Cinema Plus
Posted: July 18, 2014
Threat Metric
The Threat Meter is a malware assessment that SpywareRemove.com's research team is able to
give every identifiable malware threat. Our Threat Meter includes several criteria based off of
specific malware threats to value their severity, reach and volume. The Threat Meter is able to give
you a numerical breakdown of each threat's initial Threat Level, Detection Count, Volume Count,
Trend Path and Percentage Impact. The overall ranking of each threat in the Threat Meter is a basic
breakdown of how all threats are ranked within our own extensive malware database. The scoring for
each specific malware threat can be easily compared to other emerging threats to draw a contrast in
its particular severity. The Threat Meter is a useful tool in the endeavor of seeking a solution to
remove a threat or pursue additional analytical research for all types of computer users.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
The following fields listed on the Threat Meter containing a specific value, are explained in detail below:
Threat Level: The threat level scale goes from 1 to 10 where 10 is the highest level of severity and 1 is the lowest level of severity. Each specific level is relative to the threat's consistent assessed behaviors collected from SpyHunter's risk assessment model.
Detection Count: The collective number of confirmed and suspected cases of a particular malware threat. The detection count is calculated from infected PCs retrieved from diagnostic and scan log reports generated by SpyHunter.
Volume Count: Similar to the detection count, the Volume Count is specifically based on the number of confirmed and suspected threats infecting systems on a daily basis. High volume counts usually represent a popular threat but may or may not have infected a large number of systems. High detection count threats could lay dormant and have a low volume count. Criteria for Volume Count is relative to a daily detection count.
Trend Path: The Trend Path, utilizing an up arrow, down arrow or equal symbol, represents the level of recent movement of a particular threat. Up arrows represent an increase, down arrows represent a decline and the equal symbol represent no change to a threat's recent movement.
% Impact (Last 7 Days): This demonstrates a 7-day period change in the frequency of a malware threat infecting PCs. The percentage impact correlates directly to the current Trend Path to determine a rise or decline in the percentage.
| Ranking: | 4,261 |
|---|---|
| Threat Level: | 2/10 |
| Infected PCs: | 135,273 |
| First Seen: | July 18, 2014 |
|---|---|
| Last Seen: | March 8, 2025 |
| OS(es) Affected: | Windows |
Cinema Plus is adware that may be installed by other programs and loads extra advertising content. Although displaying advertisements isn't a threatening behavior, Cinema Plus advertisements may expose you to third-party threats, such as scripts that install Trojans. Unless you have well-considered reasons for using Cinema Plus, deleting Cinema Plus with anti-adware software is the recourse that malware analysts would consider best for your online safety.
The Unspoken Minuses of Cinema Plus
Cinema Plus markets itself as a streaming video-enhancing add-on for your Web browser, which is reminiscent of various Mindspark Toolbars and the Theater Mode PUP. However, Cinema Plus's primary function is to deliver advertisements through your Web browser, rather than provide any legitimate movie-viewing functions. Depending on the version of Cinema Plus that's installed, common formats for Cinema Plus advertisements may include:
- Inserted links to its advertisements may load themselves as fake search results or attached to preexisting text.
- Pop-up advertisements may load themselves as windows separate from your primary Web-browsing window.
- Banners and other graphics-based elements may superimpose atop of an Internet page in a secondary graphical layer. Alternately, they also may inject themselves into a Web page, whether the page was intended to host advertisements or be advertisement-free.
Cinema Plus's advertising formats may interfere with interactivity with the affected Web pages, and may prevent the PC's user from accessing navigation interfaces or viewing content (such as same streaming movie Cinema Plus claims to assist). Privacy advocates also may disapprove of Cinema Plus's tracking behavior, which monitors the sites you visit, supposedly to contextualize its advertisements.
Recent Cinema Plus samples appear to load advertisements for most Web pages indiscriminately, and without any regard for the integrity of the original website's structure. However, browsers unaffected by Cinema Plus and PC users on machines without Cinema Plus still may view all affected websites as per usual.
