Should I remove Sm23mS?

What percent of users and experts removed it?

88% remove it12% keep it

Overall Sentiment

Bad

What do people think about it?

(click star to rate)

How common is it?

Global Rank #42,555

United States Rank #49,504

Reach 0.0021%

Lifespan of installation (until removal)

< 6.49 days

191.55 days >

Average installed length: 100.64 days

Versions

Version	Distribution
1.36.01.22	35.71%
1.35.12.18	4.76%
1.35.9.29	21.43%
1.35.9.16	7.14%
1.35.3.9	2.38%
1.34.8.12	11.90%
1.34.7.29	7.14%
1.34.6.10	4.76%
1.34.5.29	2.38%
1.34.5.22	2.38%

Other programs by Robokid Technologies

Rankings

#42,550 Native Instruments Kinetic Metal
#42,551 Adobe Reader 9 - Svenska
#42,552 Paintball2 Alpha build 40 by Digital Paint
#42,553 Philips Phone Manager
#42,554 ecobutton by Bright Ideas Global Limited
#42,555 Sm23mS by Robokid Technologies
#42,556 Folder Marker Home v 3.2 by ArcticLine Software
#42,557 Sam and Max - Season One - Episode 104 - Abe Lincoln Must Die! by Telltale Games
#42,558 Autodesk AutoCAD Civil 3D 2017 - English
#42,559 Vocalizer Karen from Claro Software
#42,560 PIT Format 2011 by Biuro Informatyki Stosowanej

Sm23mS

from Robokid Technologies

Remove Sm23mS by Robokid Technologies

What is Sm23mS?

The smart-saverplus application is usually bundled by 3rd-party download managers that utilize deceptive advertising techniques in order to install the software. In addition to ads, the program will also modify the browser settings which could include lowering the normal security settings of the browser as well as changing the home page and search provider (known as web browser hijacking). The extension will also report back to the controlling server analytics which may include the behavior of the user on the Internet and reports back URLs and domains visited as well as what advertisements are displayed and clicked on. This adware is mostly bundled with 3rd party download managers that include a number of additional offers, all potentially unwanted programs.

Overview

The most common release is 1.36.01.22, with over 98% of all installations currently using this version. During setup, the program registers itself to launch on boot through a Windows Schedule Task in order to automatically start-up (this is typically done to avoid any UAC prompts). It adds a Browser Helper Object (BHO) to Internet Explorer. In the Mozilla Firefox browser, it will add an add-on. The primary executable is named utils.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package generally installs about 207 files and is usually about 14.39 MB (15,085,696 bytes).

This browser extension utilizes Crossrider framework, a cross-browser toolbar/plugin platform used to develop, deploy and monetize web browser toolbars for Internet Explorer, Chrome and Firefox. Crossrider extension provide monetization options, mostly potentially unwanted apps, for toolbars including coupons, search assistant (home page and search hijacking) and in-text contextual advertising. Many adware programs (defined by a number of anti-virus vendors) are built using Crossrider as it provides a quick an easy way to deploy ad-supported features that will assist in browser search hijacking.

Malware detected in the program
Starts automatically
Integrates into the web browser
Uses the Crossrider toolbar framework
During install it may hijack/modify the browser's homepage and search provider
Runs disconnected from the browser as a background process
Known to reinstall itself
Delivered through a thrid-party offer
Injects advertisements unassociated with the underlying web page
Hijacks the web browser's home page
Hijacks the browser's default search provider
The experts agree, you should remove it!

Warning, multiple anti-virus scanners have detected possible malware in Sm23mS.

