Cinema-Plus

By GoldSparrow in Adware

Threat Scorecard

Ranking:	3,652
Threat Level:	20 % (Normal)
Infected Computers:	57,281

First Seen:	July 18, 2014
Last Seen:	September 20, 2023
OS(es) Affected:	Windows

Cinema-Plus is an adware program that may attempt to provide viewing options for movies or random streaming media through the internet. The Cinema-Plus application could be loaded on your system automatically through the installation of random freeware programs or bundled software apps. When loaded on a computer, Cinema-Plus could then render random pop-up messages or ads that may have questionable content on them. Use of the Cinema-Plus ads or pop-up messages may redirect you to various unwanted sites. Removal of Cinema-Plus and its associated plugins may require that you find all installed components and delete each one.

Table of Contents

Aliases

3 security vendors flagged this file as malicious.

Anti-Virus Software	Detection
AhnLab-V3	PUP/Win32.CrossRider
Sophos	Generic PUA NB
Avast	Win32:Crossrider-CN [PUP]

SpyHunter Detects & Remove Cinema-Plus

File System Details

Cinema-Plus may create the following file(s):

Expand All | Collapse All

#	File Name	MD5	Detections Detections: The number of confirmed and suspected cases of a particular threat detected on infected computers as reported by SpyHunter.
1.	f40df109-6f04-4f76-ab92-f00f03b2138a-6.exe	621bc8cefcb25635a49a71b70c63a8db	3,042
Name: f40df109-6f04-4f76-ab92-f00f03b2138a-6.exe MD5: 621bc8cefcb25635a49a71b70c63a8db Size: 1.28 MB (1280920 bytes) Detections: 3,042 Type: Executable File Path: %PROGRAMFILES(x86)%\Cinema-Plus-1.7cV06.10 Group: Malware file Last Updated: March 30, 2020
2.	69029b74-078a-48a9-a98b-440bd35ae4f8-1-7.exe	71dce4e57d6651f771ed4093a2ca78ab	502
Name: 69029b74-078a-48a9-a98b-440bd35ae4f8-1-7.exe MD5: 71dce4e57d6651f771ed4093a2ca78ab Size: 1.16 MB (1163344 bytes) Detections: 502 Type: Executable File Path: %PROGRAMFILES(x86)%\CinemaPlus-4.5vV28.06 Group: Malware file Last Updated: July 8, 2017
3.	ee20aac1-0235-4760-932f-6f25d61cd341-1-6.exe	deaeeababc971a48ab59eeff15c10c98	445
Name: ee20aac1-0235-4760-932f-6f25d61cd341-1-6.exe MD5: deaeeababc971a48ab59eeff15c10c98 Size: 1.41 MB (1413080 bytes) Detections: 445 Type: Executable File Path: %PROGRAMFILES(x86)%\CinemaPlus12bV05.02 Group: Malware file Last Updated: July 8, 2017
4.	9725e541-b99e-4df9-b8dc-81a8241a9438-1-6.exe	3ac074359049c4b3ef52026a6e897468	359
Name: 9725e541-b99e-4df9-b8dc-81a8241a9438-1-6.exe MD5: 3ac074359049c4b3ef52026a6e897468 Size: 1.41 MB (1413080 bytes) Detections: 359 Type: Executable File Path: %PROGRAMFILES%\CinemaPlus12bV02.02 Group: Malware file Last Updated: July 8, 2017