Shredding Your Ticket to Front-Row Advertisements
Cinema Plus installs itself through bundles with other products, instead of distributing itself alone, and malware analysts haven't associated Cinema Plus with any legitimate company name. When taking its past into account along with its overall set of features, there are few reasons for doing anything other than uninstalling Cinema Plus from your browser. Cinema Plus advertisements are not necessarily threatening to your PC, but, based on the poor track records of similar adware, interactions with them may risk compromising your PC or your information.
Ordinarily, blocking Cinema Plus's installation should be done by using anti-adware tools to scan any suspicious files. Browser security protocols also may block exploits that may see abuse by adware-installing threats. Whether or not Cinema Plus was acquired with your permission, removing Cinema Plus with anything less than dedicated anti-adware software may result in an incomplete uninstall, through which advertisements still may display themselves.
Aliases
PUP/Win32.CrossRider [AhnLab-V3]Generic PUA NB [Sophos]Win32:Crossrider-CN [PUP] [Avast]
Technical Details
File System Modifications
Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.
The following files were created in the system:%PROGRAMFILES(x86)%\CinemaPlus-4.5vV28.06\69029b74-078a-48a9-a98b-440bd35ae4f8-1-7.exe
File name: 69029b74-078a-48a9-a98b-440bd35ae4f8-1-7.exeSize: 1.16 MB (1163344 bytes)
MD5: 71dce4e57d6651f771ed4093a2ca78ab
Detection count: 1,176
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CinemaPlus-4.5vV28.06
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES(x86)%\CinemaPlus12bV05.02\ee20aac1-0235-4760-932f-6f25d61cd341-1-6.exe
File name: ee20aac1-0235-4760-932f-6f25d61cd341-1-6.exeSize: 1.41 MB (1413080 bytes)
MD5: deaeeababc971a48ab59eeff15c10c98
Detection count: 1,042
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CinemaPlus12bV05.02
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES%\CinemaPlus12bV02.02\9725e541-b99e-4df9-b8dc-81a8241a9438-1-6.exe
File name: 9725e541-b99e-4df9-b8dc-81a8241a9438-1-6.exeSize: 1.41 MB (1413080 bytes)
MD5: 3ac074359049c4b3ef52026a6e897468
Detection count: 841
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\CinemaPlus12bV02.02
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES%\CinemaPlus12bV04.02\74cffd73-9393-4ea5-866a-774e8965ca62-1-6.exe
File name: 74cffd73-9393-4ea5-866a-774e8965ca62-1-6.exeSize: 1.41 MB (1413080 bytes)
MD5: 02205656f2b184ddef3b991f88014e57
Detection count: 824
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\CinemaPlus12bV04.02
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES(x86)%\CinemaPlus12bV05.02\ee20aac1-0235-4760-932f-6f25d61cd341-1-7.exe
File name: ee20aac1-0235-4760-932f-6f25d61cd341-1-7.exeSize: 1.08 MB (1080792 bytes)
MD5: 24433d1263e5b7557a28c080c11cf95b
Detection count: 820
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CinemaPlus12bV05.02
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES(x86)%\CinemaPlus-4.2vV10.09\3f2e5377-7917-4401-9d0e-29b33dc4e464-6.exe
File name: 3f2e5377-7917-4401-9d0e-29b33dc4e464-6.exeSize: 1.25 MB (1257552 bytes)