utils.exe (9be2289c42c19b17ea989369c61d954c) has been flagged by the following 10 scanners:
Anti-Virus software	Version	Detection
AhnLab-V3	2014.08.04	PUP/Win32.MulDrop
Bkav FE	1.3.0.4959	HW32.CDB
Dr.Web	9.0.0.0218	Trojan.Crossrider.27467
G Data	14.8.24	NSIS.Adware.Crossrider
IKARUS anti.virus	t3scan.1.6.1.0	PUA.PlusHD
Malwarebytes	v2014.08.06.10	PUP.Optional.CrossRider.A
McAfee	5600.7046	Artemis!9BE2289C42C1
McAfee-GW-Edition	7.7046	Heuristic.BehavesLike.Win32.Suspicious-PKR.O
Rising Antivirus	23.00.65.14804	PE:Malware.Obscure!1.9C59
TrendMicro-HouseCall	7.2.218	Suspicious_GEN.F47V0803
a3637df0-2b42-4fd8-a53d-5b7bc71242cf-11.exe (0d25f2c08e42655dddc6c059f43fb215) has been flagged by the following 40 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Application.Heur.6v1@mqIxPymO
AhnLab-V3	2015.03.29.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate.dq
avast!	8.0.1489.320	Win32:Crossrider-BR [Adw]
AVG	15.0.0.4315	Generic.B92
Avira	3.6.1.96	ADWARE/CrossRider.Gen7
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	Adware.Win32.CrossAd.AX
Bitdefender	7.2	Gen:Application.Heur.6v1@mqIxPymO
Bkav FE	1.3.0.6379	W32.HfsAdware.B059
CAT-QuickHeal	14.00	PUA.BrightCircle.OD6
Clam AntiVirus	0.98.5.0	Win.Adware.Agent-29337
Comodo Security	21569	Application.Win32.Plush.GRI
Cyren	5.4.16.7	W32/A-6583813c!Eldorado
Dr.Web	7.0.12.3050	Trojan.Crossrider.38361
ESET-NOD32	11391	a variant of Win32/Toolbar.CrossRider.AX potentially unwanted
Fortinet FortiGate	5.0.999.0	W32/GoogUpdate.AX!tr
F-Prot	4.7.1.166	W32/A-6583813c!Eldorado
F-Secure	11.0.19100.45	Gen:Application.Heur.6v1@mqIxPymO
G Data	25	Gen:Application.Heur.6v1@mqIxPymO
IKARUS anti.virus	T3.1.8.9.0	Trojan.GoogUpdate
Jiangmin	16.0.100	Trojan/NSIS.ahj
K7 AntiVirus	9.202.15413	Unwanted-Program ( 004afadd1 )
K7GW	9.202.15412	Unwanted-Program ( 004afadd1 )
Kaspersky	15.0.1.10	Trojan.NSIS.GoogUpdate.dq
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!0D25F2C08E42
MicroWorld-eScan	12.0.250.0	Gen:Application.Heur.6v1@mqIxPymO
NANO AntiVirus	0.30.8.659	Trojan.Win32.GoogUpdate.diimaw
nProtect	2015-03-27.01	Trojan/W32.Agent.2004384
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/QVM10.1.Malware.Gen
Sophos	4.98.0	Generic PUA KD
Symantec	20141.2.0.56	PUA.Gen.2
Tencent	1.0.0.1	Trojan.Win32.Qudamah.Gen.6
Trend Micro	9.740.0.1012	TROJ_SPNR.11KE14
TrendMicro-HouseCall	9.700.0.1001	TROJ_SPNR.11KE14
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	38850	Crossrider (fs)
Zillya	2.0.0.2119	Trojan.GoogUpdate.Win32.4283
40200661-46a6-4128-94a6-81857b3bf73c-3.exe (c9c73fb436f1b10c891f728ebd0ac941) has been flagged by the following 40 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Application.Heur.9v1@m0RLbBfO
AhnLab-V3	2015.03.07.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate.dx
avast!	8.0.1489.320	Win32:Crossrider-AP [PUP]
AVG	15.0.0.4299	Generic.C04
Avira	7.11.214.140	ADWARE/CrossRider.Gen7
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	Adware.Win32.CrossAd.BAD
Bitdefender	7.2	Gen:Application.Heur.9v1@m0RLbBfO
Bkav FE	1.3.0.6379	W32.HfsAdware.9760
CAT-QuickHeal	14.00	PUA.BrightCircle.OD6
Clam AntiVirus	0.98.5.0	Win.Adware.Agent-30404
Comodo Security	21319	Application.Win32.Plush.GRI
Cyren	5.4.16.7	W32/A-6583813c!Eldorado
Dr.Web	7.0.11.1300	Trojan.Crossrider.38760
ESET-NOD32	11282	a variant of Win32/Toolbar.CrossRider.AX potentially unwanted
Fortinet FortiGate	5.0.999.0	W32/GoogUpdate.AX!tr
F-Prot	4.7.1.166	W32/A-6583813c!Eldorado
F-Secure	11.0.19100.45	Gen:Application.Heur.9v1@m0RLbBfO
G Data	25	Gen:Application.Heur.9v1@m0RLbBfO
Jiangmin	16.0.100	AdWare/NSIS.cll
K7 AntiVirus	9.200.15187	Unwanted-Program ( 0040f9861 )
K7GW	9.200.15191	Unwanted-Program ( 0040f9861 )
Kaspersky	15.0.1.10	Trojan.NSIS.GoogUpdate.dx
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!C9C73FB436F1
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.PUP.th
MicroWorld-eScan	12.0.250.0	Gen:Application.Heur.9v1@m0RLbBfO
NANO AntiVirus	0.30.0.296	Riskware.Win32.Crossrider.diozdp
nProtect	2015-03-06.01	Trojan/W32.Agent.2055072
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/QVM10.1.Malware.Gen
Sophos	4.98.0	Generic PUA FK
Symantec	20141.2.0.56	Adware.Crossid
Tencent	1.0.0.1	Nsis.Trojan.Googupdate.Tbil
Trend Micro	9.740.0.1012	TROJ_GEN.F0C2C00L514
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F0C2C00L514
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	38190	Crossrider (fs)
Zillya	2.0.0.2090	Trojan.GoogUpdate.Win32.4397
a3637df0-2b42-4fd8-a53d-5b7bc71242cf-5.exe (9f04f541fcfdbcad9765f8f60f022d8f) has been flagged by the following 39 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Adware.Crossrider.BW
AhnLab-V3	2015.01.07.00	PUP/Win32.CrossRider
ALYac	1.0.1.4	Adware.Crossrider.BW
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate.dq
avast!	8.0.1489.320	Win32:Crossrider-AI [PUP]
AVG	15.0.0.4257	Generic.B92
Avira	7.11.199.202	ADWARE/CrossRider.Gen4
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.bAY
Bitdefender	7.2	Adware.Crossrider.BW
CAT-QuickHeal	14.00	Trojan.NSIS.g5
Clam AntiVirus	0.98.5.0	Win.Adware.Crossrider-102
Comodo Security	20623	ApplicUnwnt
Dr.Web	7.0.10.8210	Trojan.Crossrider.38947
Emsisoft Anti-Malware	3.0.0.600	Adware.Crossrider.BW (B)
ESET-NOD32	10973	a variant of Win32/Toolbar.CrossRider.AY
Fortinet FortiGate	5.0.999.0	W32/GoogUpdate.AY!tr
F-Secure	11.0.19100.45	Adware.Crossrider.BW
G Data	24	Adware.Crossrider.BW
IKARUS anti.virus	T3.1.8.5.0	Trojan.GoogUpdate
K7 AntiVirus	9.189.14554	Trojan ( 004af5591 )
K7GW	9.189.14555	Unwanted-Program ( 004afae01 )
Kaspersky	15.0.1.10	Trojan.NSIS.GoogUpdate.dq
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!9F04F541FCFD
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.BadFile.th
MicroWorld-eScan	12.0.250.0	Adware.Crossrider.BW
NANO AntiVirus	0.30.0.64448	Trojan.Win32.GoogUpdate.diudyy
nProtect	2015-01-05.01	Trojan/W32.Agent.1145248
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	Win32/Virus.Adware.de5
Sophos	4.98.0	Generic PUA GJ
Symantec	20141.1.0.330	Trojan.Gen.2
Tencent	1.0.0.1	Nsis.Trojan.Googupdate.Hufk
Trend Micro	9.740.0.1012	TROJ_GEN.R0C2C0EKC14
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C2C0EKC14
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	36442	Crossrider (fs)
Zillya	2.0.0.2027	Trojan.GoogUpdate.Win32.4346
a3637df0-2b42-4fd8-a53d-5b7bc71242cf-2.exe (352e67d56d59dd683916ae3272016872) has been flagged by the following 38 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Application.Heur.4u1@m0Fb4ZgO
AhnLab-V3	2015.01.09.00	Win-PUP/CrossRider
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate.dq
avast!	8.0.1489.320	Win32:Crossrider-AI [PUP]
AVG	15.0.0.4257	Generic.B92
Avira	7.11.200.58	ADWARE/CrossRider.Gen
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAY
Bitdefender	7.2	Gen:Application.Heur.4u1@m0Fb4ZgO
Comodo Security	20650	ApplicUnwnt
Dr.Web	7.0.10.8210	Trojan.Crossrider.37935
ESET-NOD32	10986	a variant of Win32/Toolbar.CrossRider.AY
Fortinet FortiGate	5.0.999.0	W32/GoogUpdate.AY!tr
F-Prot	4.7.1.166	W32/S-a64d6097!Eldorado
F-Secure	11.0.19100.45	Gen:Application.Heur.4u1@m0Fb4ZgO
G Data	24	Gen:Application.Heur.4u1@m0Fb4ZgO
Jiangmin	16.0.100	Trojan/NSIS.ahf
K7 AntiVirus	9.190.14587	Trojan ( 004af5591 )
K7GW	9.190.14581	Unwanted-Program ( 004afae01 )
Kaspersky	15.0.1.10	Trojan.NSIS.GoogUpdate.dq
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!352E67D56D59
McAfee-GW-Edition	v2014.2	Artemis
Microsoft Security Essentials	1.11302	BrowserModifier:Win32/IeEnablerCby
MicroWorld-eScan	12.0.250.0	Gen:Application.Heur.4u1@m0Fb4ZgO
NANO AntiVirus	0.30.0.64448	Trojan.Win32.GoogUpdate.diebbo
nProtect	2015-01-08.01	Trojan/W32.Agent.927136.C
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	Win32/Virus.Adware.de5
Rising Antivirus	25.0.0.17	PE:Malware.Obscure!1.9C59
Sophos	4.98.0	Generic PUA NA
Symantec	20141.1.0.330	Trojan.Gen
Tencent	1.0.0.1	Nsis.Trojan.Googupdate.Lhni
Trend Micro	9.740.0.1012	TROJ_GEN.R0C2C0EKL14
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C2C0EKL14
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	36496	Crossrider (fs)
Zillya	2.0.0.2029	Trojan.GoogUpdate.Win32.4287
a3637df0-2b42-4fd8-a53d-5b7bc71242cf-7.exe (75529ab7684342bfd85b2ff8797d3310) has been flagged by the following 38 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Adware.Crossrider.BW
AhnLab-V3	2015.01.07.00	Win-PUP/CrossRider
ALYac	1.0.1.4	Adware.Crossrider.BW
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate.dq
avast!	8.0.1489.320	Win32:Crossrider-AI [PUP]
AVG	15.0.0.4257	Generic.B92
Avira	7.11.199.202	ADWARE/CrossRider.Gen
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.bAY
Bitdefender	7.2	Adware.Crossrider.BW
Dr.Web	7.0.10.8210	Trojan.Crossrider.38233
Emsisoft Anti-Malware	3.0.0.600	Adware.Crossrider.BW (B)
ESET-NOD32	10973	a variant of Win32/Toolbar.CrossRider.AY
Fortinet FortiGate	5.0.999.0	W32/GoogUpdate.AY!tr
F-Prot	4.7.1.166	W32/A-6583813c!Eldorado
F-Secure	11.0.19100.45	Adware.Crossrider.BW
G Data	24	Adware.Crossrider.BW
IKARUS anti.virus	T3.1.8.5.0	Trojan.GoogUpdate
K7 AntiVirus	9.189.14554	Trojan ( 004af5591 )
K7GW	9.189.14555	Unwanted-Program ( 004afae01 )
Kaspersky	15.0.1.10	Trojan.NSIS.GoogUpdate.dq
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!75529AB76843
McAfee-GW-Edition	v2014.2	Artemis!PUP
MicroWorld-eScan	12.0.250.0	Adware.Crossrider.BW
NANO AntiVirus	0.30.0.64448	Trojan.Win32.GoogUpdate.dieemr
nProtect	2015-01-05.01	Adware.Crossrider.BW
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/QVM10.1.Malware.Gen
Rising Antivirus	25.0.0.17	PE:Trojan.Win32.Generic.17B2A4B4!397583540
Sophos	4.98.0	Generic PUA BN
Symantec	20141.1.0.330	PUA.Gen.2
