fre_ven_s pro 23-nova.dll

Kimahri Software inc.

This adware uses the Crossrider platform to build and distribute this web browser advertising injection extension. Once installed in the browser it will hijack various browser settings (homepage, search) and may interfere and track behaviors as well as deliver ads. The module fre_ven_s pro 23-nova.dll by Kimahri Software inc has been detected as adware by 6 anti-malware scanners. This file is typically installed with the program Fre_Ven_s Pro 23 by Kimahri Software inc. which is a potentially unwanted software program. It is part of the Brightcircle group of web-extensions that inject advertisements in the browser.
Remove fre_ven_s pro 23-nova.dll - Powered by Reason Core Security
Publisher:
Kimahri Software inc.  (signed and verified)

MD5:
7569d6e08045602391295495f7ca0054

SHA-1:
aa5f20c6ebeb4d0511ea8fcb9a0953598833a44c

SHA-256:
223c6cc24f2c15d4440cf68f1c5e0f9bc39ef7e3dee624ee3d33b55e4d4dd629

Scanner detections:
6 / 68

Status:
Adware

Analysis date:
12/9/2016 4:56:43 AM UTC  (a few moments ago)

Scan engine
Detection
Engine version

Baidu Antivirus
Adware.Win32.CrossAd
4.0.3.14610

G Data
Win32.Application.Plush
14.6.24

Qihoo 360 Security
Malware.QVM30.Gen
1.0.0.1015

Reason Heuristics
PUP.KimahriSoftwareinc.V
14.6.10.11

Rising Antivirus
PE:Malware.Bundlore!6.180F
23.00.65.14608

VIPRE Antivirus
Threat.4789396
30086

Remove fre_ven_s pro 23-nova.dll - Powered by Reason Core Security
File size:
118.9 KB (121,704 bytes)

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\Program Files\fre_ven_s pro 23\fre_ven_s pro 23-nova.dll

Digital Signature
Authority:
COMODO CA Limited

Valid from:
3/7/2013 12:00:00 AM

Valid to:
3/6/2016 11:59:59 PM

Subject:
CN=Kimahri Software inc., O=Kimahri Software inc., STREET=666 Sherbrooke Rue w, L=Montreal, S=Quebec, PostalCode=H3A 1E7, C=CA

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00A1BB8569950C0B2080A11A0E2F618B33

File PE Metadata
Compilation timestamp:
6/5/2014 11:04:30 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
1536:gUa8CfBEs7XeIC9kgmGk1wmcF9msWjcdt+2HAvKkdYw4:gxffg9kGx9Jt+2HAvvdY1

Entry address:
0x50C5

Entry point:
55, 8B, EC, 83, 7D, 0C, 01, 75, 05, E8, BA, 1F, 00, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 07, 00, 00, 00, 83, C4, 0C, 5D, C2, 0C, 00, 6A, 0C, 68, 88, 79, 01, 10, E8, EC, 0F, 00, 00, 33, C0, 40, 8B, 75, 0C, 85, F6, 75, 0C, 39, 35, 40, A2, 01, 10, 0F, 84, E4, 00, 00, 00, 83, 65, FC, 00, 83, FE, 01, 74, 05, 83, FE, 02, 75, 35, 8B, 0D, 24, 22, 01, 10, 85, C9, 74, 0C, FF, 75, 10, 56, FF, 75, 08, FF, D1, 89, 45, E4, 85, C0, 0F, 84, B1, 00, 00, 00, FF, 75, 10, 56, FF, 75, 08, E8, 11, FE, FF, FF, 89, 45, E4...
 
[+]

Entropy:
6.0744

Developed / compiled with:
Microsoft Visual C++

Code size:
65.5 KB (67,072 bytes)

The file fre_ven_s pro 23-nova.dll has been discovered within the following program.

Fre_Ven_s Pro 23  by Kimahri Software inc.
Fre_Ven_s Pro 23 is an adware browser extension that will display banner and text-context link ads aimed to promote the installation of additional questionable content including web browser toolbars, optimization utilities and other products.
85% remove it
 
Powered by Should I Remove It?

Remove fre_ven_s pro 23-nova.dll - Powered by Reason Core Security