home

iobituninstaler.exe

Uninstall Programs

IObit Information Technology

This is a setup and installation application. It runs as a scheduled task under the Windows Task Scheduler. This is installed with IObit Uninstaller. The file has been seen being downloaded from dl.khophanmem.vn and multiple other hosts.
Publisher:
IObit  (signed by IObit Information Technology)

Product:
Uninstall Programs

Version:
4.0.4.1

MD5:
81da44bb6704d5469a262302d38541d5

SHA-1:
d104235efc3a23c81dd654780b1154ec0f5050a5

SHA-256:
b09cc4e263266b70bb705201491f6e6f204d95377871c5441182012ef9f6343c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:04:31 AM UTC  (today)

File size:
16.8 MB (17,606,432 bytes)

Product version:
4.0.0.0

Copyright:
Copyright(C) 2005-2015

Trademarks:
IObit

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\iobit\iobit uninstaller\iobituninstaler.exe

Digital Signature
Signed by:
IObit Information Technology

Authority:
VeriSign, Inc.

Valid from:
1/15/2013 1:00:00 AM

Valid to:
2/15/2016 12:59:59 AM

Subject:
CN=IObit Information Technology, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=IObit Information Technology, L=Chengdu, S=Sichuan, C=CN

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
11CADAF29DA4C3CB113BF1877B120103

File PE Metadata
Compilation timestamp:
9/24/2014 2:43:47 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
393216:oxLZ9tINVr2zOHceaUOH4YL0lmryT83NJQ1mxWh/u+n:o1ZUVqzOHVax1sSvxQ

Entry address:
0x304E44

Entry point:
55, 8B, EC, 83, C4, E0, 53, 33, C0, 89, 45, E0, 89, 45, E8, 89, 45, E4, 89, 45, EC, B8, 58, 1B, 70, 00, E8, 2D, 4C, D0, FF, 33, C0, 55, 68, D7, 4F, 70, 00, 64, FF, 30, 64, 89, 20, 6A, 00, 6A, 00, 6A, 00, 6A, 00, 33, C9, BA, F0, 4F, 70, 00, B8, 48, 50, 70, 00, E8, 5E, C1, FF, FF, E8, C1, C1, FC, FF, 8B, D8, 84, DB, 74, 33, B8, 7C, 50, 70, 00, E8, 15, 8D, E1, FF, 8B, 15, D0, 10, 72, 00, 88, 02, EB, 11, B8, 7C, 50, 70, 00, E8, C1, 62, FC, FF, 6A, 0A, E8, 46, 44, D6, FF, B8, 7C, 50, 70, 00, E8, F0, 8C, E1, FF...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
3 MB (3,160,576 bytes)

Scheduled Task
Task name:
Uninstaller_SkipUac_Administrator

Action:
iobituninstaler.exe \uninstallexplorer


The file iobituninstaler.exe has been discovered within the following programs.

IObit Uninstaller  by IObit
Publisher's description - “Uninstall programs with IObit Uninstaller. The free software removal program can uninstall programs and clean leftovers thoroughly. As a pure uninstall program, IObit Uninstaller 2 features himself in the market without install required to remove programs.”
www.iobit.com
18% remove it
Toolwiz Time Freeze 2014  by ToolWiz
www.Toolwiz.com
About 1% of users remove it
 
Powered by Should I Remove It?

The file iobituninstaler.exe has been seen being distributed by the following 28 URLs.

http://dl.khophanmem.vn/iobit_uninstaller.exe

http://ftp-stahuj.centrum.cz/dl/69553d93e042bb7f3b829530af17c8e3/5450ab15/stahuj/download/software/secured/i/iobit-uninstaller/.../iobituninstaller.exe

&onid=2096&oid=3001-2096_4-75161625&rsid=cbsidownloadcomsite&sl=en&sc=us&pdguid=download:13815057&topicguid=utilities/software-removal&topicbrcrm=windows software&pid=13815057&mfgid=6271865&merid=6271865&ctype=dm&cval=NONE&devicetype=desktop&pguid=bb6fd899954eccc13167a56e&viewguid=QxoHm2rKZIPu1FwNz6BpLXZH4qdBf@tWifr9&destUrl=http://software-files-a.cnet.com/s/software/13/81/50/.../iobituninstaller.exe

http://www.windoctor.it/?wpdmdl=102

http://www.filepuma.com/down/1411937949c6947/iobit_uninstaller_4.0.4.1/.../0/

http://www.filepuma.com/file/1411937949c6947/iobit_uninstaller_4.0.4.1/.../0/

http://www.filepuma.com/down/1412619916c6947/iobit_uninstaller_4.0.4.1/.../0/

http://www.filepuma.com/file/1412619916c6947/iobit_uninstaller_4.0.4.1/.../0/

http://www.filepuma.com/down/1412619559c6947/iobit_uninstaller_4.0.4.1/.../0/

http://www.filepuma.com/file/1412619559c6947/iobit_uninstaller_4.0.4.1/.../0/

http://www.filepuma.com/down/1412114559c6947/iobit_uninstaller_4.0.4.1/.../0/

http://www.filepuma.com/file/1412114559c6947/iobit_uninstaller_4.0.4.1/.../0/

http://www.filepuma.com/down/1411974257c6947/iobit_uninstaller_4.0.4.1/.../0/

http://www.filepuma.com/file/1411974257c6947/iobit_uninstaller_4.0.4.1/.../0/

http://www.tamindir.com/indir/MjAxNC0xMS0yMiAxNTowNDo1Ng==/iobit-uninstaller/.../4.0

http://www.tamindir.com/indir/MjAxNC0xMS0xMiAyMDowMDozMA==/iobit-uninstaller/.../4.0

http://down.filepuma.com/files/uninstallers/.../Iobit_Uninstaller_v4.0.4.1.exe

http://www.majorgeeks.com/index.php?ct=files&action=download&

http://external.comss.ru/url.php?url=http://update.iobit.com/.../iobituninstaller.exe

http://www.filepuma.com/file/1412267338c6947/iobit_uninstaller_4.0.4.1/.../0/

http://www.filepuma.com/file/1412159706c6947/iobit_uninstaller_4.0.4.1/.../0/

http://files.snapfiles.com/.../iobituninstaller.exe

&onid=2096&oid=3001-2096_4-75161625&rsid=cbsidownloadcomsite&sl=en&sc=us&pdguid=download:13815057&topicguid=utilities/software-removal&topicbrcrm=windows software&pid=13815057&mfgid=6271865&merid=6271865&ctype=dm&cval=NONE&devicetype=desktop&pguid=1947ddff49396d175fbc70c1&viewguid=QpPTzBAEzn@E9HTMKpuzszwalWHLByTudyG1&destUrl=http://software-files-a.cnet.com/s/software/13/81/50/.../iobituninstaller.exe

http://www.filepuma.com/file/1411723020c6947/iobit_uninstaller_4.0.4.1/.../0/

http://www.filepuma.com/file/1411828471c6947/iobit_uninstaller_4.0.4.1/.../0/

http://update.iobit.com/.../iobituninstaller.exe

http://dl.cdn.chip.de/downloads/.../iobituninstaller_4.0.4.exe

http://software-files-a.cnet.com/s/software/13/81/50/.../iobituninstaller.exe

Scan iobituninstaler.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.