MD5: fc99acc43b9f97a2fa9d61e68e77e091
Detection count: 778
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CinemaPlus-4.2vV10.09
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES%\CinemaPlus12bV02.02\9725e541-b99e-4df9-b8dc-81a8241a9438-1-7.exe
File name: 9725e541-b99e-4df9-b8dc-81a8241a9438-1-7.exeSize: 1.12 MB (1129944 bytes)
MD5: 3786e6987717aaff6c1c2b95e01cea5f
Detection count: 653
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\CinemaPlus12bV02.02
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES%\CinemaPlus12bV03.02\acbcce65-f4f6-4207-a9f4-1aeaa4a617ab-1-6.exe
File name: acbcce65-f4f6-4207-a9f4-1aeaa4a617ab-1-6.exeSize: 1.41 MB (1413080 bytes)
MD5: 4a2f3510a5c9e04d7544f0a9ee4b8657
Detection count: 618
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\CinemaPlus12bV03.02
Group: Malware file
Last Updated: July 8, 2017
C:\Users\<username>\AppData\Roaming\CPOKCZF.exe
File name: CPOKCZF.exeSize: 1.95 MB (1953176 bytes)
MD5: 465afa86a7e6a5c6a8e30b6e10bb8c9a
Detection count: 611
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\CPOKCZF.exe
Group: Malware file
Last Updated: April 29, 2023
C:\Users\<username>\AppData\Roaming\OPSN.exe
File name: OPSN.exeSize: 1.47 MB (1474456 bytes)
MD5: 77f9ceba179711d48b4d5f75c1f993b4
Detection count: 609
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Roaming\OPSN.exe
Group: Malware file
Last Updated: April 29, 2023
%PROGRAMFILES(x86)%\CinemaPlus-4.5vV28.06\69029b74-078a-48a9-a98b-440bd35ae4f8-5.exe
File name: 69029b74-078a-48a9-a98b-440bd35ae4f8-5.exeSize: 1.11 MB (1110096 bytes)
MD5: 95f7ae74ae90e6105273577d3642121c
Detection count: 609
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CinemaPlus-4.5vV28.06
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES(x86)%\CinemaPlus-4.5vV28.06\69029b74-078a-48a9-a98b-440bd35ae4f8-1-6.exe
File name: 69029b74-078a-48a9-a98b-440bd35ae4f8-1-6.exeSize: 1.4 MB (1409104 bytes)
MD5: a338b690df4ce48ba9f7ea7a57aed817
Detection count: 607
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CinemaPlus-4.5vV28.06
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES(x86)%\CinemaPlus-4.5vV28.06\69029b74-078a-48a9-a98b-440bd35ae4f8-4.exe
File name: 69029b74-078a-48a9-a98b-440bd35ae4f8-4.exeSize: 1.5 MB (1506384 bytes)
MD5: f648157d812d5562af62380cf0958520
Detection count: 607
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CinemaPlus-4.5vV28.06
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES(x86)%\CinemaPlus 1.0dV13.04\aff56677-2ebc-411c-9e67-c37c51e3c29b-1-6.exe
File name: aff56677-2ebc-411c-9e67-c37c51e3c29b-1-6.exeSize: 1.4 MB (1408512 bytes)
MD5: 73ac59cd749f1228c4fa5eb155275fc9
Detection count: 555
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CinemaPlus 1.0dV13.04
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES(x86)%\CinemaPlus 1.0dV13.04\aff56677-2ebc-411c-9e67-c37c51e3c29b-1-7.exe
File name: aff56677-2ebc-411c-9e67-c37c51e3c29b-1-7.exeSize: 1.1 MB (1104896 bytes)
MD5: 5d765ae8350262dbb8de3b617849ef6f
Detection count: 555
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CinemaPlus 1.0dV13.04
