home

uninstall.exe

Window Power Tools 2012

Dr Salman Zafar

The application uninstall.exe, “Window Power Tools 2012 Setup” by Dr Salman Zafar has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program Window Power Tools 2012 by Digital Millenium Inc. This file is typically installed with the program Window Power Tools 2012 by Digital Millenium Inc.
Publisher:
Digital Millenium Inc  (signed by Dr Salman Zafar)

Product:
Window Power Tools 2012

Description:
Window Power Tools 2012 Setup

Version:
2012.7.11

MD5:
1e64abaf6e739eb2392bcafffcb19d78

SHA-1:
e2786fda3c1e8d18775e16ec85e2f12f4190ed0e

SHA-256:
9608001918c34e389ce7aa848020909404ea403fe607d6883caaf86d74d72cb4

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 9:02:36 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DrSalman.Installer (M)
16.5.15.4

File size:
134.1 KB (137,368 bytes)

Product version:
2012.7.11

Copyright:
Copyright © 2012 Digital Millenium Inc

Original file name:
drptools.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\window power tools 2012\uninstall.exe

Digital Signature
Signed by:
Dr Salman Zafar

Authority:
COMODO CA Limited

Valid from:
5/3/2012 7:00:00 AM

Valid to:
5/4/2013 6:59:59 AM

Subject:
CN=Dr Salman Zafar, O=Dr Salman Zafar, STREET=8 Achilles Road, L=Coventry, S=West Midlands, PostalCode=CV6 7NH, C=GB

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
7BDC15504020A97470E73278B5718D59

File PE Metadata
Compilation timestamp:
2/1/2011 12:44:13 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
3072:s8lSRC9Z/eSoGbXPuCI34bbF/A5rRCTr8ikU+61+RzY7P/K5:hlSRC9ZeSoGLM4fF45rIv8Bzv5

Entry address:
0x1D20

Entry point:
55, 8B, EC, 6A, FF, 68, 28, 21, 40, 00, 68, A0, 1E, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 68, 53, 56, 57, 89, 65, E8, 33, DB, 89, 5D, FC, 6A, 02, FF, 15, 88, 20, 40, 00, 59, 83, 0D, 54, 35, 40, 00, FF, 83, 0D, 58, 35, 40, 00, FF, FF, 15, 84, 20, 40, 00, 8B, 0D, CC, 32, 40, 00, 89, 08, FF, 15, 80, 20, 40, 00, 8B, 0D, C8, 32, 40, 00, 89, 08, A1, 7C, 20, 40, 00, 8B, 00, A3, 5C, 35, 40, 00, E8, 10, 01, 00, 00, 39, 1D, BC, 32, 40, 00, 75, 0C, 68, 9C, 1E, 40, 00, FF, 15, 78, 20...
 
[+]

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
4 KB (4,096 bytes)

Program Uninstaller
Program name:
Window Power Tools 2012

Display publisher:
Digital Millenium Inc

Display version:
2012.7.11

Uninstall string:
C:\Program Files (x86)\Window Power Tools 2012\uninstall.exe


The file uninstall.exe has been discovered within the following program.

Window Power Tools 2012  by Digital Millenium Inc
dmisoftware.com
About 9% of users remove it
 
Powered by Should I Remove It?

Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.