home

uninst.exe

Price Fountain

The application uninst.exe has been detected as a potentially unwanted program by 24 anti-malware scanners. This is a setup program which is used to install the application. This is the uninstaller utility registered in the Windows Control Panel for the program PriceFountain (remove only) by Price Fountain. This file is typically installed with the program PriceFountain (remove only) by DealPly Technologies Ltd. which is a potentially unwanted software program. The file has been seen being downloaded from cdn.airdlr1.com and multiple other hosts.
Publisher:
Price Fountain

Product:
Price Fountain

Version:
1.1.0.8

MD5:
60f4d680c6b466396ac1a3e3eac4140c

SHA-1:
3b121e82f61704c5772df48d4cc65bfdbdc53c0d

SHA-256:
64201df9940480928e8b932148019fa27715d260661c0b0dcb0998c5b3b93a17

Scanner detections:
24 / 68

Status:
Potentially unwanted

Analysis date:
11/2/2024 5:16:06 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.2170533
714

Agnitum Outpost
PUA.DealPly
7.1.1

Avira AntiVirus
Adware/DealPly.A.5518
7.11.211.180

avast!
Win32:Malware-gen
2014.9-150220

AVG
Generic6
2016.0.3192

Baidu Antivirus
PUA.Win32.DealPly
4.0.3.15220

Bitdefender
Trojan.GenericKD.2170533
1.0.20.255

Emsisoft Anti-Malware
Trojan.GenericKD.2170533
8.15.02.20.09

ESET NOD32
Win32/DealPly.AC potentially unwanted (variant)
9.11208

Fortinet FortiGate
Adware/DealPly
2/20/2015

F-Secure
Trojan.GenericKD.2170533
11.2015-20-02_6

G Data
Trojan.GenericKD.2170533
15.2.25

K7 AntiVirus
Trojan
13.197.15038

Kaspersky
not-a-virus:AdWare.Win32.DealPly
14.0.0.2455

Malwarebytes
PUP.Optional.PriceFountain.A
v2015.02.20.09

McAfee
Artemis!60F4D680C6B4
5600.6848

MicroWorld eScan
Trojan.GenericKD.2170533
16.0.0.153

Panda Antivirus
Trj/Genetic.gen
15.02.20.09

Qihoo 360 Security
HEUR/QVM41.1.Malware.Gen
1.0.0.1015

Reason Heuristics
Threat.Win.Reputation.IMP
15.3.24.15

Sophos
DealPly Updater
4.98

SUPERAntiSpyware
PUP.PriceFountain/Variant
10041

Trend Micro House Call
Suspicious_GEN.F47V0218
7.2.51

VIPRE Antivirus
Trojan.Win32.Generic
37736

File size:
1.6 MB (1,694,720 bytes)

Product version:
1.1.0.8

Copyright:
Copyright © 2015 PriceFountain

Trademarks:
[12345678] [default:default] PriceFountain is a trademark or registered trademark in the U.S. and/or other countries.

Original file name:
pfinst.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\pricefountain\uninst.exe

File PE Metadata
Compilation timestamp:
2/17/2015 3:27:29 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:UMVbthWGp/Zo+8ta95R9/yTaGmS23V+4FXSGLhdD7to2Hk24PLt+A:RALtadLuSSGLh42E26v

Entry address:
0x5A22C

Entry point:
E8, 7C, FC, 00, 00, E9, 7B, FE, FF, FF, 55, 8B, EC, 8D, 45, 10, 50, 6A, 00, FF, 75, 0C, FF, 75, 08, 68, 84, A0, 46, 00, E8, 05, 00, 00, 00, 83, C4, 14, 5D, C3, 55, 8B, EC, 83, EC, 20, 83, 65, E0, 00, 56, 8B, 75, 0C, 57, 6A, 07, 33, C0, 59, 8D, 7D, E4, F3, AB, 85, F6, 75, 15, E8, 29, 3C, 00, 00, C7, 00, 16, 00, 00, 00, E8, 93, 62, 00, 00, 83, C8, FF, EB, 3B, 39, 45, 10, 74, E6, 56, E8, CF, 20, 00, 00, 59, B9, FF, FF, FF, 7F, C7, 45, EC, 49, 00, 00, 00, 89, 75, E8, 89, 75, E0, 89, 4D, E4, 3B, C1, 77, 03, 89...
 
[+]

Code size:
496.5 KB (508,416 bytes)

Program Uninstaller
Program name:
PriceFountain (remove only)

Display publisher:
Price Fountain

Display version:
1.1.0.8

Uninstall string:
"C:\users\{user}\appdata\local\pricefountain\uninst.exe" \uninstall


The file uninst.exe has been discovered within the following program.

PriceFountain (remove only)  by DealPly Technologies Ltd.
Price Fountain (SaveSense) is an adware extension that will deliver ads to the browser on web pages that are not affiliated with the ads or the extension.
www.pricefountain.com
76% remove it
 
Powered by Should I Remove It?

The file uninst.exe has been seen being distributed by the following 2 URLs.

http://cdn.airdlr1.com/downloads/offers/.../pfinst2.exe

http://cdn.pmdownloadcdn.com.s3.amazonaws.com/pricefountain/.../pfinst.exe

Remove uninst.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.