home

unins000.exe

TUTO4PC COM INTERNATIONAL SL

This is the Eorezo installer which may include software offers for unwanted programs including toolbars. The application unins000.exe by TUTO4PC COM INTERNATIONAL SL has been detected as adware by 25 anti-malware scanners. This is the uninstaller utility registered in the Windows Control Panel for the program GamesDesktop 025.252 by GAMESDESKTOP.
Publisher:
TUTO4PC COM INTERNATIONAL SL  (signed and verified)

Description:
Setup/Uninstall

Version:
51.52.0.0

MD5:
3822eb4f301635abf68bd2ad05518925

SHA-1:
4263f4d074ab2168f2165e450c5ef922b7076acc

SHA-256:
828fc0b846eaa22f469c65b87e249d0f58141220bc96920372222aeda0aba090

Scanner detections:
25 / 68

Status:
Adware

Analysis date:
4/19/2024 5:46:54 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Adware.Eorezo.CD
5744720

Agnitum Outpost
PUA.Downware
7.1.1

AhnLab V3 Security
PUP/Win32.Eorezo
2015.06.09

Avira AntiVirus
ADWARE/EoRezo.bonc
8.3.1.6

Arcabit
Adware.Eorezo.CD
1.0.0.425

Baidu Antivirus
Adware.Win32.EoRezo
4.0.3.15610

Bitdefender
Adware.Eorezo.CD
1.0.20.805

Bkav FE
W32.HfsAdware
1.3.0.6379

Comodo Security
ApplicUnwnt
22386

Dr.Web
Adware.Downware.10585
9.0.1.05190

Emsisoft Anti-Malware
Adware.Eorezo.CD
10.0.0.5366

F-Secure
Adware.Eorezo.CD
5.14.151

G Data
Adware.Eorezo.CD
15.6.25

K7 AntiVirus
Riskware
13.204.16176

McAfee
Artemis!3822EB4F3016
5600.6738

MicroWorld eScan
Adware.Eorezo.CD
16.0.0.483

Norman
Adware.Eorezo.CD
02.06.2015 14:23:46

nProtect
Adware.Eorezo.CD
15.06.08.01

Panda Antivirus
Trj/CI.A
15.06.10.09

Qihoo 360 Security
Win32/Virus.Adware.600
1.0.0.1015

Reason Heuristics
PUP.Installer.Eorezo
15.2.24.2

Sophos
PUA 'TUTO4PC'
5.15

Trend Micro House Call
TROJ_GEN.R047C0OC315
7.2.161

Trend Micro
TROJ_GEN.R047C0OC315
10.465.10

VIPRE Antivirus
Threat.4895339
40830

File size:
689.5 KB (706,056 bytes)

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\gmsd_us_252\unins000.exe

Digital Signature
Signed by:
TUTO4PC COM INTERNATIONAL SL

Authority:
GlobalSign nv-sa

Valid from:
6/3/2014 1:55:26 AM

Valid to:
7/28/2015 5:19:10 AM

Subject:
E=contact@tutoriales100.com, CN=TUTO4PC COM INTERNATIONAL SL, O=TUTO4PC COM INTERNATIONAL SL, L=BARCELONA, C=ES

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121C8382D4ADA7C0F9495915A4D5B4D8C97

File PE Metadata
Compilation timestamp:
6/19/1992 3:22:17 PM

OS version:
1.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:+TPcYn5c/rPx37/zHBA6a5UeYpChr1CERdSrNdyR6D3o1ammx9J:+PcYn5c/rPx37/zHBA6pFpCZ1CEuD3ow

Entry address:
0x98CFC

Entry point:
55, 8B, EC, 83, C4, F4, 53, 56, 57, E8, 3A, A6, F6, FF, E8, 91, C9, F6, FF, E8, 08, D6, F6, FF, E8, AB, D6, F6, FF, E8, 2E, 0C, F7, FF, E8, 41, 7A, F7, FF, E8, A4, 7C, F7, FF, E8, FB, 9B, F7, FF, E8, 0E, 03, F8, FF, E8, 09, C2, F8, FF, E8, CC, 69, F9, FF, E8, B3, 7C, F9, FF, E8, FE, 69, FB, FF, E8, C5, 6E, FB, FF, E8, C4, 76, FB, FF, E8, A3, 8A, FB, FF, E8, 96, A4, FB, FF, E8, 55, E3, FB, FF, E8, 54, F2, FB, FF, E8, 67, 05, FC, FF, E8, 86, B8, FC, FF, E8, D5, 40, FD, FF, E8, FC, FF, FD, FF, E8, 5F, B3, FE...
 
[+]

Entropy:
6.5196

Developed / compiled with:
Microsoft Visual C++

Code size:
608 KB (622,592 bytes)

Program Uninstaller
Program name:
GamesDesktop 025.252

Display publisher:
GAMESDESKTOP

Uninstall string:
"C:\Program Files (x86)\gmsd_us_252\unins000.exe"


Remove unins000.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.