» eUninstall.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

eUninstall.exe

eCyber

Taiwan Shui Mu Chih Ching Technology Limited

The application eUninstall.exe, “eCyber uninstall application” by Taiwan Shui Mu Chih Ching Technology Limited has been detected as adware by 2 anti-malware scanners. This is the uninstaller utility registered in the Windows Control Panel for the program WinZipper by Taiwan Shui Mu Chih Ching Technology Limited.. This file is typically installed with the program WinZipper by Taiwan Shui Mu Chih Ching Technology Limited. which is a potentially unwanted software program.

File name:

eUninstall.exe

Publisher:

Taiwan Shui Mu Chih Ching Technology Limited. (signed by Taiwan Shui Mu Chih Ching Technology Limited)

Product:

eCyber

Description:

eCyber uninstall application

Version:

1.5.29.8409

MD5:

b0d7be11f149bb35c3e0ea439a82dc53

SHA-1:

001ad009d21684e36e190e1e3bb071f86278b397

SHA-256:

5bcfa086ba89ee4dc347d7b31a3284dc2a8cf959b8c9b518d7293ee5c05b979f

Scanner detections:

2 / 68

Status:

Adware

Analysis date:

1/1/2026 9:07:11 PM UTC (today)

Scan engine

Detection

Engine version

Comodo Security

TrojWare.Win32.Trojan.Agent.Gen

17350

Reason Heuristics

PUP.TaiwanShuiMuChihChingTechnologyLimited.K

14.4.8.23

File size:

1.1 MB (1,148,560 bytes)

Product version:

1.5.29.8409

Original file name:

eUninstall.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\winzipper\euninstall.exe

Digital Signature

Signed by:

Taiwan Shui Mu Chih Ching Technology Limited

Authority:

GlobalSign nv-sa

Valid from:

3/13/2013 9:15:13 AM

Valid to:

3/14/2014 9:15:13 AM

Subject:

CN=Taiwan Shui Mu Chih Ching Technology Limited, O=Taiwan Shui Mu Chih Ching Technology Limited, L=新北, S=台湾, C=TW

Issuer:

CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:

1121243D90C81CD8FEC70E99813154FB6459

File PE Metadata

Compilation timestamp:

2/26/2014 9:46:21 AM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

24576:KF6NaIlB+qab8PGs/r22FqTS1PiWUzrWA:kCkU/rpFqTS1PifXr

Entry address:

0x95598

Entry point:

E8, 40, 66, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 10, FF, 75, 0C, 8D, 4D, F0, E8, 3C, F9, FF, FF, 8B, 45, F0, 83, B8, AC, 00, 00, 00, 01, 7E, 13, 8D, 45, F0, 50, 6A, 04, FF, 75, 08, E8, A9, 66, 00, 00, 83, C4, 0C, EB, 10, 8B, 80, C8, 00, 00, 00, 8B, 4D, 08, 0F, B7, 04, 48, 83, E0, 04, 80, 7D, FC, 00, 74, 07, 8B, 4D, F8, 83, 61, 70, FD, C9, C3, 8B, FF, 55, 8B, EC, 83, 3D, 48, C3, 4F, 00, 00, 75, 12, 8B, 45, 08, 8B, 0D, 08, 6C, 4F, 00, 0F, B7, 04, 41, 83, E0, 04, 5D, C3, 6A, 00, FF, 75, 08... 
[+]

Entropy:

6.4158

Code size:

751 KB (769,024 bytes)

Program Uninstaller

Program name:

WinZipper

Display publisher:

Taiwan Shui Mu Chih Ching Technology Limited.

Display version:

1.5.29

Uninstall string:

C:\Program Files\WinZipper\eUninstall.exe

The file eUninstall.exe has been discovered within the following programs.

WinZipper by Taiwan Shui Mu Chih Ching Technology Limited.

The free and trial versions bundle various potentually unwanted toolbars and web browser extensions including the AVG Toolbar which modifies the browser's search and home page settings..

www.winzipper.com

75% remove it

Remove eUninstall.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.