home

uninst_autocleaner.exe

uninst_autocleaner

UCF

The application uninst_autocleaner.exe by UCF has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program autocleaner by UCF.
Publisher:
UCF  (signed and verified)

Product:
uninst_autocleaner

Description:
uninstaller

Version:
1, 0, 0, 1

MD5:
bc7b35ff55415c00a21f8cd4892f66db

SHA-1:
23ed7e4d42c913322c7ffea501173d29b0556c55

SHA-256:
fc6840cfb0adb08294b7c963485742a2915e559c5321f361281a415fc18cea32

Scanner detections:
1 / 68

Status:
Adware

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
4/26/2024 3:32:12 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.UCF.Installer (M)
16.2.13.10

File size:
179.5 KB (183,832 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 2013 UCF All rights reserved.

Original file name:
uninst_autocleaner.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\autocleaner\uninst_autocleaner.exe

Digital Signature
Signed by:
UCF

Authority:
Thawte, Inc.

Valid from:
7/3/2013 9:00:00 AM

Valid to:
8/3/2014 8:59:59 AM

Subject:
CN=UCF, O=UCF, L=Haewoondae-gu, S=BUSAN, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
5C486B28674FE118251400311CA913D9

File PE Metadata
Compilation timestamp:
10/24/2013 4:26:03 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:hkMNm09FoZIWCB3vH0yglz6SgbrWtE1rZeHgNgW12aGyglwanAFCJ:hZm0hWCBctJ6SAWtE1rZeHCgW11GFmHq

Entry address:
0xBDAB0

Entry point:
60, BE, 00, 40, 49, 00, 8D, BE, 00, D0, F6, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89...
 
[+]

Entropy:
7.8778

Packer / compiler:
UPX 2.90LZMA

Code size:
168 KB (172,032 bytes)

Program Uninstaller
Program name:
autocleaner

Display publisher:
UCF

Display version:
1.2

Uninstall string:
C:\Program Files (x86)\autocleaner\uninst_autocleaner.exe


Remove uninst_autocleaner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.