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES%\CinemaPlus12bV07.02\c530f520-a5fd-4c74-9695-5e0926dfd29d-1-6.exe
File name: c530f520-a5fd-4c74-9695-5e0926dfd29d-1-6.exeSize: 1.41 MB (1413080 bytes)
MD5: d3600326a9c94739990faf0d9af4fb02
Detection count: 492
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\CinemaPlus12bV07.02
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES%\CinemaPlus12bV08.02\f25ef41e-9925-48ba-8dab-24c8bac45edc-1-6.exe
File name: f25ef41e-9925-48ba-8dab-24c8bac45edc-1-6.exeSize: 1.41 MB (1413080 bytes)
MD5: e487d36f9e4ff0bbc8016cdd33d71a33
Detection count: 485
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\CinemaPlus12bV08.02
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES(x86)%\CinemaPlus-3.2cV10.06\a4a8d186-0476-4c3e-b8e0-6b979e2cb05a-1-6.exe
File name: a4a8d186-0476-4c3e-b8e0-6b979e2cb05a-1-6.exeSize: 1.5 MB (1503312 bytes)
MD5: 857c1379d6b784567605d351fca87e32
Detection count: 485
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CinemaPlus-3.2cV10.06
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES(x86)%\CinemaPlus12bV05.02\ee20aac1-0235-4760-932f-6f25d61cd341-6.exe
File name: ee20aac1-0235-4760-932f-6f25d61cd341-6.exeSize: 1.39 MB (1392088 bytes)
MD5: a9411e8bf4603d5bf1a1538b863a3419
Detection count: 445
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CinemaPlus12bV05.02
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES%\CinemaPlus12bV03.02\acbcce65-f4f6-4207-a9f4-1aeaa4a617ab-1-7.exe
File name: acbcce65-f4f6-4207-a9f4-1aeaa4a617ab-1-7.exeSize: 1.08 MB (1083864 bytes)
MD5: 90116d7a2259ce47582b4f562e5a4f0b
Detection count: 429
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\CinemaPlus12bV03.02
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES(x86)%\CinemaPlus12bV14.03\ccf13a28-ca14-43df-84b5-9c8570ff2676-1-7.exe
File name: ccf13a28-ca14-43df-84b5-9c8570ff2676-1-7.exeSize: 1.08 MB (1086976 bytes)
MD5: 902c75bfa6bd0a3e1cc5a5835bff88b6
Detection count: 408
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CinemaPlus12bV14.03
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES%\CinemaPlus12bV07.02\c530f520-a5fd-4c74-9695-5e0926dfd29d-1-7.exe
File name: c530f520-a5fd-4c74-9695-5e0926dfd29d-1-7.exeSize: 992.72 KB (992728 bytes)
MD5: d8c07c43f056c901a03f6b2a64a24e75
Detection count: 403
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\CinemaPlus12bV07.02
Group: Malware file
Last Updated: July 8, 2017
%PROGRAMFILES%\CinemaP-1.9cV26.01\9e66756e-f5ac-44fa-9d64-f69e7aaeda5d-1-6.exe
File name: 9e66756e-f5ac-44fa-9d64-f69e7aaeda5d-1-6.exeSize: 1.41 MB (1413096 bytes)
MD5: 1ed61be34cfe2e1a76d2d45ce42d816d
Detection count: 281
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\CinemaP-1.9cV26.01
Group: Malware file
Last Updated: January 27, 2015
%PROGRAMFILES%\CinemaP-1.9cV26.01\9e66756e-f5ac-44fa-9d64-f69e7aaeda5d-1-7.exe
File name: 9e66756e-f5ac-44fa-9d64-f69e7aaeda5d-1-7.exeSize: 1.13 MB (1130472 bytes)
MD5: 501dda7971891acfd1ba6e1876f575c2
Detection count: 211
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\CinemaP-1.9cV26.01
Group: Malware file
Last Updated: January 27, 2015
%PROGRAMFILES%\Cinema Video 1.8V27.11\a20703a4-13e4-4239-901d-b4a4df983103.exe
