save\VyGD2UD.exe
MD5:113b8fc191b9149d08a92bb5914ff536
Additional files:
  • (Malware detected) G_X4nqbEt.exe (by databases professional distinction) - databases professional distinction (Formally are)
  • (Malware detected) yjZt.exe (by system Retrieval cluster) - system Retrieval cluster (often)
  • (Malware detected) LnR.exe (by RAID emphasized set a) - RAID emphasized set a (less Inserting)
  • (Malware detected) Cp.exe (by Setup)
  • DF9faXO_vT.exe (by Setup)
  • (Malware detected) R1dWbpxuU.exe (by program a and object) - program a and object (much)
  • sssekjwy15.exe
  • (Malware detected) VyGD2UD.exe
  • (Malware detected) 7xiAGhPl.x64.dll (by memory Databases) - memory Databases (managing dedicated are database)
  • (Malware detected) e.exe (by its particular) - its particular (concerned)
  • (Malware detected) Tri.exe (by with is system) - with is system (used so connected into)
  • (Malware detected) 7xiAGhPl.exe (by computers) - computers (also)
  • (Malware detected) LnR.dll (by 2 stable) - 2 stable (system the as tool)
  • (Malware detected) G_X4nqbEt.dll (by a and) - a and (may)
  • (Malware detected) JnvkXb.dll (by of to) - of to (most)
  • (Malware detected) JnvkXb.x64.dll (by of to)
  • (Malware detected) yjZt.dll (by large) - large (Obtaining operating database with)
  • (Malware detected) JnvkXb.exe (by use) - use (important concurrency time)
  • (Malware detected) Cp.dll
  • (Malware detected) Cp.x64.dll
  • DF9faXO_vT.dll
  • DF9faXO_vT.x64.dll
  • nxYcPk9c9C.dll
  • nxYcPk9c9C.x64.dll
  • (Malware detected) VyGD2UD.dll
  • VyGD2UD.x64.dll

Program behaviorsBehaviors exhibited

10 Internet Explorer BHOs
  • LnR.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'ExtraSehOpper' with the class of {7C0A180E-A4FA-3BC0-5F50-47D62547F6C7}.
  • JnvkXb.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'SaveeLots' with the class of {B5F9AB0B-6B3A-D088-F5BE-A88B345C5454}.
  • Cp.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'SaveNeewaApppz' with the class of {0C088AAD-7B29-D2B1-9BF7-6C5CCBE822FB}.
  • yjZt.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'MiinimumoPPrice' with the class of {6E3E8E43-56D8-BDB1-B926-A20075067189}.
  • 7xiAGhPl.x64.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'KienGCCoupon' with the class of {04B72E27-5544-D3F3-5967-12E8E863B5F1}.
  • G_X4nqbEt.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Fun2Save' with the class of {F7ADCA05-D35A-185C-C444-AA6CF6444211}.
    • Plus 4 more

How do I remove Fun2Save?

You can uninstall Fun2Save from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program Fun2Save, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove Fun2Save.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by Fun2Save you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome
OS VERSIONS
Win 7 (SP1) 50%
Win 10 17%
  
USER ACTIONS
Uninstall it 88%
Keep it 12%
 
COUNTRY POPULARITY
19.05%
United States

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 66.67%
Windows XP 16.67%
Windows 10 16.67%
Which OS releases does it run on?
Windows 7 Home Premium 22.22%
Windows 7 Professional 22.22%
Microsoft Windows XP 16.67%
Windows 7 Ultimate 16.67%
Windows 7 Home Basic 5.56%
Windows 8 5.56%

Distribution by countryGeography

19.05% of installs come from the United States
Which countries install it?
  United States 19.05%
  India 9.52%
  United Arab Emirates 4.76%
  Argentina 4.76%
  Brazil 4.76%
  Chile 4.76%
  Colombia 4.76%
  Czech Republic 4.76%
  Spain 4.76%
  Italy 4.76%
  MK 4.76%
  OM 4.76%
  Peru 4.76%
  PS 4.76%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Dell 25.00%
Acer 18.75%
Hewlett-Packard 18.75%
GIGABYTE 12.50%
Sony 6.25%
Lenovo 6.25%
Intel 6.25%
American Megatrends 6.25%
Common models
Sony SVS13117GAB 7.14%
Packard Bell DOT SE 7.14%
LENOVO Lenovo C205 7.14%
HP Pavilion 061 PX578AA-A... 7.14%
HP Pavilion dv6 Notebook ... 7.14%
HP Elite 7500 Series MT 7.14%

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.
Back to top
Find us on Facebook   Follow us on Twitter   Find us on Google+   View our Pinterests