home

Adware-Removal-Tool-v3.5.exe

Adware Removal Tool

TechSupportAll

The application Adware-Removal-Tool-v3.5.exe has been detected as a potentially unwanted program by 26 anti-malware scanners. The file has been seen being downloaded from www.techsupportall.com and multiple other hosts.
Publisher:
TechSupportAll

Product:
Adware Removal Tool

Version:
3.5.0.0

MD5:
a13d867e0ce2db4027f2a2a44f1a31ce

SHA-1:
d275573dc1b7843d40c24298bc20e3c6af454ae5

SHA-256:
45d29ec89cdc30319ad99400d4b2e8cb68266100b89803f0d9821208c9139fe3

Scanner detections:
26 / 68

Status:
Potentially unwanted

Analysis date:
11/5/2024 10:00:53 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Strictor.29924
1151

AVG
Win32/DH
2014.0.3643

Baidu Antivirus
Trojan.Win32.Fednu
4.0.3.131126

Bitdefender
Gen:Variant.Strictor.29924
1.0.20.1180

Bkav FE
W32.Clod26d.Trojan
1.3.0.4613

Comodo Security
UnclassifiedMalware
17498

Dr.Web
Trojan.StartPage.55411
9.0.1.0236

Emsisoft Anti-Malware
Gen:Variant.Strictor.29924
8.13.08.24.01

Fortinet FortiGate
Grp.GE!tr
11/26/2013

F-Secure
Gen:Variant.Strictor.29924
11.2013-26-11_3

G Data
Gen:Variant.Strictor.29924
13.8.22

IKARUS anti.virus
Win32.SuspectCrc
t3scan.2.2.29

K7 AntiVirus
Riskware
13.174.10623

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.3768

Malwarebytes
Backdoor.Bot
v2013.11.26.01

McAfee
RDN/Generic.grp!ge
5600.7176

MicroWorld eScan
Gen:Variant.Strictor.29924
14.0.0.708

NANO AntiVirus
Trojan.Win32.AVKill.coewxb
0.28.0.57029

Norman
Troj_Generic.OJXNG
11.20130824

Panda Antivirus
Suspicious file
13.08.24.01

Reason Heuristics
PUP.TechSupportAll.X
14.3.1.0

Rising Antivirus
PE:Trojan.Win32.Fednu.ujp!1075352388
23.00.65.13822

Trend Micro House Call
TROJ_GEN.F0C2C00JJ13
7.2.236

Trend Micro
TROJ_GEN.F0C2C00JJ13
10.465.26

Vba32 AntiVirus
Trojan.RAR.Qhost
3.12.24.3

VIPRE Antivirus
Trojan.Win32.Generic
24746

File size:
82.1 KB (84,030 bytes)

Product version:
3.5.0.0

Copyright:
2015

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\adware-removal-tool-v3.5.exe

File PE Metadata
Compilation timestamp:
11/23/2011 4:41:46 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
6.0

CTPH (ssdeep):
1536:ymKmUrOPocdoUtO7iuchydcu9CPCouPvmXnoZkrehA:zd0Zc+CPCouPvmXoZkr9

Entry address:
0x5C8E

Entry point:
55, 8B, EC, 6A, FF, 68, 10, D1, 40, 00, 68, 04, 84, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 10, 53, 56, 57, 89, 65, E8, FF, 15, 38, D0, 40, 00, 33, D2, 8A, D4, 89, 15, D0, 0C, 41, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, CC, 0C, 41, 00, C1, E1, 08, 03, CA, 89, 0D, C8, 0C, 41, 00, C1, E8, 10, A3, C4, 0C, 41, 00, 6A, 00, E8, E4, 25, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, 9A, 00, 00, 00, 59, 83, 65, FC, 00, E8, 04, 11, 00, 00, FF, 15, 34, D0, 40, 00, A3, E4, 4C, DE, 00, E8...
 
[+]

Entropy:
6.5319

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
48 KB (49,152 bytes)

The file Adware-Removal-Tool-v3.5.exe has been seen being distributed by the following 4 URLs.

http://www.techsupportall.com/Adware-Removal-Tool-v3.5.exe

https://dl.dropboxusercontent.com/s/.../Adware-Removal-Tool-v3.5.exe

http://techsupportall.net/.../Adware-Removal-Tool-v3.5.exe

http://www.techsupportall.com/download/.../Adware-Removal-Tool-v3.5.exe

Remove Adware-Removal-Tool-v3.5.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.