84,488,480 programs installed

Should I remove MPlayerplus?

What percent of users and experts removed it?
82% remove it18% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Global Rank #45,120
Reach 0.0019%
Lifespan of installation (until removal)
< 6.03 days
177.86 days >
Average installed length: 93.45 days

Versions

VersionDistribution
1.34.5.12 100.00%

MPlayerplus

What is MPlayerplus?

The MPlayerplus Freeven adware injects advertising in the user's Internet browser by running as an extension and/or add-on. Ads are delivered in the form of search-related ads, banner and video ads, and text-links (roll-overs) as well as some popup ads. These ads are typically injected in the header of footer are of the web page. It will also convert words on pages you view into hyperlinks that are linked to advertisements. This application is classified as adware and/or a PUP based on its behavior. The software is distributed through third party installers.

From the EULA:
"As part of the installing of the Extensions, Licensors may offer changes to your Internet Browser settings. This change if approved by you can be reconfigured by you at any time from the options dialog available on your Internet Browser. Such changes may include the following
- The homepage of your Internet Browser
- The default search engine in your Internet Browser's built-in search box
- The page displayed when opening a new tab."

Overview

During setup, the program registers itself to launch on boot through a Windows Schedule Task in order to automatically start-up (this is typically done to avoid any UAC prompts). It adds a Browser Helper Object (BHO) to Internet Explorer. The primary executable is named utils.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 15 files and is usually about 9.1 MB (9,545,756 bytes).

