Should I remove CostMin?

What percent of users and experts removed it?

86% remove it14% keep it

Overall Sentiment

Bad

What do people think about it?

(click star to rate)

How common is it?

Global Rank #11,257

United States Rank #16,998

Reach 0.0301%

Lifespan of installation (until removal)

< 12.39 days

365.50 days >

Average installed length: 192.04 days

Versions

Version	Distribution
4.3.0.1833	0.17%
4.3.0.1667	3.20%
4.3.0.1648	3.71%
4.3.0.1548	4.55%
4.3.0.1365	0.17%
4.2.0.1655	0.34%
4.2.0.1600	0.67%
4.2.0.1587	0.17%
4.2.0.1447	0.17%
4.2.0.1292	0.17%
4.1.0.1600	0.34%
4.1.0.1527	0.17%
4.1.0.1287	0.17%
4.0.0.1900	0.51%
4.0.0.1659	0.17%
4.0.0.1279	0.17%
4.0.0.1253	0.67%
4.0.0.1168	0.17%
4.0.0.1021	0.17%
3.3.0.1900	10.62%
3.3.0.1726	0.17%
3.3.0.1523	0.17%
3.2.0.1472	5.90%
3.2.0.1035	0.17%
3.1.0.1932	0.17%
3.1.0.1741	0.17%
3.1.0.1487	0.17%
3.1.0.1281	1.18%
3.0.0.1941	2.02%
3.0.0.1580	0.51%
3.0.0.1547	0.34%
3.0.0.1448	11.80%
3.0.0.1391	1.85%
3.0.0.1297	0.17%
3.0.0.1221	0.17%
3.0.0.1106	0.17%
2.3.0.1859	0.34%
2.3.0.1457	0.17%
2.3.0.1193	0.17%
2.2.0.1811	0.34%
2.2.0.1805	0.67%
2.2.0.1673	0.34%
2.2.0.1644	0.17%
2.2.0.1589	0.34%
2.2.0.1585	0.17%
2.2.0.1350	0.51%
2.2.0.1292	0.17%
2.2.0.1196	0.17%
2.1.0.1777	0.34%
2.1.0.1687	1.52%
2.1.0.1310	19.06%
73 versions

Other programs by Engaging Apps

Rankings

#11,252 Train Simulator 2014 by RailSimulator.com
#11,253 WordPerfect Office 11 by Corel
#11,254 Advanced Office Password Recovery by ElcomSoft Co
#11,255 Ghostery
#11,256 RAMRush 1.0.6.917 by FTweak
#11,257 CostMin by Engaging Apps
#11,258 RtLED by Realtek Semiconductor
#11,259 PASW Statistics 18 by SPSS
#11,260 SRS Audio Essentials by SRS Labs
#11,261 MadVR
#11,262 Folder Size for Windows by Brio

CostMin

from Engaging Apps

Remove CostMin by Engaging Apps

What is CostMin?

CostMin is an adware web browser extension designed to take control of the user's browser in order to redirect web searches and inject advertising. In Internet Explorer the program run as a Browser Helper Object. The add-in performs a number of behaviors that will hijack advertising on non-associated web sites as well as inject its own advertising in the form of contextual link ads, banner ads, popups and pop-overs including the hijacking of known ad serving sites. This malware is typically bundled with various third party unwanted applications as well as through web browser exploits. Although the program comes packaged with an uninstaller and is listed in the Windows Add/Remove Programs, fully removing this could be very difficult and an anti-malware product might be required.

"The Plugin is supported by third-party advertising, and when you download the Plugin you will see various types of advertisements displayed through your browser as you visit locations on the Internet. The Plugin currently displays several basic types of advertising: (1) sponsored links, (2) traditional display advertisements, such as banner ads, "pop-unders" and interstitial ads, (3) coupons, and (4) video targeted ads. The sponsored links may sometimes appear as in-text advertising. Sponsored links may also be displayed in response to keyword searches you enter through Google, Bing and other search engines."

About (from Engaging Apps)

CostMin is exactly as it sounds - it will reduce your costs to the minimum. Just install the CostMin add-on on your browsers, surf the web and get special offers when you need them the most. Once installed, the add-on will detect online-shopping websites and will offer you with special coupons, discounts and sales for ... Read more

Overview

Malware detected in the program
Integrates into the web browser
Delivered through a thrid-party offer
Injects advertisements unassociated with the underlying web page
The experts agree, you should remove it!