Tencent	1.0.0.1	Nsis.Trojan.Googupdate.Agkw
Trend Micro	9.740.0.1012	TROJ_GEN.R0C2C0EKL14
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C2C0EKL14
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	36442	Crossrider (fs)
Zillya	2.0.0.2027	Trojan.GoogUpdate.Win32.4288
5a9e7920-ff6e-4211-a349-fadeef3a938a-11.exe (fa6941644214588490abd1018b7dd826) has been flagged by the following 38 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Variant.Adware.Plush.1
AhnLab-V3	2014.11.14.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	GrayWare[AdWare:not-a-virus]/NSIS.Adwapper.ai
avast!	8.0.1489.320	Win32:Crossrider-AP [PUP]
AVG	15.0.0.4189	Generic.D77
Avira	7.11.185.104	Adware/CrossRider.pq
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.bAV
Bitdefender	7.2	Gen:Variant.Adware.Plush.1
CAT-QuickHeal	14.00	AdWare.NSIS.g5 (Not a Virus)
Comodo Security	20073	ApplicUnwnt
Dr.Web	7.0.10.8210	Trojan.Crossrider.31044
Emsisoft Anti-Malware	3.0.0.600	Gen:Variant.Adware.Plush.1 (B)
ESET-NOD32	10722	a variant of Win32/Toolbar.CrossRider.AV
Fortinet FortiGate	5.0.999.0	Riskware/CrossRider
F-Prot	4.7.1.166	W32/A-409c48d6!Eldorado
F-Secure	11.0.19100.45	Gen:Variant.Adware.Plush.1
G Data	24	Gen:Variant.Adware.Plush.1
IKARUS anti.virus	T3.1.8.3.0	Trojan.GoogUpdate
K7 AntiVirus	9.185.14007	Unwanted-Program ( 004a9d0c1 )
K7GW	9.185.14007	Unwanted-Program ( 004a9d0c1 )
Kaspersky	12.0.0.1225	not-a-virus:AdWare.NSIS.Adwapper.ai
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!FA6941644214
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.Trojan.th
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Plush.1
NANO AntiVirus	0.28.6.63362	Trojan.Win32.GoogUpdate.degzil
nProtect	2014-11-13.01	Trojan-Clicker/W32.Agent.1890664
Panda Antivirus	4.6.4.1	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	Win32/Virus.Adware.970
Sophos	4.98.0	Generic PUA AB
Symantec	20141.1.0.330	Trojan.Gen.2
Tencent	1.0.0.1	Nsis.Adware.Adwapper.Eehd
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F0C2H00IA14
Vba32 AntiVirus	3.12.26.3	AdWare.Adwapper
VIPRE Antivirus	34772	Crossrider (fs)
Zillya	2.0.0.1982	Trojan.GoogUpdate.Win32.1736
a3637df0-2b42-4fd8-a53d-5b7bc71242cf-4.exe (99c46e8476b3e91c47dd88d98ebd1f35) has been flagged by the following 37 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Application.Heur.Cv1@mGwqofeO
AhnLab-V3	2015.01.07.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate.dq
avast!	8.0.1489.320	Win32:Crossrider-AP [PUP]
AVG	15.0.0.4257	Generic.B92
Avira	7.11.199.202	TR/Agent.1514912.7
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAX
Bitdefender	7.2	Gen:Application.Heur.Cv1@mGwqofeO
Comodo Security	20623	UnclassifiedMalware
Dr.Web	7.0.10.8210	Trojan.Crossrider.38049
ESET-NOD32	10973	a variant of Win32/Toolbar.CrossRider.AX
Fortinet FortiGate	5.0.999.0	W32/GoogUpdate.AX!tr
F-Prot	4.7.1.166	W32/A-6583813c!Eldorado
F-Secure	11.0.19100.45	Gen:Application.Heur.Cv1@mGwqofeO
G Data	24	Gen:Application.Heur.Cv1@mGwqofeO
IKARUS anti.virus	T3.1.8.5.0	Trojan.GoogUpdate
K7 AntiVirus	9.189.14554	Trojan ( 004af2de1 )
K7GW	9.189.14555	Unwanted-Program ( 004afadd1 )
Kaspersky	15.0.1.10	Trojan.NSIS.GoogUpdate.dq
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!99C46E8476B3
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.PUP.th
MicroWorld-eScan	12.0.250.0	Gen:Application.Heur.Cv1@mGwqofeO
NANO AntiVirus	0.30.0.64448	Trojan.Win32.GoogUpdate.difanw
nProtect	2015-01-05.01	Trojan/W32.Agent.1514912
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	Win32/Trojan.2c7
Rising Antivirus	25.0.0.17	PE:Trojan.Win32.Generic.17B51F1E!397745950
Sophos	4.98.0	Generic PUA GB
Symantec	20141.1.0.330	Trojan.Gen
Tencent	1.0.0.1	Win32.Adware.Bp-browser.Luqs
Trend Micro	9.740.0.1012	TROJ_GEN.R0C2C0EKE14
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C2C0EKE14
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	36442	Crossrider (fs)
Zillya	2.0.0.2027	Trojan.GoogUpdate.Win32.4270
324c77be-9986-49f8-b6f9-260f7ddad837-2.exe (d240d454b91e568e54c87bbc1c3d444a) has been flagged by the following 37 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Application.Heur.5u1@mOT3u8jO
AhnLab-V3	2015.01.12.02	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate.dq
avast!	8.0.1489.320	Win32:Crossrider-AI [PUP]
AVG	15.0.0.4257	Generic.B92
Avira	7.11.200.132	ADWARE/CrossRider.Gen
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.bAY
Bitdefender	7.2	Gen:Application.Heur.5u1@mOT3u8jO
Clam AntiVirus	0.98.5.0	Win.Trojan.Agent-832368
Dr.Web	7.0.10.8210	Trojan.Crossrider.38081
ESET-NOD32	10999	a variant of Win32/Toolbar.CrossRider.AY
Fortinet FortiGate	5.0.999.0	Riskware/CrossRider
F-Prot	4.7.1.166	W32/S-a64d6097!Eldorado
F-Secure	11.0.19100.45	Gen:Application.Heur.5u1@mOT3u8jO
G Data	24	Gen:Application.Heur.5u1@mOT3u8jO
Jiangmin	16.0.100	Trojan/NSIS.aph
K7 AntiVirus	9.190.14604	Unwanted-Program ( 004afae01 )
K7GW	9.190.14605	Unwanted-Program ( 004afae01 )
Kaspersky	15.0.1.10	Trojan.NSIS.GoogUpdate.dq
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!D240D454B91E
McAfee-GW-Edition	v2014.2	Artemis
Microsoft Security Essentials	1.11302	BrowserModifier:Win32/IeEnablerCby
MicroWorld-eScan	12.0.250.0	Gen:Application.Heur.5u1@mOT3u8jO
NANO AntiVirus	0.30.0.64448	Trojan.Win32.GoogUpdate.diffsu
nProtect	2015-01-12.01	Trojan/W32.Agent.949664
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	Win32/Trojan.2c7
Rising Antivirus	25.0.0.17	PE:Malware.Obscure!1.9C59
Sophos	4.98.0	Generic PUA NF
Symantec	20141.1.0.330	WS.Reputation.1
Trend Micro	9.740.0.1012	TROJ_GEN.F0C2C00A915
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F0C2C00A915
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	36582	Crossrider (fs)
Zillya	2.0.0.2032	Trojan.GoogUpdate.Win32.4314
5a9e7920-ff6e-4211-a349-fadeef3a938a-5.exe (f7bbeeaa22c6f81096ece8380c69b9c1) has been flagged by the following 37 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Variant.Adware.Plush.2
AhnLab-V3	2014.11.01.00	Win-PUP/CrossRider
Antiy-AVL	1.0.0.1	GrayWare[AdWare:not-a-virus]/NSIS.Adwapper.ai
avast!	8.0.1489.320	Win32:Crossrider-AG [PUP]
AVG	15.0.0.4189	Generic.D77
Avira	7.11.182.158	Adware/CrossRider.pq
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.bAN
Bitdefender	7.2	Gen:Variant.Adware.Plush.2
CAT-QuickHeal	14.00	AdWare.NSIS.r5 (Not a Virus)
Comodo Security	19958	ApplicUnwnt
Dr.Web	7.0.10.8210	Trojan.Crossrider.31451
Emsisoft Anti-Malware	3.0.0.600	Gen:Variant.Adware.Plush.2 (B)
ESET-NOD32	10652	a variant of Win32/Toolbar.CrossRider.AV
Fortinet FortiGate	5.0.999.0	Adware/Adwapper
F-Prot	4.7.1.166	W32/S-9ad4719b!Eldorado
F-Secure	11.0.19100.45	Gen:Variant.Adware.Plush.2
G Data	24	Gen:Variant.Adware.Plush.2
K7 AntiVirus	9.185.13866	Unwanted-Program ( 004a9d091 )
K7GW	9.185.13866	Unwanted-Program ( 004a9d091 )
Kaspersky	12.0.0.1225	not-a-virus:AdWare.NSIS.Adwapper.ai
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!F7BBEEAA22C6
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.PUP.gh
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Plush.2
NANO AntiVirus	0.28.6.62995	Riskware.Win32.Crossrider.dehfed
nProtect	2014-10-31.01	Trojan-Clicker/W32.Agent.444264
Qihoo-360	1.0.0.1015	HEUR/Malware.QVM10.Gen
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
Sophos	4.98.0	AppRider
Symantec	20141.1.0.330	Trojan.Gen.2
Tencent	1.0.0.1	Nsis.Adware.Adwapper.Efax
Trend Micro	9.740.0.1012	TROJ_GEN.R047C0EJB14
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R047C0EJB14
VIPRE Antivirus	34414	Crossrider (fs)
Zillya	2.0.0.1973	Adware.CrossRider.Win32.86
324c77be-9986-49f8-b6f9-260f7ddad837-11.exe (5414b8c5c0d3776bb9d43456008f86d6) has been flagged by the following 36 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Application.Heur.9v1@mWvnPAoO
AhnLab-V3	2015.01.23.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate.dq
avast!	8.0.1489.320	Win32:Crossrider-AP [PUP]
AVG	15.0.0.4257	Generic.B92
Avira	7.11.204.114	ADWARE/CrossRider.Gen7
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.bAX
Bitdefender	7.2	Gen:Application.Heur.9v1@mWvnPAoO
Clam AntiVirus	0.98.5.0	Win.Adware.Plush-66
Comodo Security	20805	Application.Win32.Plush.GRI
Dr.Web	7.0.10.8210	Trojan.Crossrider.38040
ESET-NOD32	11057	a variant of Win32/Toolbar.CrossRider.AX
Fortinet FortiGate	5.0.999.0	W32/GoogUpdate.AX!tr
F-Prot	4.7.1.166	W32/A-6583813c!Eldorado
F-Secure	11.0.19100.45	Gen:Application.Heur.9v1@mWvnPAoO
G Data	24	Gen:Application.Heur.9v1@mWvnPAoO
IKARUS anti.virus	T3.1.8.6.0	AdWare.Adwapper
Jiangmin	16.0.100	Trojan/NSIS.apm
K7 AntiVirus	9.191.14726	Unwanted-Program ( 004afadd1 )
Kaspersky	15.0.1.10	Trojan.NSIS.GoogUpdate.dq
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!5414B8C5C0D3
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.PUP.th
MicroWorld-eScan	12.0.250.0	Gen:Application.Heur.9v1@mWvnPAoO
NANO AntiVirus	0.30.0.64812	Trojan.Win32.GoogUpdate.dieert
nProtect	2015-01-22.01	Trojan/W32.Agent.2052512
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/QVM10.1.Malware.Gen
Sophos	4.98.0	Generic PUA GM
Symantec	20141.2.0.56	Adware.Crossid
Tencent	1.0.0.1	Nsis.Trojan.Googupdate.Ssqm
Trend Micro	9.740.0.1012	TROJ_GEN.R002C0OLE14
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R002C0OLE14
VIPRE Antivirus	36884	Crossrider (fs)
Zillya	2.0.0.2042	Trojan.GoogUpdate.Win32.4316
a3637df0-2b42-4fd8-a53d-5b7bc71242cf-6.exe (f9e97a7416e69276758f161dfaec388e) has been flagged by the following 36 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Application.Heur.pz1@miiMGdji
AhnLab-V3	2015.01.07.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate.dq
avast!	8.0.1489.320	Win32:Crossrider-AI [PUP]
AVG	15.0.0.4257	Generic.B92
