home

wizsearch_uninstall.exe

corenet

The application wizsearch_uninstall.exe by corenet has been detected as a potentially unwanted program by 22 anti-malware scanners. This is a self-extracting archive and installer and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program WS live webControl. This file is typically installed with the program WizSearch which is a potentially unwanted software program. According to AVG, this software downloads additional adware offers during setup.
Publisher:
corenet  (signed and verified)

MD5:
bede3b2f110ac63e39f6b613cffa3047

SHA-1:
443d516b37cc845d055d681fba3f3b7436a8f374

SHA-256:
f64abd9ca41e5508d073ebad947847c4b2a11a1a4909cdf380a10863bbeba882

Scanner detections:
22 / 68

Status:
Potentially unwanted

Analysis date:
4/27/2024 4:18:26 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Application.Generic.406573
440

AhnLab V3 Security
PUP/Win32.WizSearch
2014.09.04

avast!
Win32:PUP-gen [PUP]
2014.9-151122

AVG
Downloader.Generic13
2016.0.2918

Baidu Antivirus
Adware.Win32.Kraddare
4.0.3.151122

Bitdefender
Application.Generic.406573
1.0.20.1630

Bkav FE
W32.Clod748.Trojan
1.3.0.4959

Comodo Security
UnclassifiedMalware
19413

ESET NOD32
Win32/Adware.Kraddare.BD (variant)
9.10363

Fortinet FortiGate
W32/Dloader.AD!tr
11/22/2015

F-Secure
Application.Generic.406573
11.2015-22-11_1

G Data
Application.Generic.406573
15.11.24

IKARUS anti.virus
Win32.SuspectCrc
t3scan.1.7.5.0

K7 AntiVirus
Adware
13.183.13257

Malwarebytes
Adware.Wizsearch
v2015.11.22.08

McAfee
Artemis!BEDE3B2F110A
5600.6574

MicroWorld eScan
Application.Generic.406573
16.0.0.978

NANO AntiVirus
Riskware.Win32.Kraddare.cxfoha
0.28.2.61942

Panda Antivirus
Trj/CI.A
15.11.22.08

Sophos
Generic PUA EE
4.98

Vba32 AntiVirus
suspected of Trojan.Downloader.gen.h
3.12.26.3

VIPRE Antivirus
Trojan.Win32.Generic
32788

File size:
68.1 KB (69,776 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\wizsearch\wizsearch_uninstall.exe

Digital Signature
Signed by:
corenet

Authority:
Thawte, Inc.

Valid from:
10/4/2011 8:00:00 PM

Valid to:
10/4/2013 7:59:59 PM

Subject:
CN=corenet, O=corenet, L="Uijeongbu-si ", S=Gyeonggi-do, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
61A656767E655D1859C3E6CC8632D65A

File PE Metadata
Compilation timestamp:
6/10/2012 8:53:45 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:+qCJQf+ibvZDmZd/g7IZnvOkAq7t2s2Rjt6HrjKkBEP:VuQFbvZIdvdvzAqmjujKf

Entry address:
0x288D0

Entry point:
60, BE, 00, A0, 41, 00, 8D, BE, 00, 70, FE, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB...
 
[+]

Entropy:
7.8280

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
60 KB (61,440 bytes)

Program Uninstaller
Program name:
WS live webControl

Uninstall string:
C:\Program Files (x86)\WizSearch\WizSearch_Uninstall.exe


The file wizsearch_uninstall.exe has been discovered within the following program.

WizSearch
www.wizsearch.net
74% remove it
 
Powered by Should I Remove It?

Remove wizsearch_uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.