Warning, multiple anti-virus scanners have detected possible malware in CostMin.

2fsUX.exe (8300c91b40229b42301aebc6d8859907) has been flagged by the following 14 scanners:
Anti-Virus software	Version	Detection
AVG	2014.0.3598	Skodna.Generic
Clam AntiVirus	0.98/18155	win.Adware.Saveshare-3
Comodo Security	17142	Application.Win32.Agent.~AVL
Dr.Web	9.0.0.0295	Trojan.Crossrider.3
IKARUS anti.virus	t3scan.2.0.127	Win32.SuspectCrc
Kingsoft AntiVirus	331020.49267	Win32.Troj.Plugie.a.(kcloud)
Malwarebytes	v2013.10.22.04	PUP.Optional.MultiPlug.A
Norman	10.20131022	Suspicious_Gen4.FCNHT
Panda Antivirus	13.10.22.04	Adware/SaveShare
Rising Antivirus	23.00.65.131020	Trojan.Win32.Plugie.a
Sophos	4.93	MultiPlug
Trend Micro	10.465.22	ADW_SAVESHARE
TrendMicro-HouseCall	7.2.295	ADW_SAVESHARE
VIPRE Antivirus	22620	JustPlugIt (fs)
RuOG.exe (246e7d6913dd2800f7b9da0a23e7b588) has been flagged by the following 32 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Variant.Adware.Graftor.146103
Agnitum Outpost	5.5.1.3	PUA.MultiPlug!
AhnLab-V3	2014.08.06.00	Trojan/Win32.Preloader
Avira AntiVir	7.11.165.124	Adware/Graftor.146103.7
Antiy-AVL	1.0.0.1	Trojan/Win32.SGeneric
avast!	8.0.1489.320	Win32:Adware-gen [Adw]
AVG	14.0.0.3986	Generic5.BAGK
AVware	1.5.0.16	Trojan.Win32.Generic!BT
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.81
Bitdefender	7.2	Gen:Variant.Adware.Graftor.146103
Bkav FE	1.3.0.4959	W32.HapuproG.Trojan
Comodo Security	19098	ApplicUnwnt
Emsisoft Anti-Malware	3.0.0.600	Gen:Variant.Adware.Graftor.146103 (B)
ESET-NOD32	10211	a variant of Win32/AdWare.MultiPlug.AY
Fortinet FortiGate	5.1.152.0	Riskware/MultiPlug
F-Secure	11.0.19100.45	Gen:Variant.Adware.Graftor.146103
G Data	24	Gen:Variant.Adware.Graftor.146103
IKARUS anti.virus	T3.1.6.1.0	PUA.Generic
K7 AntiVirus	9.182.12966	Adware ( 0049c94b1 )
K7GW	9.182.12966	Adware ( 0049c94b1 )
Malwarebytes	1.75.0.1	PUP.Optional.MultiPlug
McAfee	6.0.4.564	RDN/Generic PUP.x!cjs
McAfee-GW-Edition	2013.2	RDN/Generic PUP.x!cjs
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Graftor.146103
NANO AntiVirus	0.28.2.61349	Riskware.Win32.Graftor.dcyclr
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Sophos	4.98.0	Generic PUA EK
Symantec	20131.1.5.61	Trojan.Gen.2
Tencent	1.0.0.1	Win32.Risk.Adware.Hpsg
Trend Micro	9.740.0.1012	TROJ_GEN.R0CBC0OGK14
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0CBC0OGK14
VIPRE Antivirus	31968	Trojan.Win32.Generic!BT
eMMppW.exe (0cc659a091e644cc781407fbf8320d5d) has been flagged by the following 28 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Application.Generic.605689
AhnLab-V3	None	Dropper/Win32.Preloader
Avira AntiVir	7.11.144.172	Adware/Multiplug.S
Antiy-AVL	0.1.0.1	GrayWare[AdWare:not-a-virus]/Win32.MultiPlug
avast!	8.0.1489.320	Win32:MultiPlug-AD [PUP]
AVG	13.0.0.3169	Generic5.AOYV
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.81
Bitdefender	7.2	Application.Generic.605689
Bkav FE	1.3.0.4959	W32.MultiPlugQ.Adware
CAT-QuickHeal	12.00	Adware.MultiPlug.gen (Not a Virus)
Comodo Security	18148	ApplicUnwnt
ESET-NOD32	9705	a variant of Win32/AdWare.MultiPlug.T