This browser extension utilizes Crossrider framework, a cross-browser toolbar/plugin platform used to develop, deploy and monetize web browser toolbars for Internet Explorer, Chrome and Firefox. Crossrider extension provide monetization options, mostly potentially unwanted apps, for toolbars including coupons, search assistant (home page and search hijacking) and in-text contextual advertising. Many adware programs (defined by a number of anti-virus vendors) are built using Crossrider as it provides a quick an easy way to deploy ad-supported features that will assist in browser search hijacking.
  • Malware detected in the program
  • Automatically starts with Windows
  • Integrates into the web browser
  • Uses the Crossrider toolbar framework
  • During install it may hijack/modify the browser's homepage and search provider
  • Runs disconnected from the browser as a background process
  • Known to reinstall itself
  • Typically distributed through a pay-per-install bundle
  • Injects advertisements unassociated with the underlying web page
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in MPlayerplus.
utils.exe (615560d8505fb173795fccac9a57bda4) has been flagged by the following 6 scanners:
Anti-Virus softwareVersionDetection
Baidu-International 4.0.3.14529 Trojan.Win32.VMDetector.bE
Bkav FE 1.3.0.4959 HW32.CDB
ESET-NOD32 8.9810 a variant of Win32/Packed.VMDetector.E
Malwarebytes v2014.05.29.11 PUP.Optional.crossRider.A
The Hacker 6.8.0.5.149 Backdoor/DsBot.boi
TrendMicro-HouseCall 7.2.149 TROJ_GE.23D29F61
MPlayerplus-codedownloader.exe (2a097fcc7a5f9c85391515c278008049) has been flagged by the following 18 scanners:
Anti-Virus softwareSoftware versionDetection
Avira AntiVir 7.11.150.164 Adware/CrossRider.A.3946
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.bAC
Bitdefender 7.2 Gen:Variant.Adware.Kazy.374109
Comodo Security 18306 ApplicUnwnt
Emsisoft Anti-Malware 3.0.0.599 Gen:Variant.Adware.Kazy.374109 (B)
ESET-NOD32 9823 a variant of Win32/Toolbar.CrossRider.AC
Fortinet FortiGate 4 Riskware/Toolbar_CrossRider
F-Secure 11.0.19100.45 Gen:Variant.Adware.Kazy.374109
G Data 24 Gen:Variant.Adware.Kazy.374109
Malwarebytes 1.75.0001 PUP.Optional.MPlayerplus.A
McAfee 6.0.4.564 Adware-CrossR!2A097FCC7A5F
McAfee-GW-Edition 2013 Adware-CrossR!2A097FCC7A5F
MicroWorld-eScan 12.0.250.0 Gen:Variant.Adware.Kazy.374109
Panda Antivirus 10.0.3.5 PUP/PlusHD
Sophos 4.98.0 AppRider
Symantec 20131.1.5.61 Trojan.ADH.2
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0515
VIPRE Antivirus 29412 Crossrider (fs)
MPlayerplus-nova.exe (2e13cac6ed0e76eb99bbe63bc37b80f9) has been flagged by the following 15 scanners:
Anti-Virus softwareSoftware versionDetection
Avira AntiVir 7.11.150.164 Adware/CrossRider.A.3978
Antiy-AVL 0.1.0.1 Trojan/Win32.TSGeneric
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.BAE
ESET-NOD32 9823 a variant of Win32/Toolbar.CrossRider.AE
Fortinet FortiGate 4 Riskware/Toolbar_CrossRider
G Data 24 Win32.Application.Plush.A
Malwarebytes 1.75.0001 PUP.Optional.MPlayerplus.A
McAfee 6.0.4.564 Artemis!2E13CAC6ED0E
McAfee-GW-Edition 2013 Artemis!2E13CAC6ED0E
Panda Antivirus 10.0.3.5 PUP/PlusHD
Qihoo-360 1.0.0.1015 Win32/Virus.Adware.550
Sophos 4.98.0 Generic PUA HL
Symantec 20131.1.5.61 Adware.BL
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0515
VIPRE Antivirus 29412 Crossrider (fs)
b831afd9-f083-41b9-9e89-e4a308fff6ee-2.exe (430e05a44b24038737c54697e2fe8550) has been flagged by the following 14 scanners:
Anti-Virus softwareSoftware versionDetection
Avira AntiVir 7.11.150.60 Adware/CrossRider.A.3934
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.BAC
Comodo Security 18286 ApplicUnwnt
ESET-NOD32 9814 a variant of Win32/Toolbar.CrossRider.AC
Fortinet FortiGate 4 Riskware/Toolbar_CrossRider
G Data 24 Win32.Application.Plush.A
Malwarebytes 1.75.0001 PUP.Optional.MPlayerplus.A
McAfee 6.0.4.564 Adware-CrossR!430E05A44B24
McAfee-GW-Edition 2013 Adware-CrossR!430E05A44B24
Panda Antivirus 10.0.3.5 PUP/PlusHD
Sophos 4.98.0 AppRider
Symantec 20131.1.5.61 WS.Reputation.1
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0515
VIPRE Antivirus 29332 Crossrider (fs)
b831afd9-f083-41b9-9e89-e4a308fff6ee-3.exe (c94b7582163d16259b19c923b192940e) has been flagged by the following 12 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.BAD
Bitdefender 7.2 Gen:Variant.Adware.Kazy.374062
Emsisoft Anti-Malware 3.0.0.599 Gen:Variant.Adware.Kazy.374062 (B)
ESET-NOD32 9805 a variant of Win32/Toolbar.CrossRider.AD
F-Secure 11.0.19100.45 Gen:Variant.Adware.Kazy.374062
G Data 24 Gen:Variant.Adware.Kazy.374062
McAfee 6.0.4.564 Adware-CrossR!C94B7582163D
McAfee-GW-Edition 2013 Adware-CrossR!C94B7582163D
MicroWorld-eScan 12.0.250.0 Gen:Variant.Adware.Kazy.374062
Panda Antivirus 10.0.3.5 PUP/PlusHD
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0515
VIPRE Antivirus 29242 Crossrider (fs)
MPlayerplus-bho.dll (e9bf46b3b14080e54ea5c6b7bc017661) has been flagged by the following 11 scanners:
Anti-Virus softwareSoftware versionDetection
Avira AntiVir 7.11.150.6 Adware/CrossRider.A.3950
Baidu-International 3.5.1.41473 Adware.Win32.AddLyrics.aai
Comodo Security 18283 ApplicUnwnt
Fortinet FortiGate 4 Adware/CrossR
G Data 24 Win32.Application.Plush.B
McAfee 6.0.4.564 Adware-CrossR!E9BF46B3B140
McAfee-GW-Edition 2013 Adware-CrossR!E9BF46B3B140
Panda Antivirus 10.0.3.5 PUP/PlusHD
Sophos 4.98.0 AppRider
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0515
VIPRE Antivirus 29266 Crossrider (fs)
b831afd9-f083-41b9-9e89-e4a308fff6ee-5.exe (c11f4afffbd6426db75a681a6272d0f6) has been flagged by the following 7 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.bAC
ESET-NOD32 9805 a variant of Win32/Toolbar.CrossRider.AC
G Data 24 Win32.Application.Plush.A
McAfee 6.0.4.564 Adware-CrossR!C11F4AFFFBD6
McAfee-GW-Edition 2013 Adware-CrossR!C11F4AFFFBD6
Panda Antivirus 10.0.3.5 PUP/PlusHD
VIPRE Antivirus 29242 Crossrider (fs)
b831afd9-f083-41b9-9e89-e4a308fff6ee-4.exe (c74621f2bdb461ad92078d24b6c14fc3) has been flagged by the following 7 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International 3.5.1.41473 Adware.Win32.CrossRider.bAD
ESET-NOD32 9805 a variant of Win32/Toolbar.CrossRider.AD
G Data 24 Win32.Application.Plush.A
McAfee 6.0.4.564 Adware-CrossR!C74621F2BDB4
McAfee-GW-Edition 2013 Adware-CrossR!C74621F2BDB4
Panda Antivirus 10.0.3.5 PUP/PlusHD
VIPRE Antivirus 29242 Crossrider (fs)
       View all 90 all detections
MPlayerplus has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program detailsProgram details

