84,488,480 programs installed

Should I remove free ven?

What percent of users and experts removed it?
78% remove it22% keep it
Overall Sentiment
Bad
What do people think about it?
(click star to rate)
How common is it?
Global Rank #27,114
United States Rank #41,596
Reach 0.0059%
Lifespan of installation (until removal)
< 7.72 days
227.75 days >
Average installed length: 119.66 days

Versions

VersionDistribution
1.34.3.17 42.74%
1.34.3.6 57.26%

free ven

What is free ven?

This adware program injects advertisements with its affiliate ad providers in order to serve a number of ad types including banner, inline text links and popups. These ads are aimed to promote the installation of additional questionable content including web browser toolbars, optimization utilities and other products, all so the publisher can generate pay-per-click revenue.

Once infected by this common symptoms include:
- Random web page text is turned into hyperlinks.
- Browser popups appear which recommend fake updates or other software.
- Ads with red click here button will pop up when those links are hovered on.
- Other unwanted adware programs might get installed without the user's knowledge.
- Web pages become extremely slow to download due to the multiple ads.

Overview

The most used version is 1.34.3.6, with over 98% of all installations currently using this version. During setup, the program registers itself to launch on boot through a Windows Schedule Task in order to automatically start-up (this is typically done to avoid any UAC prompts). It adds a Browser Helper Object (BHO) to Internet Explorer. A scheduled task is added to Windows Task Scheduler in order to launch the program at various scheduled times (the schedule varies depending on the version). The main program executable is utils.exe. Typically most users end up uninstalling this just after a few days. The software installer includes 16 files and is usually about 8.83 MB (9,255,861 bytes). free ven-updater.exe is the automatic update component of the software designed to download and apply new updates should new versions be released.