Fortinet FortiGate	4	Riskware/MultiPlug
F-Secure	11.0.19100.45	Application.Generic.605689
G Data	24	Application.Generic.605689
IKARUS anti.virus	T3.1.6.1.0	Win32.Malware
K7 AntiVirus	9.176.11833	Adware ( 00495ec11 )
K7GW	9.176.11833	Adware ( 00495ec11 )
Kaspersky	12.0.0.1225	not-a-virus:AdWare.Win32.MultiPlug.bdn
Malwarebytes	1.75.0001	PUP.Optional.MultiPlug.A
McAfee	6.0.4.564	Artemis!0CC659A091E6
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
MicroWorld-eScan	12.0.250.0	Application.Generic.605689
NANO AntiVirus	0.28.0.59492	Trojan.Win32.MultiPlug.cvchaw
Sophos	4.98.0	Generic PUA DA
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.R0CBB01DE14
Vba32 AntiVirus	3.12.26.0	AdWare.MultiPlug
VIPRE Antivirus	28488	Trojan.Win32.Generic!BT
3ygTug.exe (1dc7c3ef6eea8c9d6f3e5fc8055a42d3) has been flagged by the following 26 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Application.Generic.610930
Agnitum Outpost	5.5.1.3	PUA.MultiPlug!
AhnLab-V3	None	Dropper/Win32.Preloader
Avira AntiVir	7.11.144.176	SPR/Tool.462848.43
Antiy-AVL	0.1.0.1	Trojan/Win32.SGeneric
avast!	8.0.1489.320	Win32:PUP-gen [PUP]
AVG	13.0.0.3169	Generic5.AOQR
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.81
Bitdefender	7.2	Application.Generic.610930
Comodo Security	18148	ApplicUnwnt
ESET-NOD32	9705	a variant of Win32/AdWare.MultiPlug.T
Fortinet FortiGate	4	Riskware/MultiPlug
F-Secure	11.0.19100.45	Application.Generic.610930
G Data	24	Application.Generic.610930
IKARUS anti.virus	T3.1.6.1.0	Win32.SuspectCrc
K7 AntiVirus	9.176.11833	Adware ( 00495ec11 )
K7GW	9.176.11833	Adware ( 00495ec11 )
Malwarebytes	1.75.0001	PUP.Optional.MultiPlug.A
McAfee	6.0.4.564	Artemis!1DC7C3EF6EEA
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
MicroWorld-eScan	12.0.250.0	Application.Generic.610930
NANO AntiVirus	0.28.0.59492	Trojan.Win32.MultiPlug.cvcsic
Symantec	20131.1.5.61	WS.Reputation.1
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.F47V0306
VIPRE Antivirus	28488	Trojan.Win32.Generic!BT
ViRobot	2011.4.7.4223	Adware.Agent.462848.G
6Flcb4hfo.exe (fa7f2aaa16e87adaec0ada64fe123548) has been flagged by the following 24 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Application.Generic.653270
AhnLab-V3	2014.07.16.00	Dropper/Win32.Preloader
Avira AntiVir	7.11.161.34	SPR/Tool.631296
Antiy-AVL	1.0.0.1	Trojan/Win32.SGeneric
avast!	8.0.1489.320	Win32:Dropper-gen [Drp]
AVG	14.0.0.3986	Generic5.AXIC
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.BY
Bitdefender	7.2	Application.Generic.653270
Comodo Security	18866	ApplicUnwnt
ESET-NOD32	10104	a variant of Win32/AdWare.MultiPlug.Y
Fortinet FortiGate	5.1.152.0	Riskware/MultiPlug
F-Secure	11.0.19100.45	Application.Generic.653270
G Data	24	Application.Generic.653270
K7 AntiVirus	9.180.12733	Adware ( 0049b4c51 )
K7GW	9.180.12742	Trojan ( 050000001 )
Malwarebytes	1.75.0.1	PUP.Optional.Multiplug
McAfee	6.0.4.564	RDN/Generic PUP.x!cgd
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
MicroWorld-eScan	12.0.250.0	Application.Generic.653270
Panda Antivirus	10.0.3.5	Trj/CI.A
Qihoo-360	1.0.0.1015	Win32/Trojan.Dropper.c9f
Sophos	4.98.0	Generic PUA MK