Avira	7.11.199.202	ADWARE/CrossRider.Gen7
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAY
Bitdefender	7.2	Gen:Application.Heur.pz1@miiMGdji
CAT-QuickHeal	14.00	Trojan.NSIS.g6
Comodo Security	20623	ApplicUnwnt
Dr.Web	7.0.10.8210	Trojan.Crossrider.38760
ESET-NOD32	10973	a variant of Win32/Toolbar.CrossRider.AY
Fortinet FortiGate	5.0.999.0	W32/GoogUpdate.AY!tr
F-Prot	4.7.1.166	W32/A-865d81b8!Eldorado
F-Secure	11.0.19100.45	Gen:Application.Heur.pz1@miiMGdji
G Data	24	Gen:Application.Heur.pz1@miiMGdji
K7 AntiVirus	9.189.14554	Trojan ( 004af5591 )
K7GW	9.189.14555	Unwanted-Program ( 004afae01 )
Kaspersky	15.0.1.10	Trojan.NSIS.GoogUpdate.dq
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!F9E97A7416E6
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.PUP.th
MicroWorld-eScan	12.0.250.0	Gen:Application.Heur.pz1@miiMGdji
NANO AntiVirus	0.30.0.64448	Trojan.Win32.GoogUpdate.dinxrt
nProtect	2015-01-05.01	Trojan/W32.Agent.1297312
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/QVM10.1.Malware.Gen
Sophos	4.98.0	Generic PUA AO
Symantec	20141.1.0.330	Trojan.Gen.2
Tencent	1.0.0.1	Nsis.Trojan.Googupdate.Egyb
Trend Micro	9.740.0.1012	TROJ_GEN.R02KC0EL514
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R02KC0EL514
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	36442	Crossrider (fs)
Zillya	2.0.0.2027	Trojan.GoogUpdate.Win32.4873
Sm23mS-bho.dll (05cfdb2cf0e219194945a4200fb76f67) has been flagged by the following 35 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Application.Heur.Ky9@mGbk9Gmi
Agnitum Outpost	5.5.1.3	PUA.Toolbar.CrossRider!
AhnLab-V3	2015.04.18.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	GrayWare[WebToolbar:not-a-virus]/Win32.CrossRider.kyc
avast!	8.0.1489.320	Win32:Crossrider-CB [PUP]
AVG	15.0.0.4331	Generic.619
Avira	3.6.1.96	ADWARE/CrossRid.bqyp
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	Adware.Win32.CrossAd.BA
Bitdefender	7.2	Gen:Application.Heur.Ky9@mGbk9Gmi
Bkav FE	1.3.0.6379	W32.HfsAdware.52D8
CAT-QuickHeal	14.00	PUA.BrightCircle.OD6
Comodo Security	21802	ApplicUnwnt
Cyren	5.4.16.7	W32/S-c19140ac!Eldorado
Dr.Web	7.0.12.3050	Trojan.Crossrider1.23051
ESET-NOD32	11492	a variant of Win32/Toolbar.CrossRider.BA potentially unwanted
Fortinet FortiGate	5.0.999.0	Riskware/CrossRider
F-Prot	4.7.1.166	W32/S-c19140ac!Eldorado
F-Secure	11.0.19100.45	Gen:Application.Heur.Ky9@mGbk9Gmi
G Data	25	Gen:Application.Heur.Ky9@mGbk9Gmi
K7 AntiVirus	9.202.15636	Trojan ( 004af5321 )
K7GW	9.202.15636	Trojan ( 004af5321 )
Kaspersky	15.0.1.10	not-a-virus:WebToolbar.Win32.CrossRider.kyc
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!05CFDB2CF0E2
MicroWorld-eScan	12.0.250.0	Gen:Application.Heur.Ky9@mGbk9Gmi
NANO AntiVirus	0.30.16.1110	Trojan.Win32.Crossrider.dlwqqw
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	Win32/Application.0a4
Sophos	4.98.0	AppRider
Symantec	20141.2.0.56	Trojan.Gen
Trend Micro	9.740.0.1012	TROJ_GEN.F0C2C00AM15
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F0C2C00AM15
VIPRE Antivirus	39438	Crossrider (fs)
Zillya	2.0.0.2142	Adware.CrossRider.Win32.1489
2d9ebc4e-e4eb-43ae-bdbf-8981653183e8-4.exe (d8e63d0a40d68aade267a55448321b61) has been flagged by the following 35 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Variant.Adware.Graftor.155898
AhnLab-V3	2014.10.10.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	GrayWare[AdWare:not-a-virus]/NSIS.Adwapper
AVG	14.0.0.4040	Derzany.BD6
Avira	7.11.177.122	Adware/Plush.geru
AVware	1.5.0.16	Crossrider (fs)
Bitdefender	7.2	Gen:Variant.Adware.Graftor.155898
CAT-QuickHeal	14.00	Trojan.NSIS.g5
Clam AntiVirus	0.98.4.0	Win.Adware.Agent-12435
Dr.Web	7.0.10.8210	Trojan.Crossrider.32941
Emsisoft Anti-Malware	3.0.0.600	Gen:Variant.Adware.Graftor.155898 (B)
ESET-NOD32	10540	a variant of Win32/Toolbar.CrossRider.AV
Fortinet FortiGate	5.1.152.0	W32/GoogUpdate.AQ!tr
F-Prot	4.7.1.166	W32/A-9e906728!Eldorado
F-Secure	11.0.19100.45	Gen:Variant.Adware.Graftor.155898
G Data	24	Gen:Variant.Adware.Graftor.155898
IKARUS anti.virus	T3.1.7.8.0	Trojan.GoogUpdate
K7 AntiVirus	9.183.13630	Trojan ( 004a94a61 )
K7GW	9.183.13630	Trojan ( 004a94a61 )
Kaspersky	12.0.0.1225	Trojan.NSIS.GoogUpdate.da
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.NSIS.da.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!D8E63D0A40D6
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.BadFile.th
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Graftor.155898
NANO AntiVirus	0.28.2.62483	Riskware.Win32.Crossrider.deyvvo
Panda Antivirus	10.0.4.2	Trj/Chgt.F
Qihoo-360	1.0.0.1015	HEUR/Malware.QVM10.Gen
Sophos	4.98.0	Generic PUA FB
Symantec	20141.1.0.330	Trojan.Gen
Tencent	1.0.0.1	Nsis.Trojan.Googupdate.Wuqw
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F0C2H00IG14
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	33790	Crossrider (fs)
Zillya	2.0.0.1949	Trojan.GoogUpdate.Win32.2822
324c77be-9986-49f8-b6f9-260f7ddad837-7.exe (dc1b842eac0696983d5e192a0f9b21e9) has been flagged by the following 34 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Application.Heur.fv1@m4mADcoO
AhnLab-V3	2015.01.20.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate.dq
avast!	8.0.1489.320	Win32:Crossrider-AI [PUP]
AVG	15.0.0.4257	Generic.B92
Avira	7.11.203.36	ADWARE/CrossRider.Gen
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAY
Bitdefender	7.2	Gen:Application.Heur.fv1@m4mADcoO
Clam AntiVirus	0.98.5.0	Win.Trojan.Crossrider-100
Dr.Web	7.0.10.8210	Trojan.Crossrider.38028
ESET-NOD32	11040	a variant of Win32/Toolbar.CrossRider.AY
Fortinet FortiGate	5.0.999.0	Riskware/CrossRider
F-Prot	4.7.1.166	W32/A-6583813c!Eldorado
F-Secure	11.0.19100.45	Gen:Application.Heur.fv1@m4mADcoO
G Data	24	Gen:Application.Heur.fv1@m4mADcoO
Jiangmin	16.0.100	Trojan/NSIS.aov
K7 AntiVirus	9.191.14689	Unwanted-Program ( 004afae01 )
Kaspersky	15.0.1.10	Trojan.NSIS.GoogUpdate.dq
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!DC1B842EAC06
McAfee-GW-Edition	v2014.2	Artemis!PUP
MicroWorld-eScan	12.0.250.0	Gen:Application.Heur.fv1@m4mADcoO
NANO AntiVirus	0.30.0.64448	Trojan.Win32.GoogUpdate.dieela
nProtect	2015-01-19.01	Trojan/W32.Agent.1131424
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/QVM10.1.Malware.Gen
Sophos	4.98.0	Generic PUA JB
Symantec	20141.1.0.330	Trojan.Gen
Trend Micro	9.740.0.1012	TROJ_GEN.F0C2C00A915
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F0C2C00A915
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	36802	Crossrider (fs)
Zillya	2.0.0.2039	Trojan.GoogUpdate.Win32.4313
324c77be-9986-49f8-b6f9-260f7ddad837-4.exe (f17f88938c4cd333bf516d4a26c833a7) has been flagged by the following 33 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Application.Heur.Ev1@m0170KkO
AhnLab-V3	2015.01.23.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate.dq
avast!	8.0.1489.320	Win32:Crossrider-AP [PUP]
AVG	15.0.0.4257	Generic.B92
Avira	7.11.204.114	ADWARE/CrossRider.Gen4
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAX
Bitdefender	7.2	Gen:Application.Heur.Ev1@m0170KkO
Clam AntiVirus	0.98.5.0	Win.Adware.Agent-29668
Comodo Security	20805	ApplicUnwnt
Dr.Web	7.0.10.8210	Trojan.Crossrider.38038
ESET-NOD32	11057	a variant of Win32/Toolbar.CrossRider.AX
Fortinet FortiGate	5.0.999.0	W32/GoogUpdate.AX!tr
F-Prot	4.7.1.166	W32/A-6583813c!Eldorado
F-Secure	11.0.19100.45	Gen:Application.Heur.Ev1@m0170KkO
G Data	24	Gen:Application.Heur.Ev1@m0170KkO
Jiangmin	16.0.100	Trojan/NSIS.aol
K7 AntiVirus	9.191.14726	Unwanted-Program ( 004afadd1 )
Kaspersky	15.0.1.10	Trojan.NSIS.GoogUpdate.dq
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!F17F88938C4C
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.BadFile.th
MicroWorld-eScan	12.0.250.0	Gen:Application.Heur.Ev1@m0170KkO
NANO AntiVirus	0.30.0.64812	Trojan.Win32.GoogUpdate.diedps
nProtect	2015-01-22.01	Trojan/W32.Agent.1552288
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/QVM10.1.Malware.Gen
Sophos	4.98.0	Generic PUA BO
Symantec	20141.2.0.56	Trojan.Gen
Tencent	1.0.0.1	Nsis.Trojan.Googupdate.Ebgp
VIPRE Antivirus	36884	Crossrider (fs)
Zillya	2.0.0.2042	Trojan.GoogUpdate.Win32.4315
2d9ebc4e-e4eb-43ae-bdbf-8981653183e8-11.exe (7de3a833ff8551df32d7796e800ac927) has been flagged by the following 32 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Variant.Adware.Plush.1
AhnLab-V3	2014.10.10.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	GrayWare[AdWare:not-a-virus]/NSIS.Adwapper
AVG	14.0.0.4040	Derzany.BD6
Avira	7.11.177.122	Adware/Plush.1.92
AVware	1.5.0.16	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.bAQ
Bitdefender	7.2	Gen:Variant.Adware.Plush.1
CAT-QuickHeal	14.00	Trojan.NSIS.g5
Dr.Web	7.0.10.8210	Trojan.Crossrider.32779
Emsisoft Anti-Malware	3.0.0.600	Gen:Variant.Adware.Plush.1 (B)
ESET-NOD32	10540	a variant of Win32/Toolbar.CrossRider.AV
Fortinet FortiGate	5.1.152.0	W32/GoogUpdate.AQ!tr
F-Prot	4.7.1.166	W32/A-fe3c301b!Eldorado
F-Secure	11.0.19100.45	Gen:Variant.Adware.Plush.1
G Data	24	Gen:Variant.Adware.Plush.1
K7 AntiVirus	9.183.13630	Trojan ( 004a94a61 )
K7GW	9.183.13630	Trojan ( 004a94a61 )
Kaspersky	12.0.0.1225	Trojan.NSIS.GoogUpdate.da
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!7DE3A833FF85
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.Trojan.th
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Plush.1
NANO AntiVirus	0.28.2.62483	Riskware.Win32.Crossrider.deywiq
Panda Antivirus	10.0.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	Win32/Virus.Adware.a55
Sophos	4.98.0	Mal/Generic-S
Symantec	20141.1.0.330	WS.Reputation.1
Tencent	1.0.0.1	Nsis.Trojan.Googupdate.Amwh
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F0C2H00IP14
VIPRE Antivirus	33790	Crossrider (fs)