The program is built using the Crossrider framework, a cross browser monetization platform used to deploy a toolbar and extension for modern web browsers with monetization features including browser search and homepage redirection, contextual coupons and in-line text advertising. Crossrider extensions include background processes to monitor, update and automatically download new features/code without direct user interaction.
  • Possible malware installed by this program
  • Automatically starts with Windows
  • Loads into the web browser
  • Built on the Crossrider toolbar platform and potentially unwanted
  • May inject ads in the web browser
  • 'Offers' to modify the browser's home and search pages by default
  • Difficult to remove as it will reinstall itself
  • Injects advertisements unassociated with the underlying web page
  • The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in free ven.
utils.exe (0aaae6e9557f945dac5169e94c288a99) has been flagged by the following 5 scanners:
Anti-Virus softwareVersionDetection
AhnLab-V3 2014.03.13 PUP/Win32.Adware
Bkav FE 1.3.0.4959 HW32.CDB
Malwarebytes v2014.04.22.10 PUP.Optional.Freeven.A
Symantec 4/22/2014 rev. 3 WS.Reputation
TrendMicro-HouseCall 7.2.112 TROJ_GE.203227CA
free ven-enabler.exe (182a47bd936d680e3c4355ced20950a0) has been flagged by the following 22 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Trojan.GenericKD.1625657
avast! 8.0.1489.320 Win32:Adware-gen [Adw]
AVG 13.0.0.3169 Generic5.APPR
Baidu-International 3.5.1.41473 Adware.Win32.CrossAd.45
Bitdefender 7.2 Trojan.GenericKD.1625657
Emsisoft Anti-Malware 3.0.0.596 Trojan.GenericKD.1625657 (B)
F-Secure 11.0.19100.45 Trojan.GenericKD.1625657
G Data 24 Trojan.GenericKD.1625657
K7 AntiVirus 9.176.11663 Riskware ( 0040f01a1 )
K7GW 9.176.11663 Riskware ( 0040f01a1 )
Malwarebytes 1.75.0001 PUP.Optional.Freeven.A
McAfee 6.0.4.564 Artemis!182A47BD936D
McAfee-GW-Edition 2013 Artemis!182A47BD936D
Microsoft Security Essentials 1.10401 Adware:Win32/Feven
MicroWorld-eScan 12.0.250.0 Trojan.GenericKD.1625657
nProtect 2014-04-06.01 Trojan.GenericKD.1625657
Panda Antivirus 10.0.3.5 Adware/MediaEnhance
Sophos 4.98.0 Generic PUA AK
Symantec 20131.1.5.61 Adware.Crossid
Trend Micro 9.740-1012 TROJ_GEN.R047C0SCJ14
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.R047C0SCJ14
VIPRE Antivirus 28078 Crossrider (fs)
free ven-codedownloader.exe (32a44acbe3674109686f05bc367d21e5) has been flagged by the following 20 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Adware.Generic.908457
AVG 13.0.0.3169 Generic5.APNC
Baidu-International 3.5.1.41473 Adware.Win32.CrossAd.45
Bitdefender 7.2 Adware.Generic.908457
Emsisoft Anti-Malware 3.0.0.596 Adware.Generic.908457 (B)
ESET-NOD32 9613 a variant of Win32/Toolbar.CrossRider.X
Fortinet FortiGate 4 Riskware/Toolbar_CrossRider
F-Secure 11.0.19100.45 Adware.Generic.908457
G Data 24 Adware.Generic.908457
K7 AntiVirus 9.176.11595 Trojan ( 0049590e1 )
K7GW 9.176.11595 Trojan ( 0049590e1 )
Malwarebytes 1.75.0001 PUP.Optional.Freeven.A
McAfee 6.0.4.564 Artemis!32A44ACBE367
McAfee-GW-Edition 2013 Artemis!32A44ACBE367
Microsoft Security Essentials 1.10401 Adware:Win32/Feven
MicroWorld-eScan 12.0.250.0 Adware.Generic.908457
Sophos 4.98.0 Generic PUA OM
Symantec 20131.1.5.61 Adware.Crossid
Trend Micro 9.740-1012 TROJ_GEN.R0C1C0SCK14
VIPRE Antivirus 27860 Crossrider (fs)
free ven-updater.exe (af207b7963649845888ff494bd28c08c) has been flagged by the following 19 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Adware.Generic.908945
AVG 13.0.0.3169 Generic5.APPS
Baidu-International 3.5.1.41473 Adware.Win32.Feven.gen
Bitdefender 7.2 Adware.Generic.908945
Emsisoft Anti-Malware 3.0.0.596 Adware.Generic.908945 (B)
F-Secure 11.0.19100.45 Adware.Generic.908945
G Data 24 Adware.Generic.908945
K7 AntiVirus 9.176.11595 Riskware ( 0040f01a1 )
K7GW 9.176.11595 Riskware ( 0040f01a1 )
Malwarebytes 1.75.0001 PUP.Optional.Freeven.A
McAfee 6.0.4.564 Artemis!AF207B796364
McAfee-GW-Edition 2013 Artemis!AF207B796364
Microsoft Security Essentials 1.10401 Adware:Win32/Feven
MicroWorld-eScan 12.0.250.0 Adware.Generic.908945
Sophos 4.98.0 Generic PUA BB
Symantec 20131.1.5.61 Adware.Crossid
Trend Micro 9.740-1012 TROJ_GEN.R0C1C0SCM14
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.R0C1C0SCM14
VIPRE Antivirus 27856 Crossrider (fs)
free ven-bho.dll (b32b4a0b63ad671ea7062de5d4e63ff7) has been flagged by the following 17 scanners:
Anti-Virus softwareSoftware versionDetection
Lavasoft Ad-Aware 12.0.163.0 Trojan.Generic.11050974
AVG 13.0.0.3169 Generic5.APJQ
Baidu-International 3.5.1.41473 Adware.Win32.CrossAd.45
Bitdefender 7.2 Trojan.Generic.11050974
Emsisoft Anti-Malware 3.0.0.596 Trojan.Generic.11050974 (B)
F-Secure 11.0.19100.45 Trojan.Generic.11050974
G Data 24 Trojan.Generic.11050974
K7 AntiVirus 9.176.11595 Riskware ( 0040f01a1 )
K7GW 9.176.11595 Riskware ( 0040f01a1 )
Malwarebytes 1.75.0001 PUP.Optional.Freeven.A
McAfee 6.0.4.564 Artemis!B32B4A0B63AD
McAfee-GW-Edition 2013 Artemis!B32B4A0B63AD
Microsoft Security Essentials 1.10401 Adware:Win32/Feven
MicroWorld-eScan 12.0.250.0 Trojan.Generic.11050974
nProtect 2014-03-30.01 Trojan.Generic.11050974
Sophos 4.98.0 AppRider
VIPRE Antivirus 27856 Crossrider (fs)
free ven-chromeinstaller.exe (7c29c166207ce48b77e4e60ff1fd4605) has been flagged by the following 8 scanners:
Anti-Virus softwareSoftware versionDetection
AVG 13.0.0.3169 MultiBundle.X
Baidu-International 3.5.1.41473 Adware.Win32.Lyrics.71
Malwarebytes 1.75.0001 PUP.Optional.Freeven.A
McAfee 6.0.4.564 Artemis!7C29C166207C
McAfee-GW-Edition 2013 Artemis!7C29C166207C
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.F47V0316
VIPRE Antivirus 28474 Crossrider (fs)
ViRobot 2011.4.7.4223 Adware.Agent.2051584
free ven-firefoxinstaller.exe (0016a2fc1695fffc617c60cec09faca6) has been flagged by the following 6 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International 3.5.1.41473 Adware.Win32.CrossAd.45
Malwarebytes 1.75.0001 PUP.Optional.Freeven.A
Panda Antivirus 10.0.3.5 Adware/MediaEnhance
Symantec 20131.1.5.61 Adware.Crossid
TrendMicro-HouseCall 9.700-1001 TROJ_GEN.R047H05CJ14
VIPRE Antivirus 28442 Crossrider (fs)
free ven-bho64.dll (83c4fb4a760892b3af750e2ef0656a3b) has been flagged by the following 4 scanners:
Anti-Virus softwareSoftware versionDetection
Baidu-International 3.5.1.41473 Adware.Win64.Crossrider.D
ESET-NOD32 9564 a variant of Win64/Toolbar.Crossrider.D
Malwarebytes 1.75.0001 PUP.Optional.Freeven.A
VIPRE Antivirus 27552 Crossrider (fs)
       View all 101 all detections