5.	74cffd73-9393-4ea5-866a-774e8965ca62-1-6.exe	02205656f2b184ddef3b991f88014e57	352
Name: 74cffd73-9393-4ea5-866a-774e8965ca62-1-6.exe MD5: 02205656f2b184ddef3b991f88014e57 Size: 1.41 MB (1413080 bytes) Detections: 352 Type: Executable File Path: %PROGRAMFILES%\CinemaPlus12bV04.02 Group: Malware file Last Updated: July 8, 2017
6.	ee20aac1-0235-4760-932f-6f25d61cd341-1-7.exe	24433d1263e5b7557a28c080c11cf95b	350
Name: ee20aac1-0235-4760-932f-6f25d61cd341-1-7.exe MD5: 24433d1263e5b7557a28c080c11cf95b Size: 1.08 MB (1080792 bytes) Detections: 350 Type: Executable File Path: %PROGRAMFILES(x86)%\CinemaPlus12bV05.02 Group: Malware file Last Updated: July 8, 2017
7.	3f2e5377-7917-4401-9d0e-29b33dc4e464-6.exe	fc99acc43b9f97a2fa9d61e68e77e091	332
Name: 3f2e5377-7917-4401-9d0e-29b33dc4e464-6.exe MD5: fc99acc43b9f97a2fa9d61e68e77e091 Size: 1.25 MB (1257552 bytes) Detections: 332 Type: Executable File Path: %PROGRAMFILES(x86)%\CinemaPlus-4.2vV10.09 Group: Malware file Last Updated: July 8, 2017
8.	9725e541-b99e-4df9-b8dc-81a8241a9438-1-7.exe	3786e6987717aaff6c1c2b95e01cea5f	279
Name: 9725e541-b99e-4df9-b8dc-81a8241a9438-1-7.exe MD5: 3786e6987717aaff6c1c2b95e01cea5f Size: 1.12 MB (1129944 bytes) Detections: 279 Type: Executable File Path: %PROGRAMFILES%\CinemaPlus12bV02.02 Group: Malware file Last Updated: July 8, 2017
9.	acbcce65-f4f6-4207-a9f4-1aeaa4a617ab-1-6.exe	4a2f3510a5c9e04d7544f0a9ee4b8657	264
Name: acbcce65-f4f6-4207-a9f4-1aeaa4a617ab-1-6.exe MD5: 4a2f3510a5c9e04d7544f0a9ee4b8657 Size: 1.41 MB (1413080 bytes) Detections: 264 Type: Executable File Path: %PROGRAMFILES%\CinemaPlus12bV03.02 Group: Malware file Last Updated: July 8, 2017
10.	CPOKCZF.exe	465afa86a7e6a5c6a8e30b6e10bb8c9a	261
Name: CPOKCZF.exe MD5: 465afa86a7e6a5c6a8e30b6e10bb8c9a Size: 1.95 MB (1953176 bytes) Detections: 261 Type: Executable File Path: C:\Users\<username>\AppData\Roaming\CPOKCZF.exe Group: Malware file Last Updated: April 29, 2023
11.	OPSN.exe	77f9ceba179711d48b4d5f75c1f993b4	260
Name: OPSN.exe MD5: 77f9ceba179711d48b4d5f75c1f993b4 Size: 1.47 MB (1474456 bytes) Detections: 260 Type: Executable File Path: C:\Users\<username>\AppData\Roaming\OPSN.exe Group: Malware file Last Updated: April 29, 2023
12.	69029b74-078a-48a9-a98b-440bd35ae4f8-5.exe	95f7ae74ae90e6105273577d3642121c	260
Name: 69029b74-078a-48a9-a98b-440bd35ae4f8-5.exe MD5: 95f7ae74ae90e6105273577d3642121c Size: 1.11 MB (1110096 bytes) Detections: 260 Type: Executable File Path: %PROGRAMFILES(x86)%\CinemaPlus-4.5vV28.06 Group: Malware file Last Updated: July 8, 2017
