home

uninstaller.exe

Strong Signal

This is the installer/setup program for a Yontoo adware component, a web browser plugin that injects unwanted ads in the browser. The application uninstaller.exe by Strong Signal has been detected as adware by 28 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program Strong Signal by Strong Signal. Additionally, the file is typically installed by a number of programs including Strong Signal by Yontoo Technology, Inc. and Buzzdock by Alactro LLC, both potentially unwanted software. It will plug into the web browser and display context-based advertisements by overwriting existing ads or by inserting new ones on various web pages.
Publisher:
Strong Signal  (signed and verified)

Version:
2.0.5530.28005

MD5:
b44e86c33d3a5b6ef2478644801a542b

SHA-1:
4514df37f7aba13ba4731dbe9e7e3cb66be182b5

SHA-256:
7e4a5e0e734d83086de10c5533263064132f3849c94138e08f57247a83fc06c7

Scanner detections:
28 / 68

Status:
Adware

Explanation:
Injects advertising in the web browser in various formats.

Analysis date:
4/25/2024 4:35:46 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Dropped:Adware.BrowseFox.DI
5814309

Avira AntiVirus
ADWARE/BrowseFox.314800.10
8.3.2.4

avast!
BrowseFox-JP [PUP]
151217-3

AVG
Generic
2016.0.2890

Baidu Antivirus
Adware.Win32.BrowseFox
4.0.3.151220

Bitdefender
Dropped:Adware.BrowseFox.DI
1.0.20.1770

Bkav FE
W32.HfsAdware
1.3.0.7383

Clam AntiVirus
Win.Adware.Browsefox-725
0.98/21181

Dr.Web
Trojan.Yontoo.1735
9.0.1.05190

Emsisoft Anti-Malware
Dropped:Adware.BrowseFox.DI
10.0.0.5366

ESET NOD32
Win32/BrowseFox.BO potentially unwanted application
7.0.302.0

F-Secure
Dropped:Adware.BrowseFox.DI
11.2015-20-12_1

G Data
Dropped:Adware.BrowseFox.DI
15.12.25

herdProtect (fuzzy)
variant of 5c01473a_stp.exe (Adware)
2015.7.4.21

K7 AntiVirus
Unwanted-Program
13.212.18074

Kaspersky
not-a-virus:HEUR:AdWare.NSIS.BrowseFox
14.0.0.943

Malwarebytes
PUP.Optional.StrongSignal
v2015.12.20.09

McAfee
Trojan.Artemis!B44E86C33D3A
18.0.204.0

MicroWorld eScan
Dropped:Adware.BrowseFox.DI
16.0.0.1062

NANO AntiVirus
Trojan.Win32.Yontoo.dvtoou
1.0.10.5081

Norman
Dropped:Adware.BrowseFox.DI
17.12.2015 06:34:11

nProtect
Dropped:Adware.BrowseFox.DI
15.12.10.01

Panda Antivirus
PUP/StrongSignal
15.12.20.09

Reason Heuristics
PUP.Installer.Yontoo
15.3.30.22

Rising Antivirus
PE:Adware.BrowseFox!1.A1B7 [F]
23.00.65.151218

Sophos
PUA 'Browse Fox'
5.22

SUPERAntiSpyware
PUP.BrowseFox/Variant
9436

VIPRE Antivirus
Threat.4741131
45918

File size:
307.4 KB (314,800 bytes)

Product version:
2015.02.21

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\Program Files\strong signal\uninstaller.exe

Digital Signature
Signed by:
Strong Signal

Authority:
VeriSign, Inc.

Valid from:
12/11/2014 6:00:00 PM

Valid to:
12/12/2015 5:59:59 PM

Subject:
CN=Strong Signal, O=Strong Signal, L=San Diego, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
5047EE0477D4F273DFC93DB8A749B9E0

File PE Metadata
Compilation timestamp:
6/4/2014 6:58:31 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:mQ3LJLDU3nM3DoFFjuvf/toNQ8dqLuJoU0U7Hd8CntQOHHM+HFFTjXdpNnT2d:/ho3nM3D0Fw/tN8dkmLtpHHHrh7G

Entry address:
0x31E4

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, E0, 73, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, B8, 6C, 44, 00, E8, 1B, 25, 00, 00, 53, 68, 60, 01, 00, 00, A3, C0, 6B, 44, 00, 8D, 44, 24, 38, 50, 53, 68, DB, 73, 40, 00, FF, 15, 58, 71, 40, 00, 68, D0, 73, 40, 00, 68, C0, 2B, 44, 00, E8, 0D, 24, 00, 00, FF, 15, AC, 70, 40, 00, 50, BF, 00, F0, 46, 00, 57, E8, FB, 23, 00, 00...
 
[+]

Entropy:
7.9337

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

Program Uninstaller
Program name:
Strong Signal

Display publisher:
Strong Signal

Display version:
2.0.5530.28005

Uninstall string:
"C:\Program Files\Strong Signal\uninstaller.exe" /ut RM


The file uninstaller.exe has been discovered within the following programs.

Buzzdock  by Alactro LLC
This is a web browser extension that injects advertising. From the EULA: "Buzzdock is free to download and use. Buzzdock is supported by advertising, and users will see additional ads on websites where Buzzdock features operate.
www.buzzdock.com/faq-support
79% remove it
Strong Signal  by Yontoo Technology, Inc.
From Yontoo's License Agreement: "The Software is supported by several forms of advertising, which will be displayed as you use your browsers, including, without limitation, banner and video ads, in-text ads and links, web browsing-related ads, interstitial, transitional, search, and full page ads.
www.mystrongsignal.com/support
79% remove it
 
Powered by Should I Remove It?

Remove uninstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.