home

avira-de-cleaner.exe

Avira GmbH

This is a setup program which is used to install the application. This is installed with multiple programs including Avira Update Manager. The file has been seen being downloaded from shop.avira.com and multiple other hosts.
Publisher:
Avira GmbH  (signed and verified)

MD5:
2b21ab11874ae169906fee1dbde6d3d0

SHA-1:
d7e595611155944dfe5454a9205560ba9ce36fa1

SHA-256:
21658244d4514fbccb9c6b6eecc467d968a1b76054e3198b5c79871b1b64614a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/13/2025 4:07:06 AM UTC  (today)

File size:
863.1 KB (883,840 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\avira-de-cleaner.exe

Digital Signature
Signed by:
Avira GmbH

Authority:
VeriSign, Inc.

Valid from:
2/11/2009 1:00:00 AM

Valid to:
2/12/2012 12:59:59 AM

Subject:
CN=Avira GmbH, OU=Development 2009, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Avira GmbH, L=Tettnang, S=Baden-Wuerttemberg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
75E809361DAFBE7BD72E0E5BB7659552

File PE Metadata
Compilation timestamp:
7/22/2010 7:12:42 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:oo4GwRsetiFxX5MMllKtDvr2So7drH2BoKjt:ooIji75VlADvr291H2Pjt

Entry address:
0xA7B1

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, EC, 2B, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, D0, A7, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, AF, AC, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 44, 22, 41, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 48, 22, 41, 00, 8D, 45, E4...
 
[+]

Code size:
66 KB (67,584 bytes)

The file avira-de-cleaner.exe has been discovered within the following programs.

Avira Update Manager  by Avira GmbH
Publisher's description - “Automatic download utility for keeping Avira products up-to-date. Avira Update Manager lets you download updates for many of your Avira products conveniently and automatically from the Internet.”
www.avira.com/en/download/product/avira-update-manager
12% remove it
TP-LINK TL-WN725N_TL-WN723N Treiber  by TP-LINK
www.TP-LINK.com
About 6% of users remove it
 
Powered by Should I Remove It?

The file avira-de-cleaner.exe has been seen being distributed by the following 3 URLs.

https://shop.avira.com/30/cookie?affiliate=21308&redirectto=https://dl.web.de/.../Avira-DE-Cleaner.exe

https://dl.web.de/.../Avira-DE-Cleaner.exe

http://dl.cdn.chip.de/downloads/.../Avira-DE100-Cleaner.exe

Scan avira-de-cleaner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.