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0CBH06FO14
VIPRE Antivirus	31318	Trojan.Win32.Generic!BT
yaQE1If7Y.exe (ec23e83d367281290af0228ffa7eada8) has been flagged by the following 20 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Application.Generic.620016
AhnLab-V3	None	Dropper/Win32.Preloader
AVG	13.0.0.3169	Generic5.ARED
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.81
Bitdefender	7.2	Application.Generic.620016
Bkav FE	1.3.0.4959	W32.MultiPlugAL.Adware
Comodo Security	18148	Application.Win32.MultiPlug.SJ
ESET-NOD32	9705	a variant of Win32/AdWare.MultiPlug.T
Fortinet FortiGate	4	Riskware/MultiPlug
F-Secure	11.0.19100.45	Application.Generic.620016
G Data	24	Application.Generic.620016
IKARUS anti.virus	T3.1.6.1.0	Win32.SuspectCrc
K7 AntiVirus	9.176.11833	Adware ( 004976341 )
K7GW	9.176.11833	Adware ( 004976341 )
Malwarebytes	1.75.0001	PUP.Optional.MultiPlug.A
McAfee	6.0.4.564	Artemis!EC23E83D3672
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
MicroWorld-eScan	12.0.250.0	Application.Generic.620016
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.F47V0406
VIPRE Antivirus	28486	Trojan.Win32.Generic!BT
CU.exe (7cdb70a0dd0df303a3cd1797cd0c0ab6) has been flagged by the following 19 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Application.Generic.666262
AhnLab-V3	2014.07.08.00	Dropper/Win32.Preloader
Avira AntiVir	7.11.158.200	Adware/MultiPlug.AB.1
AVG	14.0.0.3986	Generic5.AYKW
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.81
Bitdefender	7.2	Application.Generic.666262
Bkav FE	1.3.0.4959	W32.MultiPlugCB.Adware
Comodo Security	18801	ApplicUnwnt
ESET-NOD32	10058	a variant of Win32/AdWare.MultiPlug.AB
Fortinet FortiGate	5.1.152.0	Riskware/MultiPlug
F-Secure	11.0.19100.45	Application.Generic.666262
G Data	24	Application.Generic.666262
Malwarebytes	1.75.0.1	PUP.Optional.Multiplug
McAfee	6.0.4.564	RDN/Generic PUP.x!chq
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
MicroWorld-eScan	12.0.250.0	Application.Generic.666262
Panda Antivirus	10.0.3.5	Trj/CI.A
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R02KH06G614
VIPRE Antivirus	31062	Trojan.Win32.Generic!BT
Wz0wjvpj4v.exe (3235a5142bce167c8be580ce72d55378) has been flagged by the following 16 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	2014.07.02.03	Dropper/Win32.Preloader
Avira AntiVir	7.11.158.2	Adware/MultiPlug.Y.5
avast!	8.0.1489.320	Win32:Adware-gen [Adw]
AVG	14.0.0.3972	Generic5.AYAC
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.bY
Comodo Security	18738	ApplicUnwnt
ESET-NOD32	10032	a variant of Win32/AdWare.MultiPlug.Y
Fortinet FortiGate	5.1.152.0	Riskware/MultiPlug
K7 AntiVirus	9.180.12586	Adware ( 0049b4c51 )
K7GW	9.180.12586	Adware ( 0049b4c51 )
Malwarebytes	1.75.0.1	PUP.Optional.Multiplug
McAfee	6.0.4.564	RDN/Generic PUP.x!chb
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
Sophos	4.98.0	Generic PUA IO
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0CBH06FT14
VIPRE Antivirus	30876	Trojan.Win32.Generic!BT
bs318R6983.exe (be5c16f6998f6d7473150524c8338c62) has been flagged by the following 15 scanners:
Anti-Virus software	Software version	Detection
Agnitum Outpost	5.5.1.3	PUA.MultiPlug!
AhnLab-V3	2014.07.28.00	Trojan/Win32.Preloader
Avira AntiVir	7.11.164.60	Adware/MultiPlug.AG.74
Antiy-AVL	1.0.0.1	Trojan/Win32.SGeneric
avast!	8.0.1489.320	Win32:Adware-gen [Adw]
AVG	14.0.0.3986	Generic5.AZVT
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.81
Comodo Security	18997	ApplicUnwnt
ESET-NOD32	10163	a variant of Win32/AdWare.MultiPlug.AG
Malwarebytes	1.75.0.1	PUP.Optional.MultiPlug
McAfee	6.0.4.564	Artemis!BE5C16F6998F
McAfee-GW-Edition	2013	Artemis!BE5C16F6998F
Symantec	20131.1.5.61	WS.Reputation.1
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V0712
VIPRE Antivirus	31682	Trojan.Win32.Generic!BT
WUoUq2uCsc.exe (028c1a42ac6ff8fc1798d94718ed480f) has been flagged by the following 14 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Application.Generic.621135
AhnLab-V3	None	Dropper/Win32.Preloader
avast!	8.0.1489.320	Win32:MultiPlug-AD [PUP]
AVG	13.0.0.3169	Generic_r.JW
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.45
Bitdefender	7.2	Application.Generic.621135
Comodo Security	18122	ApplicUnwnt
ESET-NOD32	9691	a variant of Win32/AdWare.MultiPlug.T
G Data	24	Application.Generic.621135
K7GW	9.176.11799	Adware ( 004976341 )
Malwarebytes	1.75.0001	PUP.Optional.MultiPlug.A
MicroWorld-eScan	12.0.250.0	Application.Generic.621135
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.F47V0416
VIPRE Antivirus	28332	Trojan.Win32.Generic!BT
dMVT.dll (e9b27306a18f18b88945cdf066de2fc9) has been flagged by the following 13 scanners:
Anti-Virus software	Software version	Detection
avast!	8.0.1489.320	Win32:BHO-AML [Spy]
AVG	13.0.0.3169	Generic5.AFXS
Bkav FE	1.3.0.4246	HW32.Laneul.tesi
Comodo Security	16996	ApplicUnwnt
Dr.Web		Trojan.Crossrider.3
ESET-NOD32	8840	a variant of Win32/Adware.MultiPlug.I
K7 AntiVirus	9.172.9682	Riskware
K7GW	12.7.0.14	Riskware
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.MultiPlug.A
McAfee	5.600.0.1067	Artemis!E9B27306A18F
McAfee-GW-Edition	2013	Artemis!E9B27306A18F
VIPRE Antivirus	21806	Trojan.Win32.Generic!BT
6pM.exe (0920b67a31662468e9eafdb6d9bc0f72) has been flagged by the following 12 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	None	Dropper/Win32.Preloader
avast!	8.0.1489.320	Win32:MultiPlug-AD [PUP]
AVG	13.0.0.3169	Generic_r.JW
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.T
Comodo Security	18122	Application.Win32.MultiPlug.SJ
ESET-NOD32	9691	a variant of Win32/AdWare.MultiPlug.T
K7GW	9.176.11799	Adware ( 004976341 )
Malwarebytes	1.75.0001	PUP.Optional.MultiPlug.A
McAfee	6.0.4.564	Artemis!0920B67A3166
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.F47V0417
VIPRE Antivirus	28332	Trojan.Win32.Generic!BT
WfHRqId.exe (074fdbec16dcf4bc211b27f64c3512ae) has been flagged by the following 10 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	2014.06.17.01	Dropper/Win32.Preloader
Antiy-AVL	1.0.0.1	Trojan/Win32.TGeneric
avast!	8.0.1489.320	Win32:MultiPlug-BC [PUP]
AVG	14.0.0.3964	Generic5.AVSA
Baidu-International	3.5.1.41473	Adware.Win32.BHO.77
ESET-NOD32	9957	a variant of Win32/AdWare.MultiPlug.Y