Zillya	2.0.0.1949	Adware.Adwapper.Win32.254
5a9e7920-ff6e-4211-a349-fadeef3a938a-4.exe (aa8a5a15adc53f153a25c99dd4637acb) has been flagged by the following 32 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	2014.11.14.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	GrayWare[AdWare:not-a-virus]/NSIS.Adwapper.ai
avast!	8.0.1489.320	Win32:Crossrider-AP [PUP]
AVG	15.0.0.4189	Generic.D77
Avira	7.11.185.104	Adware/CrossRider.pq
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.bAV
CAT-QuickHeal	14.00	AdWare.NSIS.g5 (Not a Virus)
Comodo Security	20073	ApplicUnwnt
Dr.Web	7.0.10.8210	Trojan.Crossrider.31451
ESET-NOD32	10722	a variant of Win32/Toolbar.CrossRider.AV
Fortinet FortiGate	5.0.999.0	Adware/Adwapper
F-Prot	4.7.1.166	W32/A-222a040e!Eldorado
G Data	24	Win32.Adware.Crossrider.M
K7 AntiVirus	9.185.14007	Trojan ( 0049ee4a1 )
K7GW	9.185.14007	Trojan ( 0049ee4a1 )
Kaspersky	12.0.0.1225	not-a-virus:AdWare.NSIS.Adwapper.ai
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!AA8A5A15ADC5
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.PUP.th
NANO AntiVirus	0.28.6.63362	Trojan.Win32.GoogUpdate.degzjf
nProtect	2014-11-13.01	Trojan-Clicker/W32.Agent.1408360
Panda Antivirus	4.6.4.1	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	Win32/Virus.Adware.970
Sophos	4.98.0	Generic PUA LE
Symantec	20141.1.0.330	Trojan.Gen.2
Tencent	1.0.0.1	Nsis.Adware.Adwapper.Lohu
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F0C2H00IA14
Vba32 AntiVirus	3.12.26.3	AdWare.Adwapper
VIPRE Antivirus	34772	Crossrider (fs)
Zillya	2.0.0.1982	Trojan.GoogUpdate.Win32.1664
5a9e7920-ff6e-4211-a349-fadeef3a938a-2.exe (c30dc55573f93c987c0768df9b922971) has been flagged by the following 32 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	2014.11.01.00	Win-PUP/CrossRider
Antiy-AVL	1.0.0.1	GrayWare[AdWare:not-a-virus]/NSIS.Adwapper.ai
avast!	8.0.1489.320	Win32:Crossrider-AG [PUP]
AVG	15.0.0.4189	Generic.D77
Avira	7.11.182.158	Adware/CrossRider.pq
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAJ
CAT-QuickHeal	14.00	AdWare.NSIS.r5 (Not a Virus)
Comodo Security	19958	ApplicUnwnt
Dr.Web	7.0.10.8210	Trojan.Crossrider.31053
ESET-NOD32	10652	a variant of Win32/Toolbar.CrossRider.AV
Fortinet FortiGate	5.0.999.0	Adware/Adwapper
F-Prot	4.7.1.166	W32/S-9ad4719b!Eldorado
G Data	24	Win32.Adware.Crossrider.L
K7 AntiVirus	9.185.13866	Trojan ( 0049ee4f1 )
K7GW	9.185.13866	Trojan ( 0049ee4f1 )
Kaspersky	12.0.0.1225	not-a-virus:AdWare.NSIS.Adwapper.ai
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!C30DC55573F9
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.PUP.fh
NANO AntiVirus	0.28.6.62995	Trojan.Win32.Crossrider.deimqf
nProtect	2014-10-31.01	Trojan-Clicker/W32.Agent.342888
Qihoo-360	1.0.0.1015	HEUR/Malware.QVM10.Gen
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
Sophos	4.98.0	Generic PUA PE
Symantec	20141.1.0.330	Adware.Crossid!gen1
Tencent	1.0.0.1	Nsis.Adware.Adwapper.Sunl
Trend Micro	9.740.0.1012	TROJ_GEN.R047C0EJB14
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R047C0EJB14
Vba32 AntiVirus	3.12.26.3	AdWare.Adwapper
VIPRE Antivirus	34414	Crossrider (fs)
324c77be-9986-49f8-b6f9-260f7ddad837-6.exe (7049e3a4fae6cc0308cf6a8c8f08f1e0) has been flagged by the following 31 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Application.Heur.rz1@miBK@6ei
AhnLab-V3	2015.02.01.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate.dq
avast!	8.0.1489.320	Win32:Crossrider-AI [PUP]
AVG	15.0.0.4257	Generic.B92
Avira	7.11.206.68	ADWARE/CrossRider.Gen7
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAY
Bitdefender	7.2	Gen:Application.Heur.rz1@miBK@6ei
Dr.Web	7.0.10.8210	Trojan.Crossrider.38760
ESET-NOD32	11103	a variant of Win32/Toolbar.CrossRider.AY potentially unwanted
Fortinet FortiGate	5.0.999.0	W32/GoogUpdate.AY!tr
F-Prot	4.7.1.166	W32/Crossrider.C.gen!Eldorado
F-Secure	11.0.19100.45	Gen:Application.Heur.rz1@miBK@6ei
G Data	25	Gen:Application.Heur.rz1@miBK@6ei
Jiangmin	16.0.100	Trojan/NSIS.ccz
K7 AntiVirus	9.193.14818	Unwanted-Program ( 004afae01 )
K7GW	9.193.14804	Unwanted-Program ( 004afae01 )
Kaspersky	15.0.1.10	Trojan.NSIS.GoogUpdate.dq
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!7049E3A4FAE6
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.BadFile.th
MicroWorld-eScan	12.0.250.0	Gen:Application.Heur.rz1@miBK@6ei
NANO AntiVirus	0.30.0.65070	Trojan.Win32.GoogUpdate.diorfq
nProtect	2015-01-30.01	Trojan/W32.Agent.1330080
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Tencent	1.0.0.1	Nsis.Trojan.Googupdate.Aeeb
TrendMicro-HouseCall	9.700.0.1001	Suspicious_GEN.F47V0122
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	37138	Crossrider (fs)
Zillya	2.0.0.2050	Trojan.GoogUpdate.Win32.4311
5a9e7920-ff6e-4211-a349-fadeef3a938a-7.exe (fbcc70266b11ec6938af7ba50650d38f) has been flagged by the following 31 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	2014.11.08.00	Win-PUP/CrossRider
Antiy-AVL	1.0.0.1	GrayWare[AdWare:not-a-virus]/NSIS.Adwapper.ai
avast!	8.0.1489.320	Win32:Crossrider-AI [PUP]
AVG	15.0.0.4189	Generic.D77
Avira	7.11.183.182	Adware/CrossRider.pq
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAV
CAT-QuickHeal	14.00	AdWare.NSIS.r5 (Not a Virus)
Comodo Security	20022	ApplicUnwnt
Dr.Web	7.0.10.8210	Trojan.Crossrider.31451
ESET-NOD32	10689	a variant of Win32/Toolbar.CrossRider.AV
Fortinet FortiGate	5.0.999.0	Adware/Adwapper
F-Prot	4.7.1.166	W32/S-9ad4719b!Eldorado
G Data	24	Win32.Adware.Crossrider.M
K7 AntiVirus	9.185.13943	Unwanted-Program ( 004a9d071 )
K7GW	9.185.13943	Unwanted-Program ( 004a9d071 )
Kaspersky	12.0.0.1225	not-a-virus:AdWare.NSIS.Adwapper.ai
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!FBCC70266B11
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.PUP.hh
NANO AntiVirus	0.28.6.62995	Trojan.Win32.Crossrider.deimjc
nProtect	2014-11-06.01	Trojan-Clicker/W32.Agent.513896
Qihoo-360	1.0.0.1015	Win32/Virus.Adware.970
Sophos	4.98.0	AppRider
Symantec	20141.1.0.330	Trojan.Gen.2
Tencent	1.0.0.1	Nsis.Adware.Adwapper.Egye
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F0C2H00I614
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	34604	Crossrider (fs)
Zillya	2.0.0.1977	Trojan.GoogUpdate.Win32.1571
37a749cf-57d6-4455-9cf3-5448843925d0-6.exe (a37d04ea59c63491525aef73776de47c) has been flagged by the following 28 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Variant.Adware.Kazy.133003
AhnLab-V3	2015.01.21.02	PUP/Win32.CrossRider
ALYac	1.0.1.4	Gen:Variant.Adware.Kazy.133003
Antiy-AVL	1.0.0.1	GrayWare[WebToolbar:not-a-virus]/Win32.CrossRider.kyc
AVG	15.0.0.4257	Generic.619
Avira	7.11.203.204	Adware/CrossRid.bqyp
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	Adware.Win32.CrossAd.BM
Bitdefender	7.2	Gen:Variant.Adware.Kazy.133003
Dr.Web	7.0.10.8210	Trojan.Crossrider.58845
Emsisoft Anti-Malware	3.0.0.600	Gen:Variant.Adware.Kazy.133003 (B)
ESET-NOD32	11049	a variant of Win32/Toolbar.CrossRider.BM
Fortinet FortiGate	5.0.999.0	Riskware/CrossRider
F-Secure	11.0.19100.45	Gen:Variant.Adware.Kazy.133003
G Data	24	Gen:Variant.Adware.Kazy.133003
K7 AntiVirus	9.191.14703	Unwanted-Program ( 0040f9e41 )
Kaspersky	15.0.1.10	not-a-virus:WebToolbar.Win32.CrossRider.kyc
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!A37D04EA59C6
McAfee-GW-Edition	v2014.2	Artemis!PUP
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Kazy.133003
NANO AntiVirus	0.30.0.64812	Trojan.Win32.Crossrider.dlwvbt
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/QVM10.1.Malware.Gen
Sophos	4.98.0	AppRider
Symantec	20141.2.0.56	Trojan.Gen
VIPRE Antivirus	36842	Crossrider (fs)
Zillya	2.0.0.2041	Adware.CrossRider.Win32.1447
2d9ebc4e-e4eb-43ae-bdbf-8981653183e8-5.exe (c9cff02fb18aa7ebb50328d2f66ad302) has been flagged by the following 27 scanners:
Anti-Virus software	Software version	Detection
Antiy-AVL	1.0.0.1	GrayWare[AdWare:not-a-virus]/NSIS.Adwapper
AVG	14.0.0.4040	Derzany.BD6
Avira	7.11.177.122	Adware/Plush.geru
AVware	1.5.0.16	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAR
CAT-QuickHeal	14.00	Trojan.NSIS.r5
Comodo Security	19753	ApplicUnwnt
ESET-NOD32	10540	a variant of Win32/Toolbar.CrossRider.AV
Fortinet FortiGate	5.1.152.0	W32/GoogUpdate.AR!tr
G Data	24	Win32.Adware.Crossrider.L
K7 AntiVirus	9.183.13630	Trojan ( 004a95081 )
K7GW	9.183.13630	Trojan ( 004a95081 )
Kaspersky	12.0.0.1225	Trojan.NSIS.GoogUpdate.da
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!C9CFF02FB18A
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.PUP.dh
NANO AntiVirus	0.28.2.62483	Riskware.Win32.Crossrider.dfabtl
Qihoo-360	1.0.0.1015	Win32/Trojan.933
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
Sophos	4.98.0	Generic PUA MF
Symantec	20141.1.0.330	Trojan.Gen.2
Tencent	1.0.0.1	Nsis.Trojan.Googupdate.Tbit
Trend Micro	9.740.0.1012	TROJ_GEN.R0C1C0EJ814
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C1C0EJ814
Vba32 AntiVirus	3.12.26.3	AdWare.Adwapper
VIPRE Antivirus	33790	Crossrider (fs)
Zillya	2.0.0.1949	Adware.Adwapper.Win32.191
2d9ebc4e-e4eb-43ae-bdbf-8981653183e8-2.exe (2f5683abcc9b144f981077059665b1eb) has been flagged by the following 26 scanners:
Anti-Virus software	Software version	Detection
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate
AVG	14.0.0.4040	Derzany.BD6
Avira	7.11.177.122	Adware/Plush.geru
AVware	1.5.0.16	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.bAR
CAT-QuickHeal	14.00	Trojan.NSIS.r5
Comodo Security	19753	ApplicUnwnt
ESET-NOD32	10540	a variant of Win32/Toolbar.CrossRider.AV
Fortinet FortiGate	5.1.152.0	W32/GoogUpdate.AR!tr
G Data	24	Win32.Adware.Crossrider.L
K7 AntiVirus	9.183.13630	Trojan ( 004a95081 )
K7GW	9.183.13630	Trojan ( 004a95081 )
Kaspersky	12.0.0.1225	Trojan.NSIS.GoogUpdate.da
