home

avira-eu-cleaner_de.exe

Avira Operations GmbH & Co. KG

This is a setup program which is used to install the application. The file has been seen being downloaded from avira-eu-cleaner.de.softonic.com and multiple other hosts.
Publisher:
Avira Operations GmbH & Co. KG  (signed and verified)

MD5:
e8ae4972bf0f445c3af78f10e9a7ac31

SHA-1:
8eff85bf3a049650b686585c9a6374c1483dba42

SHA-256:
f403f09d46078c144fbd262993c9fff0b5801fa7fdd2e4aa2f4391815b847fb0

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 12:10:48 PM UTC  (today)

File size:
2.1 MB (2,209,056 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\avira-eu-cleaner_de.exe

Digital Signature
Signed by:
Avira Operations GmbH & Co. KG

Authority:
VeriSign, Inc.

Valid from:
7/20/2011 2:00:00 AM

Valid to:
7/20/2014 1:59:59 AM

Subject:
CN=Avira Operations GmbH & Co. KG, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Avira Operations GmbH & Co. KG, L=Tettnang, S=Baden Wuerttemberg, C=DE

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
54971FF238D2B866F27FC3FE6C9AD577

File PE Metadata
Compilation timestamp:
7/22/2010 7:12:42 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
49152:joIjiSa4eOy08F8geJksPRAPcYtV3tLjulQVtBfHZI6Qy93:joGa4epC1+uStV3t2lQVTfHO6j93

Entry address:
0xA7B1

Entry point:
E8, E3, FE, FF, FF, 33, C0, 50, 50, 50, 50, E8, EC, 2B, 00, 00, C3, 56, 57, 8B, 7C, 24, 0C, 8B, F1, 8B, CF, 89, 3E, E8, D0, A7, FF, FF, 89, 46, 08, 89, 56, 0C, 8B, 87, 1C, 0C, 00, 00, 89, 46, 10, 5F, 8B, C6, 5E, C2, 04, 00, 8B, C1, 8B, 08, 8B, 50, 10, 3B, 91, 1C, 0C, 00, 00, 75, 0D, 6A, 00, FF, 70, 0C, FF, 70, 08, E8, AF, AC, FF, FF, C3, 55, 8B, EC, 83, EC, 1C, 56, 33, F6, 56, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 44, 22, 41, 00, 85, C0, 74, 21, 56, 56, 56, 8D, 45, E4, 50, FF, 15, 48, 22, 41, 00, 8D, 45, E4...
 
[+]

Code size:
66 KB (67,584 bytes)

The file avira-eu-cleaner_de.exe has been discovered within the following programs.

Call Of Atlantis  by Media Contact LLC
Call Of Atlantis is a casual video games distributed through the GameTop.com download portal. The trial verison of the game in some cases drops an icon on the user's desktop 'Online Free Games' which links to a partner portal such as onlinefreegames.com.
www.GameTop.com
12% remove it
TheLostKingdomProphecy  by Media Contact LLC
The Lost Kingdom Prophecy is a casual PC video game distributed through the Game Top (gametop.com) download portal. The trial verison of the game includes an icon on the user's desktop 'Online Free Games' which links to a partner portals such as onlinefreegames.com.
8% remove it
 
Powered by Should I Remove It?

The file avira-eu-cleaner_de.exe has been seen being distributed by the following 9 URLs.

http://avira-eu-cleaner.de.softonic.com/.../6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANZiMbTa2bAAuuXJfWbvo4P2EdJxschDfrTVjOvD5MfYIny6VEB5A3upFYmCXDtKTIyYEgNtNGcnmzA97vJLvaWA53zO gFtQa GEf1VT4xQXZF6ZdA739UoClMRiGVp1NOES24LUg9JHIFDRbhtXJtqXDHV1wofOc4d0JVp6HE6w==

http://www.check-and-secure.com/.../avira.eucleaner

https://shop.avira.com/30/cookie?affiliate=21308&x-at=&x-at=x-at=botfrei_de&redirectto=http://personal.avira-update.com/package/eucleaner/win32/.../avira-eu-cleaner_de.exe

http://r2.computerbild.de/exec/r2r.pl?m=w-cobi;u=http://d.computerbild.de/downloads/.../avira-eu-cleaner_de.exe

http://install.avira-update.com/package/eucleaner/win32/.../avira-eu-cleaner_de.exe

http://personal.avira-update.com/package/eucleaner/win32/.../avira-eu-cleaner_de.exe

http://dl.cdn.chip.de/downloads/.../avira-eu-cleaner_de.exe

https://shop.avira.com/30/cookie?affiliate=22064&redirectto=http://personal.avira-update.com/package/eucleaner/win32/.../avira-eu-cleaner_de.exe

https://www.check-and-secure.com/.../avira.eucleaner

Scan avira-eu-cleaner_de.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.