Program detailsProgram details

Displayed publisher: freeven
URL: crossrider.com/pages/privacy
Installation folder: C:\Program Files\free ven
Uninstaller: C:\Program Files\free ven\Uninstall.exe /fromcontrolpanel=1
Estimated size: 8.83 MB

Program filesFiles installed by free ven

Program executable:utils.exe (Malware detected)
Path:C:\Program Files\free ven\utils.exe
MD5:0aaae6e9557f945dac5169e94c288a99
Additional files:
  • free ven-bg.exe (by freeven) - free ven (free ven exe)
  • (Malware detected) free ven-bho.dll (by freeven) - free ven BHO
  • (Malware detected) free ven-bho64.dll
  • (Malware detected) free ven-chromeinstaller.exe
  • (Malware detected) free ven-codedownloader.exe
  • (Malware detected) free ven-enabler.exe
  • (Malware detected) free ven-firefoxinstaller.exe
  • (Malware detected) free ven-updater.exe

Program behaviorsBehaviors exhibited

2 Internet Explorer BHOs
  • free ven-bho64.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'free ven' with the class of {11111111-1111-1111-1111-110511161178} (CrossriderApp0051678).
  • free ven-bho.dll is installed in Internet Explorer as a BHO (Browser Helper Object) under the name 'free ven' with the class of {11111111-1111-1111-1111-110511161180} (CrossriderApp0051680).
Scheduled Task
  • free ven-enabler.exe is scheduled as a task named 'temp_free ven-enabler'.
5 Scheduled Tasks (Boot/Login)
  • free ven-codedownloader.exe is automatically launched at startup through a scheduled task named free ven-codedownloader.
  • free ven-updater.exe is automatically launched at startup through a scheduled task named free ven-updater.
  • free ven-enabler.exe is automatically launched at startup through a scheduled task named free ven-enabler.
  • free ven-firefoxinstaller.exe is automatically launched at startup through a scheduled task named free ven-firefoxinstaller.
  • free ven-chromeinstaller.exe is automatically launched at startup through a scheduled task named free ven-chromeinstaller.

How do I remove free ven?

You can uninstall free ven from your computer by using the Add/Remove Program feature in the Window's Control Panel.
  1. On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
    • Windows Vista/7/8/10: Click Uninstall a Program.
    • Windows XP: Click Add or Remove Programs.
  2. When you find the program free ven, click it, and then do one of the following:
    • Windows Vista/7/8/10: Click Uninstall.
    • Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
  3. Follow the prompts. A progress bar shows you how long it will take to remove free ven.
  4. If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.

How do I reset my web browser?

If your web browser homepage and search settings have been modfied by free ven you can restore them to their previous default settings.
Microsoft Internet Explorer
Mozilla Firefox
Google Chrome

OS VERSIONS
Win 7 (SP1) 45%
Win 7 1%
 
HOW IT STARTS
Scheduled task? Yes
(Runs on Windows boot)
 
USER ACTIONS
Uninstall it 78%
Keep it 22%

Windows OS versionsWindows

Which Windows OS versions does it run on?
Windows 7 46.15%
Windows 10 39.32%
Windows XP 7.69%
Windows Vista 6.84%
Which OS releases does it run on?
Windows 7 Home Premium 34.19%
Windows 8.1 20.51%
Windows 8 11.97%
Microsoft Windows XP 7.69%
Windows 7 Ultimate 6.84%
Windows Vista Home Premiu... 5.13%

Distribution by countryGeography

23.21% of installs come from France
Which countries install it?
  France 23.21%
  United Kingdom 21.43%
  United States 19.64%
  Brazil 9.82%
  Canada 8.93%
  Italy 6.25%
  Sweden 2.68%
  Australia 1.79%
  Colombia 0.89%
  Mexico 0.89%
  PF 0.89%
  Spain 0.89%
  Germany 0.89%
  DK 0.89%

OEM distributionPC manufacturers

What PC manufacturers (OEMs) have it installed?
Hewlett-Packard 39.56%
Acer 20.88%
Dell 10.99%
Toshiba 7.69%
ASUS 4.40%
Samsung 4.40%
Lenovo 3.30%
Sony 3.30%
GIGABYTE 2.20%
Medion 1.10%
American Megatrends 1.10%
Gateway 1.10%
Common models
HP Pavilion g6 Notebook P... 3.57%
HP Pavilion 15 Notebook P... 2.68%
HP Pavilion g7 Notebook P... 2.68%
HP Pavilion dv6 Notebook ... 2.68%
Positivo Positivo MOBI... 1.79%
Samsung 350V5C/351V5C/354... 1.79%

commentsComments

user comment
No one has commented yet. Help others learn more about this software, share your comments.