» solutionrealuninstaller.exe
Overview
Analysis
File Details
Programs (2)
Downloads (1)

solutionrealuninstaller.exe

Solution Real

This is the installer/setup program for a Yontoo adware component, a web browser plugin that injects unwanted ads in the browser. The application solutionrealuninstaller.exe by Solution Real has been detected as adware by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. Additionally, the file is typically installed by a number of programs including Solution Real by Yontoo Technology, Inc. and Buzzdock by Alactro LLC, both potentially unwanted software.

File name:

Publisher:

Solution Real (signed and verified)

Version:

1.0.0.0

MD5:

d591385c731426cbb3b4fbf05359888c

SHA-1:

df9f30dc631e83d4a356a35880e9a516896dcf05

SHA-256:

d82bf709ac8ed2dd67a419a54be0f46225d8e063aee563d4bdaf6efc12642e0a

Scanner detections:

1 / 68

Status:

Adware

Explanation:

Belongs to the Sambreel/Yontoo progam that inserts various forms of advertising in the user's web browser, installed with minimal or no user consent.

Analysis date:

4/25/2025 9:33:44 AM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.Yontoo (M)

16.7.24.9

File size:

539.7 KB (552,696 bytes)

Product version:

1.0.0.0

Original file name:

Solution Real Uninstaller.exe

File type:

Executable application (Win32 EXE)

Language:

Turkish (Turkey)

Common path:

C:\users\{user}\downloads\solutionrealuninstaller.exe

Digital Signature

Signed by:

Solution Real

Authority:

VeriSign, Inc.

Valid from:

11/20/2014 2:00:00 AM

Valid to:

11/21/2015 1:59:59 AM

Subject:

CN=Solution Real, O=Solution Real, L=Santa Monica, S=California, C=US

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

2D886A33232B2B3A4824AA07AEF87094

File PE Metadata

Compilation timestamp:

1/24/2015 9:32:53 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

12288:tPzDqj/0oAo+v8XTXnA0190xorkuENw8spghDvJ5:KRVKSrFpghjJ5

Entry address:

0x84E78

Entry point:

FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

524 KB (536,576 bytes)

The file solutionrealuninstaller.exe has been discovered within the following programs.

Buzzdock by Alactro LLC

This is a web browser extension that injects advertising. From the EULA: "Buzzdock is free to download and use. Buzzdock is supported by advertising, and users will see additional ads on websites where Buzzdock features operate.

www.buzzdock.com/faq-support

79% remove it

Solution Real by Yontoo Technology, Inc.

From Yontoo's License Agreement: "The Software is supported by several forms of advertising, which will be displayed as you use your browsers, including, without limitation, banner and video ads, in-text ads and links, web browsing-related ads, interstitial, transitional, search, and full page ads.

solutionreal.com/support

86% remove it

The file solutionrealuninstaller.exe has been seen being distributed by the following URL.

http://install.solutionreal.com/ud

Remove solutionrealuninstaller.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.