13.	69029b74-078a-48a9-a98b-440bd35ae4f8-1-6.exe	a338b690df4ce48ba9f7ea7a57aed817	259
Name: 69029b74-078a-48a9-a98b-440bd35ae4f8-1-6.exe MD5: a338b690df4ce48ba9f7ea7a57aed817 Size: 1.4 MB (1409104 bytes) Detections: 259 Type: Executable File Path: %PROGRAMFILES(x86)%\CinemaPlus-4.5vV28.06 Group: Malware file Last Updated: July 8, 2017
14.	69029b74-078a-48a9-a98b-440bd35ae4f8-4.exe	f648157d812d5562af62380cf0958520	259
Name: 69029b74-078a-48a9-a98b-440bd35ae4f8-4.exe MD5: f648157d812d5562af62380cf0958520 Size: 1.5 MB (1506384 bytes) Detections: 259 Type: Executable File Path: %PROGRAMFILES(x86)%\CinemaPlus-4.5vV28.06 Group: Malware file Last Updated: July 8, 2017
15.	aff56677-2ebc-411c-9e67-c37c51e3c29b-1-6.exe	73ac59cd749f1228c4fa5eb155275fc9	237
Name: aff56677-2ebc-411c-9e67-c37c51e3c29b-1-6.exe MD5: 73ac59cd749f1228c4fa5eb155275fc9 Size: 1.4 MB (1408512 bytes) Detections: 237 Type: Executable File Path: %PROGRAMFILES(x86)%\CinemaPlus 1.0dV13.04 Group: Malware file Last Updated: July 8, 2017
16.	aff56677-2ebc-411c-9e67-c37c51e3c29b-1-7.exe	5d765ae8350262dbb8de3b617849ef6f	237
Name: aff56677-2ebc-411c-9e67-c37c51e3c29b-1-7.exe MD5: 5d765ae8350262dbb8de3b617849ef6f Size: 1.1 MB (1104896 bytes) Detections: 237 Type: Executable File Path: %PROGRAMFILES(x86)%\CinemaPlus 1.0dV13.04 Group: Malware file Last Updated: July 8, 2017
17.	c530f520-a5fd-4c74-9695-5e0926dfd29d-1-6.exe	d3600326a9c94739990faf0d9af4fb02	210
Name: c530f520-a5fd-4c74-9695-5e0926dfd29d-1-6.exe MD5: d3600326a9c94739990faf0d9af4fb02 Size: 1.41 MB (1413080 bytes) Detections: 210 Type: Executable File Path: %PROGRAMFILES%\CinemaPlus12bV07.02 Group: Malware file Last Updated: July 8, 2017
18.	f25ef41e-9925-48ba-8dab-24c8bac45edc-1-6.exe	e487d36f9e4ff0bbc8016cdd33d71a33	207
Name: f25ef41e-9925-48ba-8dab-24c8bac45edc-1-6.exe MD5: e487d36f9e4ff0bbc8016cdd33d71a33 Size: 1.41 MB (1413080 bytes) Detections: 207 Type: Executable File Path: %PROGRAMFILES%\CinemaPlus12bV08.02 Group: Malware file Last Updated: July 8, 2017
19.	a4a8d186-0476-4c3e-b8e0-6b979e2cb05a-1-6.exe	857c1379d6b784567605d351fca87e32	207
Name: a4a8d186-0476-4c3e-b8e0-6b979e2cb05a-1-6.exe MD5: 857c1379d6b784567605d351fca87e32 Size: 1.5 MB (1503312 bytes) Detections: 207 Type: Executable File Path: %PROGRAMFILES(x86)%\CinemaPlus-3.2cV10.06 Group: Malware file Last Updated: July 8, 2017
20.	ee20aac1-0235-4760-932f-6f25d61cd341-6.exe	a9411e8bf4603d5bf1a1538b863a3419	190