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!2F5683ABCC9B
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.PUP.dh
NANO AntiVirus	0.28.2.62483	Riskware.Win32.Crossrider.dfabfv
Panda Antivirus	10.0.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/QVM10.1.Malware.Gen
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
Sophos	4.98.0	Generic PUA KK
Symantec	20141.1.0.330	Trojan.Gen.2
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.F0C2H00IP14
Vba32 AntiVirus	3.12.26.3	AdWare.Adwapper
VIPRE Antivirus	33790	Crossrider (fs)
Zillya	2.0.0.1949	Adware.Adwapper.Win32.227
324c77be-9986-49f8-b6f9-260f7ddad837-5.exe (9b1236d7cb6f7fde42597cf546a42229) has been flagged by the following 25 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Application.Heur.hv1@mGz0UZfO
AhnLab-V3	2015.01.23.00	PUP/Win32.CrossRider
Antiy-AVL	1.0.0.1	Trojan/NSIS.GoogUpdate.dq
avast!	8.0.1489.320	Win32:Crossrider-AI [PUP]
AVG	15.0.0.4257	Generic.B92
Avira	7.11.204.114	ADWARE/CrossRider.Gen4
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	Adware.Win32.CrossAd.AY
Bitdefender	7.2	Gen:Application.Heur.hv1@mGz0UZfO
Dr.Web	7.0.10.8210	Trojan.Crossrider.38761
ESET-NOD32	11057	a variant of Win32/Toolbar.CrossRider.AY
F-Prot	4.7.1.166	W32/Crossrider.C.gen!Eldorado
F-Secure	11.0.19100.45	Gen:Application.Heur.hv1@mGz0UZfO
G Data	24	Gen:Application.Heur.hv1@mGz0UZfO
Jiangmin	16.0.100	Trojan/NSIS.anu
K7 AntiVirus	9.191.14726	Unwanted-Program ( 004afae01 )
Kaspersky	15.0.1.10	Trojan.NSIS.GoogUpdate.dq
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
MicroWorld-eScan	12.0.250.0	Gen:Application.Heur.hv1@mGz0UZfO
NANO AntiVirus	0.30.0.64812	Trojan.Win32.GoogUpdate.dipopk
Panda Antivirus	4.6.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	Win32/Application.a19
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	36884	Crossrider (fs)
Zillya	2.0.0.2042	Trojan.GoogUpdate.Win32.4794
249b7154-dd40-410a-a035-cf5ea90654a7-11.exe (025993179c74e1ccb538bee971ff1281) has been flagged by the following 22 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Variant.Adware.Plush.1
AhnLab-V3	2014.09.25.00	PUP/Win32.CrossRider
AVG	14.0.0.4025	Berta.0DE
Avira	7.11.174.118	Adware/CrossRider.gr
AVware	1.5.0.16	Crossrider (fs)
Baidu-International	3.5.1.41473	Adware.Win32.CrossAd.BAD
Bitdefender	7.2	Gen:Variant.Adware.Plush.1
Clam AntiVirus	0.98.4.0	Win.Adware.Agent-12767
Dr.Web	7.0.10.8210	Trojan.Crossrider.33420
Emsisoft Anti-Malware	3.0.0.600	Gen:Variant.Adware.Plush.1 (B)
F-Secure	11.0.19100.45	Gen:Variant.Adware.Plush.1
G Data	24	Gen:Variant.Adware.Plush.1
IKARUS anti.virus	T3.1.7.8.0	Trojan.GoogUpdate
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.4.564	Artemis!025993179C74
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.BadFile.th
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Plush.1
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/Malware.QVM10.Gen
VIPRE Antivirus	33424	Crossrider (fs)
Zillya	2.0.0.1933	Trojan.GoogUpdate.Win32.3151
b741cee9-58d1-4a67-84a9-edb0059bc8be-7.exe (4abc576f8ba5f0e7943fdbd65d2aca00) has been flagged by the following 22 scanners:
Anti-Virus software	Software version	Detection
avast!	8.0.1489.320	Win32:Crossrider-AH [PUP]
AVG	14.0.0.4040	Derzany.BD6
Avira	7.11.181.44	Adware/Plush.geru
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAV
Dr.Web	7.0.10.8210	Trojan.Crossrider.31558
ESET-NOD32	10619	a variant of Win32/Toolbar.CrossRider.AV
G Data	24	Win32.Adware.Crossrider.N
K7 AntiVirus	9.185.13805	Unwanted-Program ( 004afadb1 )
K7GW	9.185.13802	Unwanted-Program ( 004afadb1 )
Kaspersky	12.0.0.1225	Trojan.NSIS.GoogUpdate.da
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.NSIS.da.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
NANO AntiVirus	0.28.2.62841	Riskware.Win32.Crossrider.deochu
Sophos	4.98.0	AppRider
Symantec	20141.1.0.330	Adware.Crossid
Tencent	1.0.0.1	Nsis.Trojan.Googupdate.Pfts
Trend Micro	9.740.0.1012	TROJ_GEN.R0C1C0OJL14
TrendMicro-HouseCall	9.700.0.1001	TROJ_GEN.R0C1C0OJL14
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	34232	Crossrider (fs)
Zillya	2.0.0.1966	Adware.Adwapper.Win32.425
527a0c99-6959-49e2-b875-a47b92c9fb15-11.exe (793c842a79e8963c8ee8e15a2c34fbad) has been flagged by the following 21 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Variant.Adware.Plush.1
AhnLab-V3	2014.10.16.00	PUP/Win32.CrossRider
AVG	14.0.0.4040	Berta.0DE
Avira	7.11.178.164	Adware/CrossRider.gr
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.bAV
Bitdefender	7.2	Gen:Variant.Adware.Plush.1
Clam AntiVirus	0.98.4.0	Win.Adware.Agent-14079
Dr.Web	7.0.10.8210	Trojan.Crossrider.33790
Emsisoft Anti-Malware	3.0.0.600	Gen:Variant.Adware.Plush.1 (B)
ESET-NOD32	10568	a variant of Win32/Toolbar.CrossRider.AV
F-Prot	4.7.1.166	W32/A-fe3c301b!Eldorado
F-Secure	11.0.19100.45	Gen:Variant.Adware.Plush.1
G Data	24	Gen:Variant.Adware.Plush.1
IKARUS anti.virus	T3.1.7.8.0	Trojan.GoogUpdate
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Plush.1
NANO AntiVirus	0.28.2.62671	Trojan.Win32.Crossrider.dfrnkt
Qihoo-360	1.0.0.1015	Win32/Virus.Adware.0f5
VIPRE Antivirus	33948	Crossrider (fs)
Zillya	2.0.0.1956	Adware.CrossRider.Win32.173
5a9e7920-ff6e-4211-a349-fadeef3a938a-6.exe (edbf5b82c8303a4156b6f7a5ef241d4e) has been flagged by the following 19 scanners:
Anti-Virus software	Software version	Detection
AVG	14.0.0.4025	Generic.D77
Avira	7.11.173.132	Adware/CrossRider.pq
AVware	1.5.0.16	Crossrider (fs)
Dr.Web	7.0.10.8210	Trojan.Crossrider.31452
ESET-NOD32	10444	a variant of Win32/Toolbar.CrossRider.AE
G Data	24	Win32.Adware.Crossrider.M
K7 AntiVirus	9.183.13432	Unwanted-Program ( 004a9d0d1 )
K7GW	9.183.13432	Unwanted-Program ( 004a9d0d1 )
Kaspersky	12.0.0.1225	not-a-virus:AdWare.NSIS.Adwapper.ai
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.Generic.a.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
NANO AntiVirus	0.28.2.62151	Trojan.Win32.GoogUpdate.dehagj
nProtect	2014-09-19.01	Trojan-Clicker/W32.Agent.599400
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Sophos	4.98.0	AppRider
Symantec	20141.1.0.330	Adware.Crossid
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	33284	Crossrider (fs)
Zillya	2.0.0.1927	Trojan.GoogUpdate.Win32.1663
b741cee9-58d1-4a67-84a9-edb0059bc8be-5.exe (76efbda920e824a9034a86db1672b6b6) has been flagged by the following 18 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Variant.Adware.Plush.2
Avira AntiVir	7.11.170.142	ADWARE/CrossRider.Gen2
avast!	8.0.1489.320	Win32:Adware-gen [Adw]
AVware	1.5.0.16	Crossrider (fs)
Bitdefender	7.2	Gen:Variant.Adware.Plush.2
Dr.Web	7.0.10.8210	Trojan.Crossrider.31557
Emsisoft Anti-Malware	3.0.0.600	Gen:Variant.Adware.Plush.2 (B)
ESET-NOD32	10354	a variant of Win32/Toolbar.CrossRider.AH
F-Secure	11.0.19100.45	Gen:Variant.Adware.Plush.2
G Data	24	Gen:Variant.Adware.Plush.2
IKARUS anti.virus	T3.1.7.5.0	not-a-virus:WebToolbar.CroRi
Kaspersky	12.0.0.1225	Trojan.NSIS.GoogUpdate.da
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.NSIS.da.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Plush.2
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
VIPRE Antivirus	32762	Crossrider (fs)
249b7154-dd40-410a-a035-cf5ea90654a7-7.exe (f5952bc356c85d06a572a80edfb62edc) has been flagged by the following 18 scanners:
Anti-Virus software	Software version	Detection
avast!	8.0.1489.320	Win32:Crossrider-AI [PUP]
AVG	14.0.0.4040	Berta.0DE
AVware	1.5.0.16	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAV
Clam AntiVirus	0.98.4.0	Win.Adware.Agent-12356
Dr.Web	7.0.10.8210	Trojan.Crossrider.33418
ESET-NOD32	10554	a variant of Win32/Toolbar.CrossRider.AV
Fortinet FortiGate	5.1.152.0	Riskware/CrossRider
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!F5952BC356C8
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.BadFile.th
nProtect	2014-10-12.01	Trojan/W32.Agent.1110936
Panda Antivirus	10.0.4.2	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/QVM10.1.Malware.Gen
Rising Antivirus	25.0.0.11	PE:Trojan.Win32.Generic.175A4EB9!391794361
Vba32 AntiVirus	3.12.26.3	AdWare.Adwapper
VIPRE Antivirus	33880	Crossrider (fs)
Zillya	2.0.0.1953	Trojan.GoogUpdate.Win32.3133
b741cee9-58d1-4a67-84a9-edb0059bc8be-6.exe (ff602de0bc06696865ef71a43f8116ab) has been flagged by the following 16 scanners:
Anti-Virus software	Software version	Detection
Avira	7.11.171.32	ADWARE/CrossRider.Gen2
AVware	1.5.0.16	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.bAE
Comodo Security	19447	ApplicUnwnt
ESET-NOD32	10380	a variant of Win32/Toolbar.CrossRider.AE
Fortinet FortiGate	5.1.152.0	Riskware/CrossRider
IKARUS anti.virus	T3.1.7.5.0	PUA.PlusHD
Kaspersky	12.0.0.1225	Trojan.NSIS.GoogUpdate.da
Kingsoft AntiVirus	2013.4.9.267	Win32.Troj.NSIS.da.(kcloud)
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.4.564	Artemis!FF602DE0BC06
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.BadFile.jh
NANO AntiVirus	0.28.2.61942	Riskware.Win32.Crossrider.dekzvj
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Symantec	20141.1.0.330	WS.Reputation.1
VIPRE Antivirus	32903	Crossrider (fs)
Sm23mS-bho64.dll (dcb1d6ffbfd070beeef866a14bfd0697) has been flagged by the following 15 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Adware.Crossrider.BI
AhnLab-V3	2014.11.10.00	PUP/Win32.CrossRider
AVG	15.0.0.4189	Berta.0DE
Avira	7.11.183.214	ADWARE/CrossRider.Gen
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win64.Crossrider.BJ
Bitdefender	7.2	Adware.Crossrider.BI
Emsisoft Anti-Malware	3.0.0.600	Adware.Crossrider.BI (B)
ESET-NOD32	10695	a variant of Win64/Toolbar.Crossrider.J
F-Secure	11.0.19100.45	Adware.Crossrider.BI
G Data	24	Adware.Crossrider.BI
