home

MalwareRemovalBot.EXE

MalwareRemovalBot Application

Antispyware LLC

The application MalwareRemovalBot.EXE, “MalwareRemovalBot” has been detected as a potentially unwanted program by 10 anti-malware scanners. It runs as a scheduled task under the Windows Task Scheduler triggered daily at a specified time.
Publisher:
Antispyware LLC

Product:
MalwareRemovalBot Application

Description:
MalwareRemovalBot

Version:
1.9.3421.576

MD5:
5a026b67471863dd3d2a58b93cd92786

SHA-1:
05d51d6fbcccd14af535782ea089d07860b616f5

SHA-256:
ad92531f1a921e49ff53c7ff5b613b159ac5f8872fa50ed10e2172029f593649

Scanner detections:
10 / 68

Status:
Potentially unwanted

Analysis date:
4/28/2024 6:32:14 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Agent.pcvm
8.2.1.170

Emsisoft A-Squared
Adware.Win32.MalwareRemovalBot!A2
4.5.0.50

avast!
Win32:Trojan-gen
2014.9-170311

Comodo Security
TrojWare.Win32.TrojanSpy.FakeAV.~DJ
3996

ESET NOD32
Win32/Adware.MalwareRemoval
11.4881

G Data
Win32:Trojan-gen
17.3.19

Norman
W32/FakeAV.W!genr
11.20170311

Panda Antivirus
Suspicious file
17.03.11.01

Prevx
High Risk Fraudulent Security Program
3.0

Sophos
Mal/FakeAV-AO
4.50

File size:
18.9 MB (19,812,352 bytes)

Product version:
1.9.0.0

Copyright:
Copyright ©2007 Antispyware LLC. All rights reserved.

Original file name:
MalwareRemovalBot.EXE

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\malwareremovalbot\malwareremovalbot.exe

File PE Metadata
Compilation timestamp:
1/27/2010 8:39:48 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0xF38A9

Entry point:
E8, 80, F6, 00, 00, E9, 16, FE, FF, FF, 55, 8B, EC, 51, 53, 56, 8B, F1, 33, DB, 3B, F3, 75, 1E, E8, 70, 60, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, 17, EB, FF, FF, 83, C4, 14, 8B, C6, E9, A9, 00, 00, 00, 39, 5D, 08, 57, 77, 1E, E8, 4C, 60, 00, 00, 6A, 16, 5E, 53, 53, 53, 53, 53, 89, 30, E8, F3, EA, FF, FF, 83, C4, 14, 8B, C6, E9, 84, 00, 00, 00, 33, C9, 39, 5D, 10, 88, 1E, 0F, 95, C1, 41, 39, 4D, 08, 77, 09, E8, 1E, 60, 00, 00, 6A, 22, EB, D0, 8B, 4D, 0C, 83, C1, FE, 83, F9, 22, 77, BE, 39, 5D...
 
[+]

Code size:
1.1 MB (1,200,128 bytes)

Scheduled Task
Task name:
MalwareRemovalBot Scheduled Scan

Trigger:
Daily (Runs daily at 03:00)

Description:
Runs MalwareRemovalBot to scan your computer for malicious and potenially unwanted programs.


Remove MalwareRemovalBot.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.