home

pruninst.exe

Desinstalar

Fidel Dali

The executable pruninst.exe has been detected as malware by 12 anti-virus scanners.
Publisher:
Proyecto Redes  (signed by Fidel Dali)

Product:
Desinstalar

Version:
5.07

MD5:
8c0317a47d81099705857e1eb69e0d30

SHA-1:
dcdfc0a154435788413e875366738f3ca0c962e7

SHA-256:
a31375691d122b5aba99a1e3d6442237f2fe968f98c96d91a6aeabfe8daef8cf

Scanner detections:
12 / 68

Status:
Malware

Analysis date:
4/26/2024 10:08:38 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Sality
160518-2

AVG
Win32/Sality
2015.0.4568

Dr.Web
Win32.Sector.30
9.0.1.05190

Emsisoft Anti-Malware
Win32.Sality
9.0.0.4157

ESET NOD32
Win32/Sality.NBA virus
8.0.319.0

F-Prot
W32/Sality.gen2
4.6.5.141

F-Secure
Win32.Sality.3
5.15.96

Kaspersky
Virus.Win32.Sality
15.0.0.562

McAfee
Virus.W32/Sality.gen.z
18.0.204.0

Microsoft Security Essentials
Threat.Undefined
1.223.830.0

Norman
Win32.Sality.3
22.05.2016 07:18:28

Sophos
Virus 'Mal/Sality-D'
5.23

File size:
159.7 KB (163,520 bytes)

Product version:
5.07

Original file name:
pruninst.exe

File type:
Executable application (Win32 EXE)

Language:
Spanish

Common path:
C:\Program Files\cyberplanet\pruninst.exe

Digital Signature
Signed by:
Fidel Dali

Authority:
The USERTRUST Network

Valid from:
7/13/2009 2:00:00 AM

Valid to:
7/14/2010 1:59:59 AM

Subject:
CN=Fidel Dali, O=Fidel Dali, STREET=Ciudad de la Paz 1701 8 A, L=Capital Federal, S=Buenos Aires, PostalCode=1426, C=AR

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
543193D6B1CE0ED14B57CFA580B2F162

File PE Metadata
Compilation timestamp:
12/30/2009 4:50:28 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:oo4E4FPe//IGuhwMApp7/PImytj9Cv7Fk1TvB/+WVE4/Xgr1CVF1q/j90:b4E4FUIRwZzPIMvKTvB/+WVE4/Xaw1q+

Entry address:
0x2F920

Entry point:
B8, 48, 21, 78, BD, BD, 13, 87, 36, 57, 88, ED, 69, D5, 4E, 6D, A8, C9, 84, D0, 8D, 35, 31, 5C, 05, BC, 8D, 3D, 19, C3, 6C, 6E, 15, D2, 0A, A6, 58, 80, E8, B7, 84, FB, 75, 02, 87, F2, 85, D2, 71, 08, FE, C6, C7, C6, E2, 7C, 6C, 93, 69, F2, 9D, D8, EB, 20, 4E, 85, DE, 8B, F1, 0F, AF, F6, 8B, D5, 85, C0, 0F, AF, F5, 87, F6, 8D, 3A, C7, C6, 04, 25, E9, 39, 01, DE, C7, C2, 54, F2, 1C, E8, 13, D7, 57, 4A, 8D, 35, EF, 4B, 6C, 7B, 58, 69, D6, B5, 47, 04, 95, 85, D7, 0F, B6, F2, 87, D6, 50, EB, 03, F6, C5, 02, 5B...
 
[+]

Code size:
48 KB (49,152 bytes)

Windows Firewall Allowed Program
Name:
C:\Archivos de programa\CyberPlanet\pruninst.exe


Remove pruninst.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.