home

adwcleaner.exe

AdwCleaner from Xplode is a free application designed to search for and remove adware such as browser toolbars and other potentially unwanted programs and specifically targets software that is bundled with free programs that you download from the web. This is a setup program which is used to install the application. It runs as a scheduled task under the Windows Task Scheduler. The file has been seen being downloaded from download.bleepingcomputer.com and multiple other hosts.
Version:
3.0.0.6

MD5:
5611140e8cc5927d371c27ea1f9e71a6

SHA-1:
c3f742287cb7763238432fddddc2eb475265ae29

SHA-256:
cbb3b36d00ea3597ac9d4515740d7cb2fcff1a6a60ebdfa418dca7f792b17ac5

Scanner detections:
3 / 68

Status:
Clean  (3 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
11/5/2024 2:20:27 PM UTC  (today)

Scan engine
Detection
Engine version

F-Prot
W32/Undefined.Threat
v6.4.7.1.166

Rising Antivirus
AU3SCRIPT:Dropper.Insrun!1.9E21
23.00.65.131216

Trend Micro House Call
TROJ_GEN.F47V1001
7.2.352

File size:
1020.7 KB (1,045,226 bytes)

File type:
Executable application (Win32 EXE)

Language:
French (France)

Common path:
C:\users\{user}\downloads\adwcleaner.exe

File PE Metadata
Compilation timestamp:
1/29/2012 4:32:28 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:uthEVaPqLBDr4eJcxmsmhXiCYssIt2ws7GkyIs6/zVI:2EVUcBDMXnkyC+q36+

Entry address:
0xB5E60

Entry point:
60, BE, 00, 40, 47, 00, 8D, BE, 00, D0, F8, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89, C5, EB, 0B, 01, DB, 75, 07, 8B...
 
[+]

Entropy:
7.9852

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
268 KB (274,432 bytes)

Scheduled Task
Task name:
{040415F2-EF79-44F5-880F-639698FFF97E}

Trigger:
Registration (Runs on registration)


The file adwcleaner.exe has been seen being distributed by the following 36 URLs.

http://download.bleepingcomputer.com/dl/82ac7ee6fc3d995e3dfb50ef91482aff/5253d989/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/f8387b92838868fc09018f074e8d6e79/524af795/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/8c0bc28052c520e2e795aa029affe0ad/524ea7dc/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/5da70268f2199f3c9df8548326498768/524b263f/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/0f0b7aa293a23ecfa2a2cf8ef98dc14c/524c7752/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/0bccbaaec1084f6ee40b9137ffaeab17/524ef277/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.instalki.pl/programy/Windows/Bezpieczenstwo/.../adwcleaner_www.INSTALKI.pl.exe

http://download.bleepingcomputer.com/dl/13c2b611c13ca047ce286b7235f1e6d5/524c117f/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/ec38cf39396fb339b0e505191f27345d/524ed29d/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/dd638c69bfa19d8d730d27d20f0f9e97/525033a5/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/1c4d185c7f0b441b8e33dc28f718ff77/524dbd25/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/b5055bf6a45b5f6404be5b217502a6f1/524d9fc8/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/b0792599de1f02d606a2264d95d8cbfa/5253de2b/windows/security/security-utilities/a/.../AdwCleaner.exe

http://dl.cdn.chip.de/downloads/.../adwcleaner_3.0.0.6.exe

http://download.bleepingcomputer.com/dl/15e2155e2109bf7b0594cfa5fc93d574/524c80a8/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/.../AdwCleaner.exe

http://beta101.com/attachment.php?aid=MjUyN3xlYjg2N2RlZnwxMzgwNzIzMDc5fDcwOWRialVjZUNCMk1PbWZlbkRBbVpnUEFkM2x0RVF5T3U3TzdpUjBxbVUzNEpj

http://download.bleepingcomputer.com/dl/22c3ce5517a2e7d497b34b50b39dfb10/524b7658/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/3abcc2e4dac14a8c0d5b3efdbc8b4124/524e7b85/windows/security/security-utilities/a/.../AdwCleaner.exe

http://dl.commentcamarche.net/www.commentcamarche.net/download/.../adwcleaner-3.006.exe

http://download.bleepingcomputer.com/dl/630fc177f5a78a19f5d7ea25ac9a5a41/524f9cdd/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/219dec208a4c25595a0e3a83e63e6400/524cc783/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/b0d36a961fa3730053e2659c7833b99d/52540453/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/5fa7a89dfbe4a9ebe35933a9b494aafe/52532da6/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/27d1fe2bcaef2f2b5a0c8b41c4bf197c/524de7bc/windows/security/security-utilities/a/.../AdwCleaner.exe

http://download.bleepingcomputer.com/dl/75c0759d0a02f99b876682f290a8b48b/524a1ee0/windows/security/security-utilities/a/.../AdwCleaner.exe

http://www.windoctor.it/?wpdmdl=81

http://download.bleepingcomputer.com/dl/5fa97ad429f0d030435872a709416171/5251ac7a/windows/security/security-utilities/a/.../AdwCleaner.exe

http://general-changelog-team.fr/en/downloads/finish/.../2-adwcleaner

http://download.bleepingcomputer.com/dl/4ccee4f53355d15ce09b9d26c83698ae/5215e4a4/windows/security/security-utilities/a/.../AdwCleaner.exe

Latest 30 of 36 download URLs

Scan adwcleaner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.