home

uninstall.exe

YourFileDownloader Installer

http://yourfile-downloader.com

This is the Via Advertising bundle installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application uninstall.exe has been detected as a potentially unwanted program by 10 anti-malware scanners. The program is a setup application that uses the YourFile Downloader installer, however the file is not signed with an authenticode signature from a trusted source. This is the uninstaller utility registered in the Windows Control Panel for the program YourFileDownloader by http://yfdownloader.net.com.
Publisher:
http://yourfile-downloader.com

Product:
YourFileDownloader Installer

Version:
1, 0, 509, 1

MD5:
de375c796d1c1e305e661f8f52141da8

SHA-1:
ae7abceb059e762e70244d3b16636cf9400ca97c

SHA-256:
1c5dcfa110f977ba6a3d607e4cd1ab775656a38e5694bae9833f22287edf2b99

Scanner detections:
10 / 68

Status:
Potentially unwanted

Description:
This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:
4/26/2024 5:14:59 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Downloader-UEO [PUP]
2014.9-150830

AVG
Adware Generic_r
2016.0.3002

Bkav FE
W32.HfsAdware
1.3.0.6379

Dr.Web
Adware.Downware.10330
9.0.1.0242

ESET NOD32
Win32/ExpressDownloader.K potentially unwanted application
9.7.0.302.0

herdProtect (fuzzy)
variant of fapk15v646.tmp (Adware)
2015.8.30.2

Malwarebytes
PUP.Optional.Downloader
v2015.08.30.02

Reason Heuristics
Win32.Generic.Via Advertising.Bundler.Meta
15.7.27.15

Sophos
PUA 'Go For Files'
5.12

VIPRE Antivirus
Threat.4758264
38882

File size:
3.8 MB (4,013,016 bytes)

Product version:
1.0.0.1

Copyright:
Copyright http://yourfile-downloader.com (C) 2014

Original file name:
YourFileDownloaderInstaller.exe

File type:
Executable application (Win32 EXE)

Bundler/Installer:
YourFile Downloader

Language:
English

Common path:
C:\Program Files\yourfiledownloader\uninstall.exe

File PE Metadata
Compilation timestamp:
1/23/2015 11:55:09 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
98304:E4uZhR5BEC9PNyGQylE3g+Q/k0PBWgtWL59+q9F:EPZKAPN6yQRQ/RP7tWL5Ue

Entry address:
0x777000

Entry point:
90, 90, B8, 47, B6, C6, 00, 68, 1E, 70, B7, 00, 5E, 90, 90, 68, 98, 05, 00, 00, 5A, 90, 90, 31, 04, 32, 83, EA, 04, 90, 90, 75, F6, 90, AF, CB, C7, 00, 47, B6, C6, 00, 47, B6, 86, 00, 61, 88, 83, 00, 17, 33, FC, 00, 9F, 3D, FC, 00, 47, 06, C4, 00, B8, 49, 39, FF, 5F, E6, 4F, 00, 25, 03, 92, 00, 40, 2D, 4F, 00, 72, 61, F2, 00, 27, 03, D2, 00, 42, 2D, 8F, 00, 5F, 02, F2, 00, 27, 03, D2, 00, 42, 2D, 8F, 00, 47, B6, C6, 00, 47, B6, C6, 00, 47, B6, C6, 00, 47, B6, C6, 00, 47, B6, C6, 00, 47, B6, C6, 00, 47, B6...
 
[+]

Code size:
786 KB (804,864 bytes)

Program Uninstaller
Program name:
YourFileDownloader

Display publisher:
http://yfdownloader.net.com

Display version:
2.15.12

Uninstall string:
"C:\Program Files\YourFileDownloader\Uninstall.exe"


Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.