home

pr2akulb.exe

US2

Protection Technology, Ltd.

It runs as a separate (within the context of its own process) windows Service named “US2 Drivers Auto Removal (pr2akulb)”.
Publisher:
Russobit-M  (signed by Protection Technology, Ltd.)

Product:
US2

Description:
US2 Drivers Auto Removal

Version:
2.09

MD5:
6ebd6fe73bf7e201e50b5aac6458e623

SHA-1:
f009b66d421bb068f451190eddec97a851afffc1

SHA-256:
6825dbacfd8bc4ac9f657f4714bb3b8981ee76f1d08941bbfc408e160fee9104

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 8:21:16 AM UTC  (today)

File size:
759.4 KB (777,576 bytes)

Product version:
4.70.011.001

Copyright:
© Russobit-M

Original file name:
pr2akulb.exe

File type:
Executable application (Win64 EXE)

Common path:
C:\Windows\System32\pr2akulb.exe

Digital Signature
Signed by:
Protection Technology, Ltd.

Authority:
VeriSign, Inc.

Valid from:
12/11/2006 3:00:00 AM

Valid to:
12/18/2007 2:59:59 AM

Subject:
CN="Protection Technology, Ltd.", OU=Software Development, OU=Digital ID Class 3 - Microsoft Software Validation v2, O="Protection Technology, Ltd.", L=Moscow, S=Not present, C=RU

Issuer:
CN=VeriSign Class 3 Code Signing 2004 CA, OU=Terms of use at https://www.verisign.com/rpa (c)04, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
38DD11538B52547E5F77805DCB327BCC

File PE Metadata
Compilation timestamp:
9/6/2007 11:51:02 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
8.0

Entry address:
0x49C50

Entry point:
48, 83, EC, 28, E8, 47, 70, 00, 00, 48, 83, C4, 28, E9, FE, FC, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 66, 90, 66, 66, 66, 90, 66, 90, 4C, 8B, D9, 48, 2B, D1, 0F, 82, 9E, 01, 00, 00, 49, 83, F8, 08, 72, 61, F6, C1, 07, 74, 36, F6, C1, 01, 74, 0B, 8A, 04, 0A, 49, FF, C8, 88, 01, 48, FF, C1, F6, C1, 02, 74, 0F, 66, 8B, 04, 0A, 49, 83, E8, 02, 66, 89, 01, 48, 83, C1, 02, F6, C1, 04, 74, 0D, 8B, 04, 0A, 49, 83, E8, 04, 89, 01, 48, 83, C1, 04, 4D, 8B, C8...
 
[+]

Code size:
445 KB (455,680 bytes)

Service
Display name:
US2 Drivers Auto Removal (pr2akulb)

Service name:
pr2akulb

Description:
This service automatically uninstalls US2 drivers after US2 is uninstalled. After the drivers are uninstalled, the service uninstalls itself as well. If US2 is reinstalled, the drivers as well as this

Type:
Win32OwnProcess


herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.