58028.xpi

The file 58028.xpi has been detected as a potentially unwanted program by 4 anti-malware scanners. This file is typically installed with the program Fre_Ven_s Pro 23 by Kimahri Software inc. which is a potentially unwanted software program. It is built using the Crossrider cross-browser extension toolkit. While the file utilizes the Crossrider framework and delivery services, it is not owned by Crossrider.
Remove 58028.xpi - Powered by Reason Core Security
MD5:
2262e824be0716c5649de7e7e25e31fc

SHA-1:
cf9d6bfd554cbce0cdc2d5338c4fb964713bec31

SHA-256:
e710c71606a94c57d97c5ac313db76f8f91c18203c8dba02a43cd24499e5f5f1

Scanner detections:
4 / 68

Status:
Potentially unwanted

Explanation:
The software may change the browser's home page and search provider settings as well as display advertisements.

Analysis date:
12/7/2016 11:43:08 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
infected with Trojan.Crossrider.17413
9.0.1.05190

ESET NOD32
JS/Toolbar.Crossrider.B potentially unwanted application
7.0.302.0

G Data
Script.Application.Plush
14.6.24

Reason Heuristics
PUP.Crossrider.I
14.6.10.12

Remove 58028.xpi - Powered by Reason Core Security
File size:
467.4 KB (478,614 bytes)

File type:
Cross-Platform Installer Module (XPI), used by Mozilla bundles

Common path:
C:\Program Files\fre_ven_s pro 23\58028.xpi

The file 58028.xpi has been discovered within the following program.

Fre_Ven_s Pro 23  by Kimahri Software inc.
Fre_Ven_s Pro 23 is an adware browser extension that will display banner and text-context link ads aimed to promote the installation of additional questionable content including web browser toolbars, optimization utilities and other products.
85% remove it
 
Powered by Should I Remove It?

<RDF:RDF xmlns:em="http://www.mozilla.org/2004/em-rdf#" xmlns:NC="http://home.netscape.com/NC-rdf#" xmlns:RDF="http://www.w3.org/1999/02/22-rdf-syntax-ns#">
  <RDF:Description RDF:about="urn:mozilla:install-manifest" em:id="4099ddac-55a8-4242-a8ee-c11ac5c483f8@d381c88b-b41d-4125-a4e3-e1ec58b7567b.com" em:unpack="true" em:name="Fre_Ven_s Pro 23" em:version="0.94.61" em:type="2" em:creator="setup" em:description="Feven Shopping Companion" em:optionsURL="chrome://a4099ddac55a84242a8eec11ac5c483f8d381c88bb41d4125a4e3e1ec58b7567bcom58028/content/options.xul" em:iconURL="chrome://a4099ddac55a84242a8eec11ac5c483f8d381c88bb41d4125a4e3e1ec58b7567bcom58028/skin/icon24.png" em:updateURL="https://w9u6a2p6.ssl.hwcdn.net/plugin/ff/update/58028.rdf">
    <em:targetApplication RDF:resource="rdf:#$4d+Bj1" />
  </RDF:Description>
  <RDF:Description RDF:about="rdf:#$4d+Bj1" em:id="{ec8030f7-c20a-464f-9b0e-13a3a9e97384}" em:minVersion="3.5" em:maxVersion="40.*" />
</RDF:RDF>
Remove 58028.xpi - Powered by Reason Core Security