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
MicroWorld-eScan	12.0.250.0	Adware.Crossrider.BI
nProtect	2014-11-06.01	Adware.Crossrider.BI
VIPRE Antivirus	34640	Crossrider (fs)
Sm23mS-codedownloader.exe (e186870dc7c77a56e05fd54706cd61f0) has been flagged by the following 15 scanners:
Anti-Virus software	Software version	Detection
AVG	14.0.0.4015	Derzany.BD6
AVware	1.5.0.16	Crossrider (fs)
Dr.Web	7.0.10.8210	Trojan.Crossrider.32916
ESET-NOD32	10417	a variant of Win32/Toolbar.CrossRider.AM
Fortinet FortiGate	5.1.152.0	W32/GoogUpdate.AM!tr
IKARUS anti.virus	T3.1.7.8.0	Trojan.GoogUpdate
Kaspersky	12.0.0.1225	Trojan.NSIS.GoogUpdate.da
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.4.564	Artemis!E186870DC7C7
McAfee-GW-Edition	v2014.2	Artemis
NANO AntiVirus	0.28.2.61942	Riskware.Win32.Crossrider.deyvab
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/Malware.QVM10.Gen
Sophos	4.98.0	Generic PUA CE
VIPRE Antivirus	33126	Crossrider (fs)
b741cee9-58d1-4a67-84a9-edb0059bc8be-11.exe (cd5a442944a8d68a69dfb97955198f24) has been flagged by the following 14 scanners:
Anti-Virus software	Software version	Detection
Lavasoft Ad-Aware	12.0.163.0	Gen:Variant.Adware.Plush.1
AhnLab-V3	2014.09.01.00	PUP/Win32.CrossRider
Avira AntiVir	7.11.170.50	ADWARE/CrossRider.Gen2
AVware	1.5.0.16	Crossrider (fs)
Bitdefender	7.2	Gen:Variant.Adware.Plush.1
Emsisoft Anti-Malware	3.0.0.600	Gen:Variant.Adware.Plush.1 (B)
ESET-NOD32	10344	a variant of Win32/Toolbar.CrossRider.AK
F-Secure	11.0.19100.45	Gen:Variant.Adware.Plush.1
G Data	24	Gen:Variant.Adware.Plush.1
IKARUS anti.virus	T3.1.7.5.0	AdWare.Adload
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
MicroWorld-eScan	12.0.250.0	Gen:Variant.Adware.Plush.1
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
VIPRE Antivirus	32712	Crossrider (fs)
361d4ab3-ece0-4a28-9b37-2880cecd21e8-4.exe (618a7a24edadc5f80bd51f1131d3fb4d) has been flagged by the following 12 scanners:
Anti-Virus software	Software version	Detection
AVG	14.0.0.4040	Generic.B92
Avira	7.11.181.132	ADWARE/CrossRider.Gen4
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAX
Dr.Web	7.0.10.8210	Trojan.Crossrider.36810
ESET-NOD32	10624	a variant of Win32/Toolbar.CrossRider.AX
F-Prot	4.7.1.166	W32/A-1a27c920!Eldorado
G Data	24	Win32.Adware.Crossrider.R
IKARUS anti.virus	T3.1.7.8.0	Trojan.GoogUpdate
Kaspersky	12.0.0.1225	not-a-virus:WebToolbar.Win32.CrossRider.dqu
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
Qihoo-360	1.0.0.1015	HEUR/QVM10.1.Malware.Gen
VIPRE Antivirus	34268	Crossrider (fs)
527a0c99-6959-49e2-b875-a47b92c9fb15-5.exe (b766f2237403c255b3c963d45f05b1c6) has been flagged by the following 12 scanners:
Anti-Virus software	Software version	Detection
AVG	14.0.0.4040	Berta.0DE
AVware	1.5.0.21	Crossrider (fs)
Clam AntiVirus	0.98.4.0	Win.Trojan.Googupdate-19
Dr.Web	7.0.10.8210	Trojan.Crossrider.35624
ESET-NOD32	10568	a variant of Win32/Toolbar.CrossRider.AV
G Data	24	Win32.Adware.Crossrider.L
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
NANO AntiVirus	0.28.2.62671	Trojan.Win32.Crossrider.dgnkon
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	33948	Crossrider (fs)
Zillya	2.0.0.1956	Trojan.GoogUpdate.Win32.3377
527a0c99-6959-49e2-b875-a47b92c9fb15-6.exe (d110a28e311da64db032e46ad9b44cac) has been flagged by the following 11 scanners:
Anti-Virus software	Software version	Detection
AVG	14.0.0.4040	Berta.0DE
Avira	7.11.178.164	ADWARE/CrossRider.Gen4
AVware	1.5.0.21	Crossrider (fs)
Baidu-International	3.5.1.41473	Adware.Win32.CrossAd.77
Clam AntiVirus	0.98.4.0	Win.Trojan.Googupdate-20
ESET-NOD32	10568	a variant of Win32/Toolbar.CrossRider.AV
G Data	24	Win32.Adware.Crossrider.R
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
Vba32 AntiVirus	3.12.26.3	Trojan.GoogUpdate
VIPRE Antivirus	33948	Crossrider (fs)
Zillya	2.0.0.1956	Trojan.GoogUpdate.Win32.3292
249b7154-dd40-410a-a035-cf5ea90654a7-2.exe (097521bbfcc13245238f4257de23a920) has been flagged by the following 10 scanners:
Anti-Virus software	Software version	Detection
AVG	14.0.0.4025	Berta.0DE
AVware	1.5.0.16	Crossrider (fs)
ESET-NOD32	10472	a variant of Win32/Toolbar.CrossRider.AV
G Data	24	Win32.Adware.Crossrider.L
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/Malware.QVM10.Gen
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
VIPRE Antivirus	33462	Crossrider (fs)
Zillya	2.0.0.1934	Trojan.GoogUpdate.Win32.3138
249b7154-dd40-410a-a035-cf5ea90654a7-6.exe (83d8598563a9b63718038c04085cfc15) has been flagged by the following 10 scanners:
Anti-Virus software	Software version	Detection
AVG	14.0.0.4037	Berta.0DE
AVware	1.5.0.16	Crossrider (fs)
ESET-NOD32	10508	a variant of Win32/Toolbar.CrossRider.AV
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
McAfee	6.0.5.614	Artemis!83D8598563A9
McAfee-GW-Edition	v2014.2	BehavesLike.Win32.BadFile.th
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Vba32 AntiVirus	3.12.26.3	AdWare.Adwapper
VIPRE Antivirus	33646	Crossrider (fs)
Zillya	2.0.0.1942	Trojan.GoogUpdate.Win32.3087
4e36f811-8543-4121-a99a-83d66e982f08-6.exe (851a58447246b013a655970e8e4fe8ba) has been flagged by the following 10 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	2014.08.04.00	PUP/Win32.Toolbar
Avira AntiVir	7.11.165.22	ADWARE/CrossRider.Gen2
AVG	14.0.0.3986	Generic.332
AVware	1.5.0.16	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.bAE
ESET-NOD32	10197	a variant of Win32/Toolbar.CrossRider.AE
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Sophos	4.98.0	AppRider
VIPRE Antivirus	31888	Crossrider (fs)
4e36f811-8543-4121-a99a-83d66e982f08-7.exe (97b05a95259ae351b105175d5b73fa74) has been flagged by the following 10 scanners:
Anti-Virus software	Software version	Detection
Avira AntiVir	7.11.165.22	ADWARE/CrossRider.Gen2
AVG	14.0.0.3986	Generic.332
AVware	1.5.0.16	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAG
ESET-NOD32	10197	a variant of Win32/Toolbar.CrossRider.AG
IKARUS anti.virus	T3.1.6.1.0	not-a-virus:WebToolbar.CrossRider
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Sophos	4.98.0	AppRider
VIPRE Antivirus	31888	Crossrider (fs)
4e36f811-8543-4121-a99a-83d66e982f08-2.exe (51c51a59ae2666bbe6e6c25053a93320) has been flagged by the following 9 scanners:
Anti-Virus software	Software version	Detection
AVG	14.0.0.3986	Generic.332
AVware	1.5.0.16	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAJ
ESET-NOD32	10197	a variant of Win32/Toolbar.CrossRider.AJ
IKARUS anti.virus	T3.1.6.1.0	not-a-virus:WebToolbar.CrossRider
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
Sophos	4.98.0	AppRider
VIPRE Antivirus	31888	Crossrider (fs)
4e36f811-8543-4121-a99a-83d66e982f08-5.exe (6fe3958421d504695de7ccd82b69e191) has been flagged by the following 9 scanners:
Anti-Virus software	Software version	Detection
avast!	8.0.1489.320	Win32:Adware-gen [Adw]
AVG	14.0.0.3986	Generic.332
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAH
ESET-NOD32	10197	a variant of Win32/Toolbar.CrossRider.AH
IKARUS anti.virus	T3.1.6.1.0	AdWare.Adload
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
Sophos	4.98.0	AppRider
VIPRE Antivirus	31888	Crossrider (fs)
249b7154-dd40-410a-a035-cf5ea90654a7-5.exe (b88a6b97fe351ffd1c7c3688f11eb158) has been flagged by the following 9 scanners:
Anti-Virus software	Software version	Detection
AVG	14.0.0.4025	Berta.0DE
AVware	1.5.0.16	Crossrider (fs)
ESET-NOD32	10472	a variant of Win32/Toolbar.CrossRider.AV
G Data	24	Win32.Adware.Crossrider.L
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/QVM10.1.Malware.Gen
Rising Antivirus	25.0.0.11	PE:Malware.Obscure!1.9C59
VIPRE Antivirus	33462	Crossrider (fs)
4e36f811-8543-4121-a99a-83d66e982f08-11.exe (d0a71bef62f2c262ad9dbe3b42e439a2) has been flagged by the following 9 scanners:
Anti-Virus software	Software version	Detection
avast!	8.0.1489.320	Win32:Adware-gen [Adw]
AVG	14.0.0.3986	Generic.332
AVware	1.5.0.16	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.bAK
ESET-NOD32	10197	a variant of Win32/Toolbar.CrossRider.AK
IKARUS anti.virus	T3.1.6.1.0	not-a-virus:WebToolbar.CrossRider
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
Sophos	4.98.0	AppRider
VIPRE Antivirus	31888	Crossrider (fs)
b741cee9-58d1-4a67-84a9-edb0059bc8be-4.exe (610f5eda643801af11b483060bbafb9c) has been flagged by the following 8 scanners:
Anti-Virus software	Software version	Detection
AhnLab-V3	2014.09.01.00	PUP/Win32.CrossRider
Avira AntiVir	7.11.170.50	ADWARE/CrossRider.Gen2
AVware	1.5.0.16	Crossrider (fs)
ESET-NOD32	10344	a variant of Win32/Toolbar.CrossRider.AK
IKARUS anti.virus	T3.1.7.5.0	AdWare.Adload
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
VIPRE Antivirus	32712	Crossrider (fs)
249b7154-dd40-410a-a035-cf5ea90654a7-4.exe (7b00d48011e02353f56ab68061e266e6) has been flagged by the following 8 scanners:
Anti-Virus software	Software version	Detection
AVG	14.0.0.4025	Berta.0DE
AVware	1.5.0.16	Crossrider (fs)
Dr.Web	7.0.10.8210	Trojan.Crossrider.33433
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
Panda Antivirus	10.0.3.5	Trj/Genetic.gen
Qihoo-360	1.0.0.1015	HEUR/Malware.QVM10.Gen
VIPRE Antivirus	33424	Crossrider (fs)
Zillya	2.0.0.1933	Trojan.GoogUpdate.Win32.3136
4e36f811-8543-4121-a99a-83d66e982f08-4.exe (87907bad3f7b342978edc972d7ba3ba8) has been flagged by the following 8 scanners:
Anti-Virus software	Software version	Detection
AVG	14.0.0.3986	Generic.332
AVware	1.5.0.16	Crossrider (fs)
Baidu-International	3.5.1.41473	PUA.Win32.CrossRider.BAK
ESET-NOD32	10197	a variant of Win32/Toolbar.CrossRider.AK
IKARUS anti.virus	T3.1.6.1.0	not-a-virus:WebToolbar.CrossRider
Malwarebytes	1.75.0.1	PUP.Optional.SmartSaver.A
Sophos	4.98.0	AppRider
VIPRE Antivirus	31888	Crossrider (fs)

