home

unins000.exe

Shield Apps

The application unins000.exe by Shield Apps has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program PC Registry Shield by ShieldApps. This file is typically installed with the program PC Registry Shield by ShieldApps.
Publisher:
Shield Apps  (signed and verified)

Description:
Setup/Uninstall

Version:
51.1052.0.0

MD5:
866dc109a25962067951fdf9a4c91561

SHA-1:
b0491e716c8a74ad588acbb81888509b6fc45fb2

SHA-256:
519682ffbe32ea2cb8e4f904e02a445c8a004dfeff9828b6786be829c0726d8a

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/20/2024 1:11:40 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.12.9.1

File size:
1.1 MB (1,200,744 bytes)

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\pc registry shield\unins000.exe

Digital Signature
Signed by:
Shield Apps

Authority:
COMODO CA Limited

Valid from:
5/24/2012 2:00:00 AM

Valid to:
5/25/2013 1:59:59 AM

Subject:
CN=Shield Apps, O=Shield Apps, STREET="5042 Wilshire blvd #18607", L=Los Angeles, S=California, PostalCode=90036, C=US

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00F905A195D3B1CCF823462D6C5EEECD72

File PE Metadata
Compilation timestamp:
10/9/2012 10:48:23 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:icjJge1JYGhCP3dbTb2XShCFVshuhBcomEl+11szsYx9Zk:2yXALoh+29A

Entry address:
0xFD004

Entry point:
55, 8B, EC, 83, C4, F0, 53, 56, 57, B8, 34, B4, 4F, 00, E8, 25, BF, F0, FF, 6A, EC, A1, EC, 0D, 50, 00, 8B, 00, 8B, 98, 70, 01, 00, 00, 53, E8, B8, CD, F0, FF, 25, 7F, FF, FF, FF, 50, 6A, EC, A1, EC, 0D, 50, 00, 53, E8, 0D, D0, F0, FF, 33, C0, 55, 68, 7F, D0, 4F, 00, 64, FF, 30, 64, 89, 20, 6A, 01, E8, 60, C7, F0, FF, E8, 1F, E1, FF, FF, A1, 6C, B0, 4F, 00, 50, 68, D0, B0, 4F, 00, A1, EC, 0D, 50, 00, 8B, 00, E8, D0, ED, F7, FF, E8, 73, E1, FF, FF, 33, C0, 5A, 59, 59, 64, 89, 10, EB, 19, E9, 5C, 76, F0, FF...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
1007.5 KB (1,031,680 bytes)

Program Uninstaller
Program name:
PC Registry Shield

Display publisher:
ShieldApps

Display version:
2.0

Uninstall string:
"C:\Program Files\PC Registry Shield\unins000.exe" /silent


The file unins000.exe has been discovered within the following program.

PC Registry Shield  by ShieldApps
This is 'registry cleaner' is supposed to optimize a computer by removing invalid registry entries as well as provides some additional utilities.
pcregistryshield.com
49% remove it
 
Powered by Should I Remove It?

Remove unins000.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.