Name: ee20aac1-0235-4760-932f-6f25d61cd341-6.exe MD5: a9411e8bf4603d5bf1a1538b863a3419 Size: 1.39 MB (1392088 bytes) Detections: 190 Type: Executable File Path: %PROGRAMFILES(x86)%\CinemaPlus12bV05.02 Group: Malware file Last Updated: July 8, 2017
21.	acbcce65-f4f6-4207-a9f4-1aeaa4a617ab-1-7.exe	90116d7a2259ce47582b4f562e5a4f0b	183
Name: acbcce65-f4f6-4207-a9f4-1aeaa4a617ab-1-7.exe MD5: 90116d7a2259ce47582b4f562e5a4f0b Size: 1.08 MB (1083864 bytes) Detections: 183 Type: Executable File Path: %PROGRAMFILES%\CinemaPlus12bV03.02 Group: Malware file Last Updated: July 8, 2017
22.	ccf13a28-ca14-43df-84b5-9c8570ff2676-1-7.exe	902c75bfa6bd0a3e1cc5a5835bff88b6	174
Name: ccf13a28-ca14-43df-84b5-9c8570ff2676-1-7.exe MD5: 902c75bfa6bd0a3e1cc5a5835bff88b6 Size: 1.08 MB (1086976 bytes) Detections: 174 Type: Executable File Path: %PROGRAMFILES(x86)%\CinemaPlus12bV14.03 Group: Malware file Last Updated: July 8, 2017
23.	c530f520-a5fd-4c74-9695-5e0926dfd29d-1-7.exe	d8c07c43f056c901a03f6b2a64a24e75	172
Name: c530f520-a5fd-4c74-9695-5e0926dfd29d-1-7.exe MD5: d8c07c43f056c901a03f6b2a64a24e75 Size: 992.72 KB (992728 bytes) Detections: 172 Type: Executable File Path: %PROGRAMFILES%\CinemaPlus12bV07.02 Group: Malware file Last Updated: July 8, 2017
24.	9e66756e-f5ac-44fa-9d64-f69e7aaeda5d-1-6.exe	1ed61be34cfe2e1a76d2d45ce42d816d	120
Name: 9e66756e-f5ac-44fa-9d64-f69e7aaeda5d-1-6.exe MD5: 1ed61be34cfe2e1a76d2d45ce42d816d Size: 1.41 MB (1413096 bytes) Detections: 120 Type: Executable File Path: %PROGRAMFILES%\CinemaP-1.9cV26.01 Group: Malware file Last Updated: January 27, 2015
25.	9e66756e-f5ac-44fa-9d64-f69e7aaeda5d-1-7.exe	501dda7971891acfd1ba6e1876f575c2	90
Name: 9e66756e-f5ac-44fa-9d64-f69e7aaeda5d-1-7.exe MD5: 501dda7971891acfd1ba6e1876f575c2 Size: 1.13 MB (1130472 bytes) Detections: 90 Type: Executable File Path: %PROGRAMFILES%\CinemaP-1.9cV26.01 Group: Malware file Last Updated: January 27, 2015
26.	a20703a4-13e4-4239-901d-b4a4df983103.exe	ba84e0a3b366f415a7accf1fb5e61b5c	20
Name: a20703a4-13e4-4239-901d-b4a4df983103.exe MD5: ba84e0a3b366f415a7accf1fb5e61b5c Size: 358.36 KB (358360 bytes) Detections: 20 Type: Executable File Path: %PROGRAMFILES%\Cinema Video 1.8V27.11 Group: Malware file Last Updated: November 28, 2014
27.	0b44bd0b-211e-47a6-abb2-4978ff37a3bf.exe	6fbc447333000af05b20c76763a1bda6	5
Name: 0b44bd0b-211e-47a6-abb2-4978ff37a3bf.exe MD5: 6fbc447333000af05b20c76763a1bda6 Size: 32.72 KB (32728 bytes) Detections: 5 Type: Executable File Path: %PROGRAMFILES(x86)%\Cinema Video 1.8V27.11 Group: Malware file Last Updated: November 28, 2014