Malwarebytes	1.75.0.1	PUP.Optional.MultiPlug.A
McAfee	6.0.4.564	Artemis!074FDBEC16DC
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V0610
hUGS06zD4Do.exe (5092f09fe84b58128d129f80ade76e81) has been flagged by the following 10 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	2014.07.08.02	Trojan/Win32.Preloader
AVG	14.0.0.3986	Generic5.AYUS
Comodo Security	18804	ApplicUnwnt
ESET-NOD32	10061	a variant of Win32/AdWare.MultiPlug.AG
Malwarebytes	1.75.0.1	PUP.Optional.MultiPlug.A
McAfee	6.0.4.564	Artemis!5092F09FE84B
McAfee-GW-Edition	2013	Artemis!5092F09FE84B
Symantec	20131.1.5.61	WS.Reputation.1
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V0704
VIPRE Antivirus	31080	Trojan.Win32.Generic!BT
gS9BIK.exe (c2f76b2a4784ce0f8b5d1fbb149de768) has been flagged by the following 8 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	2014.06.18.00	Dropper/Win32.Preloader
AVG	14.0.0.3972	Generic5.AWSD
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.77
ESET-NOD32	9962	a variant of Win32/AdWare.MultiPlug.Y
Malwarebytes	1.75.0.1	PUP.Optional.MultiPlug.A
McAfee	6.0.4.564	Artemis!C2F76B2A4784
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V0614
51d15c58d70ab.dll (05234975b085632d70d89c2f420c5107) has been flagged by the following 7 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	2013.07.05.00	Adware/Win32.MegaSearch
Comodo Security	16548	ApplicUnwnt
ESET-NOD32	8529	a variant of Win32/Adware.MultiPlug.I
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.MultiPlug.I.(kcloud)
Sophos	4.90.0	FastSave
Vba32 AntiVirus	3.12.22.2	BScope.Adware.MegaSearch
VIPRE Antivirus	19314	Trojan.Win32.Generic!BT
qExpl3FF.exe (96b478bf6e702e5a185f0c64497beeb3) has been flagged by the following 6 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	2014.06.11.00	Dropper/Win32.Preloader
AVG	14.0.0.3955	Generic5.AVNH
Baidu-International	3.5.1.41473	Adware.Win32.BHO.45
ESET-NOD32	9926	Win32/AdWare.MultiPlug.Y
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
Symantec	20131.1.5.61	WS.Reputation.1
Jn_A.exe (badcc3144b3e14cdaa667c2755a4c15b) has been flagged by the following 6 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	None	Dropper/Win32.Preloader
avast!	8.0.1489.320	Win32:MultiPlug-AD [PUP]
AVG	13.0.0.3169	Generic_r.JW
Baidu-International	3.5.1.41473	Adware.Win32.MultiPlug.T
ESET-NOD32	9674	a variant of Win32/AdWare.MultiPlug.T
Malwarebytes	1.75.0001	PUP.Optional.MultiPlug.A
R64.exe (dc0ac7dbdcbbb8b2561ba9b8ccab3d37) has been flagged by the following 5 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	2014.05.28.00	Dropper/Win32.Preloader
Malwarebytes	1.75.0001	PUP.Optional.Multiplug
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
Symantec	20131.1.5.61	WS.Reputation.1
ViRobot	2011.4.7.4223	Adware.Agent.695808
4gjeaV.exe (536b32345f0794f7b2d12cb6e160fb9a) has been flagged by the following 4 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	None	Dropper/Win32.Preloader
Baidu-International	3.5.1.41473	Adware.Win32.BHO.77
McAfee-GW-Edition	2013	Heuristic.BehavesLike.Win32.Suspicious.H
TrendMicro-HouseCall	9.700-1001	TROJ_GEN.F47V0519

