home

Uninstall.exe

Crime Watch

Great Apps

This is the uninstall module for the Injekt branded web browser extension program which injects advertising in the web browser as well as modifies the browser settings. The uninstaller is registered within Control Panel > Add/Remove Programs. The application Uninstall.exe, “Crime Watch Uninstall” by Great Apps has been detected as adware by 12 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program CrimeWatch by Great Apps. It will plug into the web browser and display context-based advertisements by overwriting existing ads or by inserting new ones on various web pages.
Publisher:
Great Apps  (signed and verified)

Product:
Crime Watch

Description:
Crime Watch Uninstall

Version:
1.0.0.0

MD5:
a2b74b44ede24b75e78d3d0216d29261

SHA-1:
8e88d279a34e3ed837fcd2683ca264dbce85f346

SHA-256:
c6d434892a65de843dbcc26f8cd7dd99b900d6f91d114ceaed4b1dbb5cdba9ad

Scanner detections:
12 / 68

Status:
Adware

Explanation:
Injects display ads (banner ads), in-text ads, interstitial ads, or other types of ads in the web browser as well as alters the browsers settings (home page, search, DNS, and security protocols).

Analysis date:
4/26/2024 2:51:58 PM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
PUP/Win32.PullUpdate
2015.10.21

Avira AntiVirus
ADWARE/PullUpdate.Gen7
8.3.2.2

AVG
Generic
2016.0.2913

Baidu Antivirus
Adware.MSIL.PullUpdate
4.0.3.151127

Bkav FE
W32.HfsAdware
1.3.0.7237

Dr.Web
Trojan.Yontoo.2617
9.0.1.0331

ESET NOD32
MSIL/Adware.PullUpdate.J.gen (variant)
9.12437

IKARUS anti.virus
Trojan.Win32.SelfDel
t3scan.1.9.5.0

Malwarebytes
PUP.Optional.CrimeWatch
v2015.11.27.02

Reason Heuristics
PUP.Injekt.GreatApps.Installer (M)
15.11.27.2

Rising Antivirus
PE:Trojan.BrowseFox!1.A1FD[F1]
23.00.65.151125

SUPERAntiSpyware
PUP.CrimeWatch/Variant
9483

File size:
650.9 KB (666,536 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © Great Apps 2015

Original file name:
Uninstall.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\ProgramData\crimewatch\uninstall.exe

Digital Signature
Signed by:
Great Apps

Authority:
Symantec Corporation

Valid from:
9/15/2015 8:00:00 PM

Valid to:
2/22/2016 6:59:59 PM

Subject:
CN=Great Apps, O=Great Apps, L=St. Michael, S=St. Michael, C=BB

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
186AE673D91965AFED84974D28FE890A

File PE Metadata
Compilation timestamp:
11/25/2015 12:43:24 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:LgQcjwD6TdeuAyao7ddzR4K+P1hzCw5Z9TPqMXFIlRxMqmow:tcja6JWgdMRNF3vuMq7w

Entry address:
0x840CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.7164

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
520.5 KB (532,992 bytes)

Program Uninstaller
Program name:
CrimeWatch

Display publisher:
Great Apps

Display version:
3.0.88

Uninstall string:
"C:\ProgramData\CrimeWatch\uninstall.exe"


Remove Uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.