File name: a20703a4-13e4-4239-901d-b4a4df983103.exeSize: 358.36 KB (358360 bytes)
MD5: ba84e0a3b366f415a7accf1fb5e61b5c
Detection count: 47
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Cinema Video 1.8V27.11
Group: Malware file
Last Updated: November 28, 2014
More files
Registry Modifications
The following newly produced Registry Values are:
Regexp file mask%windir%\System32\Tasks\cinemaplus-[RANDOM CHARACTERS]%windir%\Tasks\cinemaplus-[RANDOM CHARACTERS].jobHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\CinameHDPureV9.5Software\AppDataLow\Software\CinamHDPureV9.5Software\AppDataLow\Software\Cinema-DPlus3Software\AppDataLow\Software\Cinema-Plus-1.2Software\AppDataLow\Software\Cinema-YB1.1Software\AppDataLow\Software\CinemaD-V1Software\AppDataLow\Software\CinemaDPV1Software\AppDataLow\Software\CinemaHD-V1.1Software\AppDataLow\Software\CinemaHDplus-V1.8Software\AppDataLow\Software\CinemaHplus-V1.2Software\AppDataLow\Software\CinemaP-1.4Software\AppDataLow\Software\HD+V1.0Software\AppDataLow\Software\HDCinemaPlus1.6Software\AppDataLow\Software\HQ-Cinema1.3Software\AppDataLow\Software\I - CinemaSoftware\AppDataLow\Software\Rewin CinemaSoftware\AppDataLow\Software\Rewin_Cinematic 1.1SOFTWARE\CinameHDPureV9.5SOFTWARE\CinamHDPureV9.5SOFTWARE\Cinema-Plus-1.2SOFTWARE\Cinema-Plus-1.2-nvSOFTWARE\CinemaHDplus-V1.8SOFTWARE\CinemaHplus-V1.2SOFTWARE\CinemaP-1.4SOFTWARE\CinemaPlus_1.3dV09.08SOFTWARE\CiPlus-4.5vV25.10SOFTWARE\Classes\092950600ea001325d04029365df3cb90063831.BHOSOFTWARE\Classes\092950600ea001325d04029365df3cb90063831.BHO.1SOFTWARE\Classes\092950600ea001325d04029365df3cb90063831.SandboxSOFTWARE\Classes\092950600ea001325d04029365df3cb90063831.Sandbox.1SOFTWARE\Classes\121297d1dd3e4c3496a131580b7cb1830065759.BHOSOFTWARE\Classes\121297d1dd3e4c3496a131580b7cb1830065759.BHO.1SOFTWARE\Classes\121297d1dd3e4c3496a131580b7cb1830065759.SandboxSOFTWARE\Classes\121297d1dd3e4c3496a131580b7cb1830065759.Sandbox.1SOFTWARE\Classes\255ab810f328013182ce5118752c52d60061762.BHOSOFTWARE\Classes\255ab810f328013182ce5118752c52d60061762.BHO.1SOFTWARE\Classes\255ab810f328013182ce5118752c52d60061762.SandboxSOFTWARE\Classes\255ab810f328013182ce5118752c52d60061762.Sandbox.1SOFTWARE\Classes\c703ac9000fc0132bde2554c934480e20062998.BHOSOFTWARE\Classes\c703ac9000fc0132bde2554c934480e20062998.BHO.1SOFTWARE\Classes\c703ac9000fc0132bde2554c934480e20062998.SandboxSOFTWARE\Classes\c703ac9000fc0132bde2554c934480e20062998.Sandbox.1Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinameHDPureV9.5Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinamHDPureV9.5Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Cinema-Plus-1.2Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\I - CinemaSOFTWARE\HQ-Cinema1.3SOFTWARE\I - CinemaSOFTWARE\I - Cinema-nvSoftware\InstalledBrowserExtensions\30935Software\InstalledBrowserExtensions\CinameHDPureSoftware\InstalledBrowserExtensions\CinamHDPureSoftware\InstalledBrowserExtensions\Cinema PlusSoftware\InstalledBrowserExtensions\CinemaPlus_1.3dV09.08Software\InstalledBrowserExtensions\CinemAPPSoftware\InstalledBrowserExtensions\CiPlus-4.5vV25.10SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\CinamHDPureV9.5-bg.exeSOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Cinema-Plus-1.2-bg.exeSOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\I - Cinema-bg.exeSOFTWARE\Rewin CinemaSOFTWARE\Rewin_Cinematic 1.1SOFTWARE\Wow6432Node\Cinema-Plus-1.2SOFTWARE\Wow6432Node\Cinema-Plus-1.2-nvSOFTWARE\Wow6432Node\CinemaHDplus-V1.8SOFTWARE\Wow6432Node\CinemaP-1.4SOFTWARE\Wow6432Node\CinemaPlus_1.3dV09.08SOFTWARE\Wow6432Node\CiPlus-4.5vV25.10SOFTWARE\Wow6432Node\HDCinemaPlus1.6SOFTWARE\Wow6432Node\HQ-Cinema1.3SOFTWARE\Wow6432Node\I - CinemaSOFTWARE\Wow6432Node\I - Cinema-nvSOFTWARE\Wow6432Node\InstalledBrowserExtensions\30935SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\CinamHDPureV9.5-bg.exeSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Cinema-Plus-1.2-bg.exeSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\I - Cinema-bg.exeSOFTWARE\Wow6432Node\Rewin CinemaSOFTWARE\Wow6432Node\Rewin_Cinematic 1.1HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}CinemaHDplus-V1.8CinemaP-1.4CinemaPlus_1.3dV09.08CiPlus-4.5vV25.10Rewin CinemaRewin_Cinematic 1.1
Regexp file mask%windir%\System32\Tasks\cinemaplus-[RANDOM CHARACTERS]%windir%\Tasks\cinemaplus-[RANDOM CHARACTERS].jobHKEY..\..\..\..{RegistryKeys}Software\AppDataLow\Software\CinameHDPureV9.5Software\AppDataLow\Software\CinamHDPureV9.5Software\AppDataLow\Software\Cinema-DPlus3Software\AppDataLow\Software\Cinema-Plus-1.2Software\AppDataLow\Software\Cinema-YB1.1Software\AppDataLow\Software\CinemaD-V1Software\AppDataLow\Software\CinemaDPV1Software\AppDataLow\Software\CinemaHD-V1.1Software\AppDataLow\Software\CinemaHDplus-V1.8Software\AppDataLow\Software\CinemaHplus-V1.2Software\AppDataLow\Software\CinemaP-1.4Software\AppDataLow\Software\HD+V1.0Software\AppDataLow\Software\HDCinemaPlus1.6Software\AppDataLow\Software\HQ-Cinema1.3Software\AppDataLow\Software\I - CinemaSoftware\AppDataLow\Software\Rewin CinemaSoftware\AppDataLow\Software\Rewin_Cinematic 1.1SOFTWARE\CinameHDPureV9.5SOFTWARE\CinamHDPureV9.5SOFTWARE\Cinema-Plus-1.2SOFTWARE\Cinema-Plus-1.2-nvSOFTWARE\CinemaHDplus-V1.8SOFTWARE\CinemaHplus-V1.2SOFTWARE\CinemaP-1.4SOFTWARE\CinemaPlus_1.3dV09.08SOFTWARE\CiPlus-4.5vV25.10SOFTWARE\Classes\092950600ea001325d04029365df3cb90063831.BHOSOFTWARE\Classes\092950600ea001325d04029365df3cb90063831.BHO.1SOFTWARE\Classes\092950600ea001325d04029365df3cb90063831.SandboxSOFTWARE\Classes\092950600ea001325d04029365df3cb90063831.Sandbox.1SOFTWARE\Classes\121297d1dd3e4c3496a131580b7cb1830065759.BHOSOFTWARE\Classes\121297d1dd3e4c3496a131580b7cb1830065759.BHO.1SOFTWARE\Classes\121297d1dd3e4c3496a131580b7cb1830065759.SandboxSOFTWARE\Classes\121297d1dd3e4c3496a131580b7cb1830065759.Sandbox.1SOFTWARE\Classes\255ab810f328013182ce5118752c52d60061762.BHOSOFTWARE\Classes\255ab810f328013182ce5118752c52d60061762.BHO.1SOFTWARE\Classes\255ab810f328013182ce5118752c52d60061762.SandboxSOFTWARE\Classes\255ab810f328013182ce5118752c52d60061762.Sandbox.1SOFTWARE\Classes\c703ac9000fc0132bde2554c934480e20062998.BHOSOFTWARE\Classes\c703ac9000fc0132bde2554c934480e20062998.BHO.1SOFTWARE\Classes\c703ac9000fc0132bde2554c934480e20062998.SandboxSOFTWARE\Classes\c703ac9000fc0132bde2554c934480e20062998.Sandbox.1Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinameHDPureV9.5Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinamHDPureV9.5Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Cinema-Plus-1.2Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\I - CinemaSOFTWARE\HQ-Cinema1.3SOFTWARE\I - CinemaSOFTWARE\I - Cinema-nvSoftware\InstalledBrowserExtensions\30935Software\InstalledBrowserExtensions\CinameHDPureSoftware\InstalledBrowserExtensions\CinamHDPureSoftware\InstalledBrowserExtensions\Cinema PlusSoftware\InstalledBrowserExtensions\CinemaPlus_1.3dV09.08Software\InstalledBrowserExtensions\CinemAPPSoftware\InstalledBrowserExtensions\CiPlus-4.5vV25.10SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\CinamHDPureV9.5-bg.exeSOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Cinema-Plus-1.2-bg.exeSOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\I - Cinema-bg.exeSOFTWARE\Rewin CinemaSOFTWARE\Rewin_Cinematic 1.1SOFTWARE\Wow6432Node\Cinema-Plus-1.2SOFTWARE\Wow6432Node\Cinema-Plus-1.2-nvSOFTWARE\Wow6432Node\CinemaHDplus-V1.8SOFTWARE\Wow6432Node\CinemaP-1.4SOFTWARE\Wow6432Node\CinemaPlus_1.3dV09.08SOFTWARE\Wow6432Node\CiPlus-4.5vV25.10SOFTWARE\Wow6432Node\HDCinemaPlus1.6SOFTWARE\Wow6432Node\HQ-Cinema1.3SOFTWARE\Wow6432Node\I - CinemaSOFTWARE\Wow6432Node\I - Cinema-nvSOFTWARE\Wow6432Node\InstalledBrowserExtensions\30935SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\CinamHDPureV9.5-bg.exeSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Cinema-Plus-1.2-bg.exeSOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\I - Cinema-bg.exeSOFTWARE\Wow6432Node\Rewin CinemaSOFTWARE\Wow6432Node\Rewin_Cinematic 1.1HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}CinemaHDplus-V1.8CinemaP-1.4CinemaPlus_1.3dV09.08CiPlus-4.5vV25.10Rewin CinemaRewin_Cinematic 1.1
Additional Information
The following directories were created:
%PROGRAMFILES%\CiPlus-4.5vV25.10%PROGRAMFILES%\CinamHDPureV9.5%PROGRAMFILES%\CinameHDPureV9.5%PROGRAMFILES%\Cinema 4u%PROGRAMFILES%\Cinema Video 1.8V27.11%PROGRAMFILES%\Cinema-DPlus2%PROGRAMFILES%\CinemaHD-V1.1%PROGRAMFILES%\CinemaP-1.4%PROGRAMFILES%\CinemaPlus_1.3dV09.08%PROGRAMFILES%\HD+V1.0%PROGRAMFILES%\I - Cinema%PROGRAMFILES%\Rewin Cinema%PROGRAMFILES%\Rewin_Cinematic 1.1%PROGRAMFILES(X86)%\CiPlus-4.5vV25.10%PROGRAMFILES(x86)%\CinamHDPureV9.5%PROGRAMFILES(x86)%\CinameHDPureV9.5%PROGRAMFILES(x86)%\Cinema 4u%PROGRAMFILES(x86)%\Cinema-DPlus2%PROGRAMFILES(x86)%\CinemaDPV1%PROGRAMFILES(x86)%\CinemaHD-V1.1%PROGRAMFILES(x86)%\CinemaP-1.4%PROGRAMFILES(x86)%\HC-inemA3%PROGRAMFILES(x86)%\HD+V1.0%PROGRAMFILES(x86)%\HDCinemaPlus1.6%PROGRAMFILES(x86)%\HQ-Cinema1.3%PROGRAMFILES(x86)%\I - Cinema%PROGRAMFILES(x86)%\Rewin Cinema%PROGRAMFILES(x86)%\Rewin_Cinematic 1.1
Leave a Reply
Please note that we are not able to assist with billing and support issues regarding SpyHunter or other products. If you're having issues with SpyHunter, please get in touch with SpyHunter customer support through your SpyHunter . If you have SpyHunter billing questions, we recommend you check the Billing FAQ. For general suggestions or feedback, contact us.