home

cnetinstaller

Download.com Installer

Proinstall Applications SRL

The file cnetinstaller by Proinstall Applications SRL has been detected as adware by 6 anti-malware scanners.
Publisher:
Proinstall Applications SRL  (signed and verified)

Product:
Download.com Installer

Version:
1, 2, 0, 4

MD5:
260905eec828e707da5661c8470d180c

SHA-1:
964574f840530401377d1c376bf54e654b27cf0f

SHA-256:
e9a23f8d1b289bc140769ea905c0fc74493184788927459c3fc8d1655bac6e98

Scanner detections:
6 / 68

Status:
Adware

Analysis date:
11/30/2024 8:14:51 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.HfsAdware
1.3.0.6379

Dr.Web
Adware.Spigot.26
9.0.1.077

ESET NOD32
Win32/WinWrapper.A potentially unwanted (variant)
9.11208

Qihoo 360 Security
HEUR/QVM41.1.Malware.Gen
1.0.0.1015

Reason Heuristics
PUP.Installer.ProinstallApplicationsSRL
15.3.18.1

VIPRE Antivirus
Spigot
37192

File size:
845.2 KB (865,520 bytes)

Product version:
1, 2, 0, 4

Copyright:
Copyright (C) 2014 Download.com

Original file name:
CnetInstaller.exe

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\inetcache\content.ie5\fdwmfr1u\cnetinstaller

Digital Signature
Signed by:
Proinstall Applications SRL

Authority:
DigiCert Inc

Valid from:
1/29/2015 12:00:00 AM

Valid to:
2/12/2016 12:00:00 PM

Subject:
CN=Proinstall Applications SRL, O=Proinstall Applications SRL, L=Bucuresti, S=Bucuresti, C=RO, PostalCode=030964, STREET="Bd Decebal Nr 25-29,", STREET="Etaj 9, Camera A Sectorul 3", SERIALNUMBER=33860761, OID.1.3.6.1.4.1.311.60.2.1.3=RO, OID.2.5.4.15=Private Organization

Issuer:
CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0D3DA10728DEE97CB0452EAF3405FE49

File PE Metadata
Compilation timestamp:
1/29/2015 6:21:11 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:1l4s5u+veqjMx+OVBBzp34I7BeYWTWqKlJ8/lgl1STQPsjd:v5uUeClkp4I7BeDTWqy8RMEjd

Entry address:
0x4B36B

Entry point:
E8, 18, 12, 01, 00, E9, 78, FE, FF, FF, 6A, 0C, 68, D0, E6, 47, 00, E8, 8B, 5A, 00, 00, 33, F6, 89, 75, E4, 33, C0, 8B, 5D, 08, 3B, DE, 0F, 95, C0, 3B, C6, 75, 1C, E8, 69, 01, 00, 00, C7, 00, 16, 00, 00, 00, 56, 56, 56, 56, 56, E8, E8, DF, FF, FF, 83, C4, 14, 33, C0, EB, 7B, 33, C0, 8B, 7D, 0C, 3B, FE, 0F, 95, C0, 3B, C6, 74, D6, 33, C0, 66, 39, 37, 0F, 95, C0, 3B, C6, 74, CA, E8, EC, E9, 00, 00, 89, 45, 08, 3B, C6, 75, 0D, E8, 27, 01, 00, 00, C7, 00, 18, 00, 00, 00, EB, C9, 89, 75, FC, 66, 39, 33, 75, 20...
 
[+]

Entropy:
7.0325

Code size:
424.5 KB (434,688 bytes)

Remove cnetinstaller - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.