home

BackgroundSwitcher.exe

Background Switcher

John Conners

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘BackgroundSwitcher’. This is installed with John's Background Switcher 4.3.
Publisher:
johnsadventures.com  (signed by John Conners)

Product:
Background Switcher

Description:
John's Background Switcher

Version:
4.3.0.8

MD5:
9a569ba8541035ccab5b6f5e46a8e6a0

SHA-1:
b92493647b6fcc552bdd873baa3fd7dff65fe140

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/17/2024 12:57:16 AM UTC  (today)

File size:
116.3 KB (119,104 bytes)

Product version:
4.3.0.8

Copyright:
(c) John Conners 2004-2010

Original file name:
BackgroundSwitcher.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\windows\!\backgroundswitcher.exe

Digital Signature
Signed by:
John Conners

Authority:
The USERTRUST Network

Valid from:
2/22/2009 7:00:00 PM

Valid to:
2/23/2012 6:59:59 PM

Subject:
CN=John Conners, O=John Conners, STREET=40 Hainsworth Road, L=Silsden, S=West Yorkshire, PostalCode=BD20 0NB, C=GB

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00E36290CA28F1A03CCD9E1597EF21AAD3

File PE Metadata
OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:qLwG7AdEEiQzvUum8sEdIBRQuNhPNlwJnAE4tn1VIB1Pn15EaP7uRRjfwYXW6o+7:q8kvQrHm8ddIN3PQ6tn1Vej/728eWb+7

Entry address:
0x27ED

Entry point:
FF, 25, 00, 40, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
6.8853

Code size:
8 KB (8,192 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
BackgroundSwitcher

Command:
"C:\windows\!\backgroundswitcher.exe"


The file BackgroundSwitcher.exe has been discovered within the following program.

John's Background Switcher 4.3  by johnsadventures.com
Publisher's description - “JBS sits in your system tray (down by the clock) and changes your background at the time interval of your choosing.”
johnsadventures.com
About 5% of users remove it
 
Powered by Should I Remove It?

Scan BackgroundSwitcher.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.