View all 1142 all detections

Sm23mS has been found to be bundled with 3rd party software. If you have not purposefully installed this, you should be safe uninstalling it.

Program details

Displayed publisher: smart-saverplus

URL: crossrider.com/install/48914-smartsaver+-23

Installation folder: C:\Program Files\sm23ms

Uninstaller: C:\Program Files\Sm23mS\Uninstall.exe /fcp=1

Estimated size: 14.39 MB

Files installed by Sm23mS

Program executable:	utils.exe (Malware detected)
Name:	Sm23mS
	Gpqzfpwuzme
Path:	C:\Program Files\sm23ms\utils.exe
MD5:	9be2289c42c19b17ea989369c61d954c

Additional files:

07ed8306-3fb2-4211-924a-e63e8ae3fe30-11.exe (by smart-saverplus) - Sm23mS (Sm23mS exe)
07ed8306-3fb2-4211-924a-e63e8ae3fe30-2.exe (by smart-saverplus)
07ed8306-3fb2-4211-924a-e63e8ae3fe30-4.exe
07ed8306-3fb2-4211-924a-e63e8ae3fe30-5.exe
07ed8306-3fb2-4211-924a-e63e8ae3fe30-6.exe
07ed8306-3fb2-4211-924a-e63e8ae3fe30-7.exe
14159fb2-eece-4344-9f5a-d90c04f3ecfb-10.exe
1725246d-0f38-4ebc-a7d7-1c86dfae83fd-10.exe
1725246d-0f38-4ebc-a7d7-1c86dfae83fd-1-7.exe
1e7d084c-cdb5-4fe4-87f8-5232fe7c5410-11.exe
1e7d084c-cdb5-4fe4-87f8-5232fe7c5410-2.exe
1e7d084c-cdb5-4fe4-87f8-5232fe7c5410-4.exe
1e7d084c-cdb5-4fe4-87f8-5232fe7c5410-5.exe
1e7d084c-cdb5-4fe4-87f8-5232fe7c5410-6.exe
1e7d084c-cdb5-4fe4-87f8-5232fe7c5410-64.exe
1e7d084c-cdb5-4fe4-87f8-5232fe7c5410-7.exe
22d9623d-5bbc-407c-b26a-6bc480551bb8-11.exe
22d9623d-5bbc-407c-b26a-6bc480551bb8-2.exe
22d9623d-5bbc-407c-b26a-6bc480551bb8-4.exe
22d9623d-5bbc-407c-b26a-6bc480551bb8-5.exe
(Malware detected) 249b7154-dd40-410a-a035-cf5ea90654a7-11.exe
(Malware detected) 249b7154-dd40-410a-a035-cf5ea90654a7-2.exe
(Malware detected) 249b7154-dd40-410a-a035-cf5ea90654a7-4.exe
(Malware detected) 249b7154-dd40-410a-a035-cf5ea90654a7-5.exe
(Malware detected) 249b7154-dd40-410a-a035-cf5ea90654a7-6.exe
(Malware detected) 249b7154-dd40-410a-a035-cf5ea90654a7-7.exe
(Malware detected) 2d9ebc4e-e4eb-43ae-bdbf-8981653183e8-11.exe
(Malware detected) 2d9ebc4e-e4eb-43ae-bdbf-8981653183e8-2.exe
(Malware detected) 2d9ebc4e-e4eb-43ae-bdbf-8981653183e8-4.exe
(Malware detected) 2d9ebc4e-e4eb-43ae-bdbf-8981653183e8-5.exe
(Malware detected) 324c77be-9986-49f8-b6f9-260f7ddad837-11.exe
(Malware detected) 324c77be-9986-49f8-b6f9-260f7ddad837-2.exe
(Malware detected) 324c77be-9986-49f8-b6f9-260f7ddad837-4.exe
(Malware detected) 324c77be-9986-49f8-b6f9-260f7ddad837-5.exe
(Malware detected) 324c77be-9986-49f8-b6f9-260f7ddad837-6.exe
324c77be-9986-49f8-b6f9-260f7ddad837-64.exe
(Malware detected) 324c77be-9986-49f8-b6f9-260f7ddad837-7.exe
361d4ab3-ece0-4a28-9b37-2880cecd21e8-11.exe
361d4ab3-ece0-4a28-9b37-2880cecd21e8-2.exe
(Malware detected) 361d4ab3-ece0-4a28-9b37-2880cecd21e8-4.exe
361d4ab3-ece0-4a28-9b37-2880cecd21e8-5.exe
37a749cf-57d6-4455-9cf3-5448843925d0-2.exe
37a749cf-57d6-4455-9cf3-5448843925d0-5.exe
(Malware detected) 37a749cf-57d6-4455-9cf3-5448843925d0-6.exe
37a749cf-57d6-4455-9cf3-5448843925d0-64.exe
37a749cf-57d6-4455-9cf3-5448843925d0-7.exe
(Malware detected) 40200661-46a6-4128-94a6-81857b3bf73c-3.exe
4a40857e-1d0a-40c9-bb59-19b3218f3bfa-1-6.exe
4a40857e-1d0a-40c9-bb59-19b3218f3bfa-1-7.exe
4a40857e-1d0a-40c9-bb59-19b3218f3bfa-5.exe
(Malware detected) 4e36f811-8543-4121-a99a-83d66e982f08-11.exe
(Malware detected) 4e36f811-8543-4121-a99a-83d66e982f08-2.exe
(Malware detected) 4e36f811-8543-4121-a99a-83d66e982f08-4.exe
(Malware detected) 4e36f811-8543-4121-a99a-83d66e982f08-5.exe
(Malware detected) 4e36f811-8543-4121-a99a-83d66e982f08-6.exe
4e36f811-8543-4121-a99a-83d66e982f08-64.exe
(Malware detected) 4e36f811-8543-4121-a99a-83d66e982f08-7.exe
(Malware detected) 527a0c99-6959-49e2-b875-a47b92c9fb15-11.exe
(Malware detected) 527a0c99-6959-49e2-b875-a47b92c9fb15-5.exe
(Malware detected) 527a0c99-6959-49e2-b875-a47b92c9fb15-6.exe

Behaviors exhibited

2 Internet Explorer BHOs

Sm23mS-bho.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Sm23mS' with the class of {11111111-1111-1111-1111-110611381183} (2eeadf800f680132e32502b9fcef8d690063883).
Sm23mS-bho64.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'Sm23mS' with the class of {11111111-1111-1111-1111-110611381183} (2eeadf800f680132e32502b9fcef8d690063883).

92 Scheduled Tasks (Boot/Login)

e0895c50-b38e-4f5f-980e-c515788dbc7e-7.exe is automatically launched at startup through a scheduled task named e0895c50-b38e-4f5f-980e-c515788dbc7e-7.
e0895c50-b38e-4f5f-980e-c515788dbc7e-6.exe is automatically launched at startup through a scheduled task named e0895c50-b38e-4f5f-980e-c515788dbc7e-6.
e0895c50-b38e-4f5f-980e-c515788dbc7e-10.exe is automatically launched at startup through a scheduled task named e0895c50-b38e-4f5f-980e-c515788dbc7e-10_user.
9d37329e-ca9a-42c2-b7f4-aa3749cebe1f-5.exe is automatically launched at startup through a scheduled task named 9d37329e-ca9a-42c2-b7f4-aa3749cebe1f-5_user.
9d37329e-ca9a-42c2-b7f4-aa3749cebe1f-1-6.exe is automatically launched at startup through a scheduled task named 9d37329e-ca9a-42c2-b7f4-aa3749cebe1f-14.
9d37329e-ca9a-42c2-b7f4-aa3749cebe1f-1-7.exe is automatically launched at startup through a scheduled task named 9d37329e-ca9a-42c2-b7f4-aa3749cebe1f-13.

Plus 86 more

How do I remove Sm23mS?

You can uninstall Sm23mS from your computer by using the Add/Remove Program feature in the Window's Control Panel.

On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:

Windows Vista/7/8/10: Click Uninstall a Program.
Windows XP: Click Add or Remove Programs.

When you find the program Sm23mS, click it, and then do one of the following:

Windows Vista/7/8/10: Click Uninstall.
Windows XP: Click the Remove or Change/Remove tab (to the right of the program).

Follow the prompts. A progress bar shows you how long it will take to remove Sm23mS.
If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by Sm23mS you can restore them to their previous default settings.

Microsoft Internet Explorer

Mozilla Firefox

Google Chrome

OS VERSIONS

Win 7 (SP1) 55%

Win XP 5%

HOW IT STARTS

Scheduled task? Yes

(Runs on Windows boot)

USER ACTIONS

Uninstall it 88%

Keep it 12%

Windows

Which Windows OS versions does it run on?

Windows 7	64.29%
Windows 10	30.95%
Windows XP	4.76%
Which OS releases does it run on?
Windows 7 Home Premium	31.71%
Windows 8.1	19.51%
Windows 7 Ultimate	17.07%
Windows 7 Professional	7.32%
Windows 7 Home Basic	7.32%
Windows 8 Pro	4.88%

Geography

43.10% of installs come from the United States

Which countries install it?

United States	43.10%
Brazil	18.97%
France	8.62%
Germany	6.90%
Italy	6.90%
United Kingdom	5.17%
India	5.17%
Russia	3.45%
OM	1.72%

PC manufacturers

What PC manufacturers (OEMs) have it installed?

Hewlett-Packard	25.81%
Acer	22.58%
GIGABYTE	12.90%
ASUS	9.68%
Dell	6.45%
Lenovo	6.45%
Apple	3.23%
Sony	3.23%
Toshiba	3.23%
Medion	3.23%
Sahara	3.23%
Common models
Gigabyte G31M-ES2L	5.71%
Sony VPCEA42EG	2.86%
MSI MS-7850	2.86%
HP G56 Notebook PC	2.86%
Gigabyte P61-DS3-B3	2.86%
Dell Inspiron 5521	2.86%

Comments

No one has commented yet. Help others learn more about this software, share your comments.