More files

Registry Details

Cinema-Plus may create the following registry entry or registry entries:

Regexp file mask

%windir%\System32\Tasks\cinemaplus-[RANDOM CHARACTERS]

%windir%\Tasks\cinemaplus-[RANDOM CHARACTERS].job

HKEY..\..\..\..{RegistryKeys}

Software\AppDataLow\Software\CinameHDPureV9.5

Software\AppDataLow\Software\CinamHDPureV9.5

Software\AppDataLow\Software\Cinema-DPlus3

Software\AppDataLow\Software\Cinema-Plus-1.2

Software\AppDataLow\Software\Cinema-YB1.1

Software\AppDataLow\Software\CinemaD-V1

Software\AppDataLow\Software\CinemaDPV1

Software\AppDataLow\Software\CinemaHD-V1.1

Software\AppDataLow\Software\CinemaHDplus-V1.8

Software\AppDataLow\Software\CinemaHplus-V1.2

Software\AppDataLow\Software\CinemaP-1.4

Software\AppDataLow\Software\HD+V1.0

Software\AppDataLow\Software\HDCinemaPlus1.6

Software\AppDataLow\Software\HQ-Cinema1.3

Software\AppDataLow\Software\I - Cinema

Software\AppDataLow\Software\Rewin Cinema

Software\AppDataLow\Software\Rewin_Cinematic 1.1

SOFTWARE\CinameHDPureV9.5

SOFTWARE\CinamHDPureV9.5

SOFTWARE\Cinema-Plus-1.2

SOFTWARE\Cinema-Plus-1.2-nv

SOFTWARE\CinemaHDplus-V1.8

SOFTWARE\CinemaHplus-V1.2

SOFTWARE\CinemaP-1.4

SOFTWARE\CinemaPlus_1.3dV09.08

SOFTWARE\CiPlus-4.5vV25.10

SOFTWARE\Classes\092950600ea001325d04029365df3cb90063831.BHO

SOFTWARE\Classes\092950600ea001325d04029365df3cb90063831.BHO.1

SOFTWARE\Classes\092950600ea001325d04029365df3cb90063831.Sandbox

SOFTWARE\Classes\092950600ea001325d04029365df3cb90063831.Sandbox.1

SOFTWARE\Classes\121297d1dd3e4c3496a131580b7cb1830065759.BHO

SOFTWARE\Classes\121297d1dd3e4c3496a131580b7cb1830065759.BHO.1

SOFTWARE\Classes\121297d1dd3e4c3496a131580b7cb1830065759.Sandbox

SOFTWARE\Classes\121297d1dd3e4c3496a131580b7cb1830065759.Sandbox.1

SOFTWARE\Classes\255ab810f328013182ce5118752c52d60061762.BHO

SOFTWARE\Classes\255ab810f328013182ce5118752c52d60061762.BHO.1

SOFTWARE\Classes\255ab810f328013182ce5118752c52d60061762.Sandbox

SOFTWARE\Classes\255ab810f328013182ce5118752c52d60061762.Sandbox.1

SOFTWARE\Classes\c703ac9000fc0132bde2554c934480e20062998.BHO

SOFTWARE\Classes\c703ac9000fc0132bde2554c934480e20062998.BHO.1

SOFTWARE\Classes\c703ac9000fc0132bde2554c934480e20062998.Sandbox

SOFTWARE\Classes\c703ac9000fc0132bde2554c934480e20062998.Sandbox.1

Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinameHDPureV9.5

Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\CinamHDPureV9.5

Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\Cinema-Plus-1.2

Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\I - Cinema

SOFTWARE\HQ-Cinema1.3

SOFTWARE\I - Cinema

SOFTWARE\I - Cinema-nv

Software\InstalledBrowserExtensions\30935

Software\InstalledBrowserExtensions\CinameHDPure

Software\InstalledBrowserExtensions\CinamHDPure

Software\InstalledBrowserExtensions\Cinema Plus

