home

rockresultuninstall.exe

RockResult

This is the installer/setup program for a Yontoo adware component, a web browser plugin that injects unwanted ads in the browser. The application rockresultuninstall.exe by RockResult has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program RockResult by RockResult. This file is typically installed with the program RockResult by Yontoo Technology, Inc. which is a potentially unwanted software program.
Publisher:
RockResult  (signed and verified)

MD5:
1beb6328622b18f68fa54b11a5fa7172

SHA-1:
e7e0bf3b11a7144d16945dae98dfb71674f488e2

SHA-256:
1f97c224e0cb1e4d200b809616601680c6d5114fb91c4bb10103198baf0de59d

Scanner detections:
1 / 68

Status:
Adware

Explanation:
This is the installer/uninstaller for the Yontoo branded (rockresult) adware program. The main protgram is desigend to deliver advertisements to the user's web browser through injection.

Analysis date:
11/27/2024 12:22:44 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Adware.Yontoo (M)
17.3.3.2

File size:
253.6 KB (259,648 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Common path:
C:\Program Files\rockresult\rockresultuninstall.exe

Digital Signature
Signed by:
RockResult

Authority:
DigiCert Inc

Valid from:
6/10/2014 2:00:00 AM

Valid to:
6/15/2015 2:00:00 PM

Subject:
CN=RockResult, O=RockResult, L=Santa Monica, S=California, C=US

Issuer:
CN=DigiCert Assured ID Code Signing CA-1, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0D2151DAC91D7B014A2AAC028842CAD8

File PE Metadata
Compilation timestamp:
12/5/2009 11:52:01 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x30CB

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 60, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B0, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 38, 6F, 44, 00, E8, F1, 2B, 00, 00, A3, 84, 6E, 44, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 30, 9C, 42, 00, FF, 15, 58, 71, 40, 00, 68, 54, 91, 40, 00, 68, 80, 2E, 44, 00, E8, A4, 28, 00, 00, FF, 15, AC, 70, 40, 00, BF, 00, F0, 46, 00, 50, 57, E8, 92, 28, 00, 00...
 
[+]

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

Program Uninstaller
Program name:
RockResult

Display publisher:
RockResult

Display version:
2014.09.20.081915

Uninstall string:
C:\Program Files\RockResult\RockResultuninstall.exe


The file rockresultuninstall.exe has been discovered within the following program.

RockResult  by Yontoo Technology, Inc.
RockResult is an Internet toolbar/plugin (for Internet Explorer it runs as a BHO, in Chrome and Firefox it will run as an extension) that plugs into the user's default web browser and will modify a number of settings such as taking control of the browser's search and home pages, new tab functionality as well as DNS 'not found' redirection.
rockresult.net/support
80% remove it
 
Powered by Should I Remove It?

Remove rockresultuninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.