ATF-Cleaner.exe

ATF Cleaner

Atribune.org

This is a setup program which is used to install the application. The file has been seen being downloaded from atf-cleaner.en.softonic.com and multiple other hosts.
Publisher:
Atribune.org

Product:
ATF Cleaner

Description:
ATF Cleaner.exe

Version:
3.00.0002

MD5:
d9de89f0faf18019bc9595f0f47bca61

SHA-1:
7a044dfe1c5e780f3f2b52b3bd066e463a37886e

SHA-256:
e900d883001ec60353c2e8e1a54e1c5948a11513fffafbd5a28b44c1e319677a

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

False Positives:
A number of engines detected this file but were erroneous detections (false positives).

Analysis date:
11/23/2024 6:18:54 AM UTC  (today)

File size:
49.5 KB (50,688 bytes)

Product version:
3.00.0002

Copyright:
© 2005 Atribune.org

Original file name:
ATF-Cleaner.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\atf-cleaner.exe

File PE Metadata
Compilation timestamp:
2/15/2007 8:00:43 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
768:+NhzxwvYERUcNJLLAAYZPTn68f0Ii+i3Fwv04AhDUt6dzvqcOh:4h9wvveMLJwTFi3a048okqcOh

Entry address:
0x4EB90

Entry point:
60, BE, 00, 40, 44, 00, 8D, BE, 00, D0, FB, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89...
 
[+]

Entropy:
7.7233

Packer / compiler:
UPX 2.90LZMA]

Code size:
44 KB (45,056 bytes)

The file ATF-Cleaner.exe has been discovered within the following program.

CCleaner  by Piriform
CCleaner developed by Piriform, is a utility program used to clean potentially unwanted files and invalid Windows Registry entries from a computer.
www.piriform.com/ccleaner
3% remove it
 
Powered by Should I Remove It?

The file ATF-Cleaner.exe has been seen being distributed by the following 41 URLs.

https://atf-cleaner.en.softonic.com/download-tracker?th=1/.../eURI0r2 Z1Ex4HTkguiuZyHJud643DM7EmpZq9imVmDi4mHhEc2WidqZFCy5OnNCrlMhdspixPEWoLfbWepBJNoMK4OwwqgmyOm7 R6iXL7klmM5GO1h9M5SO7W63s=

http://gsf-cf.softonic.com/7a0/44d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=59037&instance=softonic_es&type=PROGRAM&Expires=1476095986&Signature=bX70vge5DmSuExBX5ABKKY-fZ~jq4AX5bRnz-CvEPAHGaI~lY0T5~gFOjCV3euYSyJ4piA3xD-MCeHtB4jsJrSS3p3G4ZUylfILHpqTFpxwnbPPvf2oCnHrw8JuWn0gXczssdoSx7yylw8n6Dn4OqAfIBOFuUCmBhXVCi79qyig_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ATF-Cleaner.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&PHPSESSID=1q0i2ocro073r650m9pd1pkd27

http://dw.uptodown.com/dwn/KKnlYlTgkob9JyilvKotRjJKvb28ShTXZR6Wm57dpYYfJPt185-psnjmqC8SF1ll8JKWTnUecaliBppdqCJloIu3Kpl6PdbXxN9EulWe4hxc4oWkLbCne0lX-p5pz91E/Y6q0UllN0KKIKR-lsA4c6cto3N5khVc0hPwdRyCH2GEoE6WhqncBbq9FHB_3xS5aGhxAzSKuWuu6EyLUGVdimXWxoO3j38nRECLAi7V4Gk3rPH6ytUmZSgxWs1m0FAYZ/QzjtJ0X__u6-uU12vGBKjFU44BEdur3S6guDq2NDQDMAoi44yZDbF0limUhd9P3waielNC9VDyoPJ0ASYezujht4JryyCmguYN5tAqGBipw13pGMUtYD5UziYAEZY9GI/.../

http://dpcdn-s10.pl/.../ATF-Cleaner(dobreprogramy.pl).exe

http://gsf-cf.softonic.com/7a0/44d/.../file?SD_used=0&channel=WEB&fdh=no&id_file=59037&instance=softonic_en&type=PROGRAM&Expires=1477458927&Signature=Bd5mEvK86uGLLhNGAmbhKWyefXNPRmm86Q~YRw2QfwxMcTS9Hth83RGZ0bP9KbL6q03p5w6dkRIpw0JAcouRTHCEnPM~-t1kwsxWXpLGknGtxNdhv-S0sFUtKyVQOzxCk1jAhBZ-nA-b8ECxE8eEqZ~bcSyCFcwc01SNIu2-LWw_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=ATF-Cleaner.exe

http://www.geekstogo.com/forum/files/go/.../atf-cleaner

Latest 30 of 41 download URLs