Software\InstalledBrowserExtensions\CinemaPlus_1.3dV09.08

Software\InstalledBrowserExtensions\CinemAPP

Software\InstalledBrowserExtensions\CiPlus-4.5vV25.10

SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\CinamHDPureV9.5-bg.exe

SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Cinema-Plus-1.2-bg.exe

SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\I - Cinema-bg.exe

SOFTWARE\Rewin Cinema

SOFTWARE\Rewin_Cinematic 1.1

SOFTWARE\Wow6432Node\Cinema-Plus-1.2

SOFTWARE\Wow6432Node\Cinema-Plus-1.2-nv

SOFTWARE\Wow6432Node\CinemaHDplus-V1.8

SOFTWARE\Wow6432Node\CinemaP-1.4

SOFTWARE\Wow6432Node\CinemaPlus_1.3dV09.08

SOFTWARE\Wow6432Node\CiPlus-4.5vV25.10

SOFTWARE\Wow6432Node\HDCinemaPlus1.6

SOFTWARE\Wow6432Node\HQ-Cinema1.3

SOFTWARE\Wow6432Node\I - Cinema

SOFTWARE\Wow6432Node\I - Cinema-nv

SOFTWARE\Wow6432Node\InstalledBrowserExtensions\30935

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\CinamHDPureV9.5-bg.exe

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\Cinema-Plus-1.2-bg.exe

SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION\I - Cinema-bg.exe

SOFTWARE\Wow6432Node\Rewin Cinema

SOFTWARE\Wow6432Node\Rewin_Cinematic 1.1

HKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}

CinemaHDplus-V1.8

CinemaP-1.4

CinemaPlus_1.3dV09.08

CiPlus-4.5vV25.10

Rewin Cinema

Rewin_Cinematic 1.1

Directories

Cinema-Plus may create the following directory or directories:

%PROGRAMFILES%\CiPlus-4.5vV25.10

%PROGRAMFILES%\CinamHDPureV9.5

%PROGRAMFILES%\CinameHDPureV9.5

%PROGRAMFILES%\Cinema 4u

%PROGRAMFILES%\Cinema Video 1.8V27.11

%PROGRAMFILES%\Cinema-DPlus2

%PROGRAMFILES%\CinemaHD-V1.1

%PROGRAMFILES%\CinemaP-1.4

%PROGRAMFILES%\CinemaPlus_1.3dV09.08

%PROGRAMFILES%\HD+V1.0

%PROGRAMFILES%\I - Cinema

%PROGRAMFILES%\Rewin Cinema

%PROGRAMFILES%\Rewin_Cinematic 1.1

%PROGRAMFILES(X86)%\CiPlus-4.5vV25.10

%PROGRAMFILES(x86)%\CinamHDPureV9.5

%PROGRAMFILES(x86)%\CinameHDPureV9.5

%PROGRAMFILES(x86)%\Cinema 4u

%PROGRAMFILES(x86)%\Cinema-DPlus2

%PROGRAMFILES(x86)%\CinemaDPV1

%PROGRAMFILES(x86)%\CinemaHD-V1.1

%PROGRAMFILES(x86)%\CinemaP-1.4

%PROGRAMFILES(x86)%\HC-inemA3

%PROGRAMFILES(x86)%\HD+V1.0

%PROGRAMFILES(x86)%\HDCinemaPlus1.6

%PROGRAMFILES(x86)%\HQ-Cinema1.3

%PROGRAMFILES(x86)%\I - Cinema

%PROGRAMFILES(x86)%\Rewin Cinema

%PROGRAMFILES(x86)%\Rewin_Cinematic 1.1

Enigma Software Group Prevails Over Malwarebytes at the Ninth Circuit

Search

Change Region

Cinema-Plus

Threat Scorecard

EnigmaSoft Threat Scorecard

Aliases

SpyHunter Detects & Remove Cinema-Plus

File System Details

Registry Details

Directories

Submit Comment

Trending

'YouPorn' Email Scam

Safe Search Eng

Findtheirreport.com

Most Viewed

Is Lookmovie.io Safe?

How To Fix 'Printer Driver is Unavailable' Error

Discord Shows Black Screen when Sharing Screen