Displayed publisher: Freeven
Installation folder: C:\Program Files\mplayerplus
Uninstaller: C:\Program Files\MPlayerplus\Uninstall.exe /fcp=1
Estimated size: 9.1 MB

Program filesFiles installed by MPlayerplus

Program executable:utils.exe (Malware detected)
Path:C:\Program Files\mplayerplus\utils.exe
MD5:615560d8505fb173795fccac9a57bda4
Additional files:
  • (Malware detected) b831afd9-f083-41b9-9e89-e4a308fff6ee-2.exe (by Freeven) - MPlayerplus (MPlayerplus exe)
  • (Malware detected) b831afd9-f083-41b9-9e89-e4a308fff6ee-3.exe (by Freeven)
  • (Malware detected) b831afd9-f083-41b9-9e89-e4a308fff6ee-4.exe
  • (Malware detected) b831afd9-f083-41b9-9e89-e4a308fff6ee-5.exe
  • MPlayerplus-bg.exe
  • (Malware detected) MPlayerplus-bho.dll - MPlayerplus BHO
  • MPlayerplus-bho64.dll
  • (Malware detected) MPlayerplus-codedownloader.exe
  • (Malware detected) MPlayerplus-nova.exe
  • MPlayerplus-nova.dll
  • Uninstall.exe

Program behaviorsBehaviors exhibited

Internet Explorer BHO
  • MPlayerplus-bho.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'MPlayerplus' with the class of {11111111-1111-1111-1111-110511421146} (CrossriderApp0054246).
6 Scheduled Tasks (Boot/Login)
  • MPlayerplus-codedownloader.exe is automatically launched at startup through a scheduled task named b831afd9-f083-41b9-9e89-e4a308fff6ee-6.
  • MPlayerplus-nova.exe is automatically launched at startup through a scheduled task named b831afd9-f083-41b9-9e89-e4a308fff6ee-7.
  • b831afd9-f083-41b9-9e89-e4a308fff6ee-5.exe is automatically launched at startup through a scheduled task named b831afd9-f083-41b9-9e89-e4a308fff6ee-5.
  • b831afd9-f083-41b9-9e89-e4a308fff6ee-4.exe is automatically launched at startup through a scheduled task named b831afd9-f083-41b9-9e89-e4a308fff6ee-4.
  • b831afd9-f083-41b9-9e89-e4a308fff6ee-3.exe is automatically launched at startup through a scheduled task named b831afd9-f083-41b9-9e89-e4a308fff6ee-3.
  • b831afd9-f083-41b9-9e89-e4a308fff6ee-2.exe is automatically launched at startup through a scheduled task named b831afd9-f083-41b9-9e89-e4a308fff6ee-2.

How do I remove MPlayerplus?

You can uninstall MPlayerplus from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program MPlayerplus, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove MPlayerplus.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by MPlayerplus you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

OS VERSIONS
Win 7 (SP1) 50%
Win XP 5%
 
HOW IT STARTS
Scheduled task? Yes
(Runs on Windows boot)
 
USER ACTIONS
Uninstall it 82%
Keep it 18%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 50.00%
Windows 10 34.21%
Windows Vista 10.53%
Windows XP 5.26%
Which OS releases does it run on?
Windows 7 Home Premium 30.56%
Windows 8.1 25.00%
Windows Vista Home Premiu... 11.11%
Windows 8 8.33%
Windows 7 Professional 5.56%
Windows 7 Home Basic 5.56%

Distribution by countryGeography

22.50% of installs come from the United States
Which countries install it?
  United States 22.50%
  France 17.50%
  Germany 12.50%
  Italy 10.00%
  Brazil 7.50%
  Australia 7.50%
  Canada 7.50%
  Mexico 5.00%
  Netherlands 5.00%
  South Africa 2.50%
  United Kingdom 2.50%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 33.33%
Acer 22.22%
Toshiba 11.11%
Samsung 11.11%
Dell 5.56%
ASUS 5.56%
Sony 2.78%
Medion 2.78%
GIGABYTE 2.78%
Compaq 2.78%
Common models
HP Pavilion g7 Notebook P... 5.56%
TOSHIBA Satellite L830 2.78%
TOSHIBA Satellite L740 2.78%
TOSHIBA SATELLITE C70D-A 2.78%
TOSHIBA SATELLITE C670-17... 2.78%
Sony SVE1713L1EW 2.78%

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.