View all 289 all detections

CostMin has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program details

Displayed publisher: CostMin

URL: costmin.info

Help link: advertising-support.com

Installation folder: C:\Documents and Settings\user\Application data\costmin

Uninstaller: "C:\Documents and Settings\user\Application Data\CostMin\2fsUX.exe" /s /n /C:"ExecuteCommands;UninstallCommands" ""

Estimated size: 569.26 KB

Files installed by CostMin

Program executable:	2fsUX.exe (Malware detected)
Path:	C:\Documents and Settings\user\Application data\costmin\2fsUX.exe
MD5:	8300c91b40229b42301aebc6d8859907

Additional files:

(Malware detected) hUGS06zD4Do.exe (by database citation control) - database citation control (The called is the The)
(Malware detected) yaQE1If7Y.exe (by storing the catered world) - storing the catered world (most s)
(Malware detected) 2fsUX.exe (by Setup)
(Malware detected) qExpl3FF.exe (by catered interactions) - catered interactions (of support structure fails dealing)
(Malware detected) RuOG.exe (by such a applications) - such a applications (or emphasized)
(Malware detected) 3ygTug.exe (by fall Registering) - fall Registering (of a)
(Malware detected) 6Flcb4hfo.exe (by This access take) - This access take (that stable term where)
(Malware detected) 7M_XsZAXE8.exe (by This access take)
(Malware detected) KveSTXhcUEj.exe
(Malware detected) Wz0wjvpj4v.exe (by Databases the is) - Databases the is (This accelerators)
fZT.exe (by used is support) - used is support (it servers casually according)
(Malware detected) gS9BIK.exe (by arrays of the) - arrays of the (DBMS Defining often)
(Malware detected) CU.exe (by set provide) - set provide (or)
(Malware detected) 4gjeaV.exe (by fails to) - fails to (multiprocessor database size)
(Malware detected) oE2.exe (by fails to)
(Malware detected) Jn_A.exe (by storage) - storage (management to on a database)
(Malware detected) eMMppW.exe (by system) - system (to usage database large collectively)
(Malware detected) bs318R6983.exe (by UML) - UML (tools)
(Malware detected) R64.exe (by at) - at (the sometimes necessitate)
(Malware detected) sCl.exe (by at)
(Malware detected) VLRvNjzyw.exe
(Malware detected) WfHRqId.exe (by is) - is (data dedicated)
(Malware detected) 6pM.exe (by a) - a (usually)
(Malware detected) WUoUq2uCsc.exe (by a) - processing
(Malware detected) 51d15c58d70ab.dll
(Malware detected) dMVT.dll
uninstall.exe

Behaviors exhibited

2 Internet Explorer BHOs

51d15c58d70ab.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'savenashare' with the class of {6754CBE8-FD9F-55AC-60F1-1CA59D326461}.
d.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'SearchNewTab' with the class of {885D1CB3-872A-D62A-A2D7-EC7C7E3B2174}.

How do I remove CostMin?

You can uninstall CostMin from your computer by using the Add/Remove Program feature in the Window's Control Panel.

On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:

Windows Vista/7/8/10: Click Uninstall a Program.
Windows XP: Click Add or Remove Programs.

When you find the program CostMin, click it, and then do one of the following:

Windows Vista/7/8/10: Click Uninstall.
Windows XP: Click the Remove or Change/Remove tab (to the right of the program).

Follow the prompts. A progress bar shows you how long it will take to remove CostMin.
If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by CostMin you can restore them to their previous default settings.

Microsoft Internet Explorer

Mozilla Firefox

Google Chrome

OS VERSIONS

Win 7 (SP1) 54%

Win XP 0%

USER ACTIONS

Uninstall it 86%

Keep it 14%

GLOBAL RANK

#11,257

Windows

Which Windows OS versions does it run on?

Windows 7	62.29%
Windows 10	27.95%
Windows XP	6.23%
Windows Vista	3.54%
Which OS releases does it run on?
Windows 7 Home Premium	22.79%
Windows 7 Ultimate	21.43%
Windows 7 Professional	12.93%
Windows 8.1	8.67%
Microsoft Windows XP	5.95%
Windows 8.1 Pro	5.10%

Geography

22.99% of installs come from the United States

Which countries install it?

United States	22.99%
United Kingdom	5.42%
Saudi Arabia	4.93%
Brazil	3.94%
MA	3.45%
Canada	2.79%
Germany	2.46%
France	2.46%
Norway	2.13%
DZ	1.97%
Indonesia	1.81%
India	1.81%
Italy	1.81%
Thailand	1.64%

PC manufacturers

What PC manufacturers (OEMs) have it installed?

Hewlett-Packard	26.74%
Dell	17.22%
Acer	16.71%
Toshiba	13.11%
ASUS	11.83%
Samsung	4.37%
GIGABYTE	4.11%
Lenovo	2.83%
American Megatrends	0.77%
Compaq	0.77%
Sahara	0.77%
Intel	0.77%
Common models
HP Pavilion g6 Notebook P...	6.83%
HP Pavilion dv6 Notebook ...	4.88%
Dell Inspiron 1545	2.93%
TOSHIBA Satellite C660	2.44%
Dell Inspiron N5110	2.44%
HP 2000 Notebook PC	2.44%

Comments

No one has commented yet. Help others learn more about this software, share your comments.