home

uninstall.exe

Best YouTube Downloader

Macte! Labs, Inc.

The application uninstall.exe by Macte! Labs has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program Best YouTube Downloader by Neobars. This file is typically installed with the program Best YouTube Downloader by Macte! Labs, Inc. which is a potentially unwanted software program.
Publisher:
Neobars  (signed by Macte! Labs, Inc.)

Product:
Best YouTube Downloader

Version:
1.4.2

MD5:
3f78decfa018dc8d0703fe72908e8f3d

SHA-1:
940f4697d8498ce89cf07a168d6e1104f8c06f4b

SHA-256:
1f1ede9676a231aa54fe487179101c3ec10897affbe67faa9d2e1643a078a834

Scanner detections:
1 / 68

Status:
Potentially unwanted

Note:
Our current pool of anti-malware engines have not currently detected this file, however based on our own detection heuristics we feel that this file is unwanted.

Analysis date:
11/15/2024 1:36:39 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
17.1.2.22

File size:
1.4 MB (1,486,184 bytes)

Product version:
1.4.2

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
Language Neutral

Common path:
C:\Program Files\best youtube downloader\uninstall.exe

Digital Signature
Signed by:
Macte! Labs, Inc.

Authority:
Thawte, Inc.

Valid from:
7/23/2013 5:30:00 AM

Valid to:
10/4/2015 5:29:59 AM

Subject:
CN="Macte! Labs, Inc.", O="Macte! Labs, Inc.", L=Vancouver, S=British Columbia, C=CA

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
2072154B981EC5FD7991B0C51744D0B3

File PE Metadata
Compilation timestamp:
2/25/2012 12:50:04 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

Entry address:
0x38AF

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, 68, A2, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 90, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 90, 40, 00, 55, FF, 15, C0, 92, 40, 00, 6A, 08, A3, 98, EB, 47, 00, E8, 36, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, B0, EA, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 64, A2, 40, 00, FF, 15, 84, 91, 40, 00, 68, 4C, A2, 40, 00, 68, A0, 6A, 47, 00, E8, 18, 27, 00, 00, FF, 15, B0, 90, 40, 00, 50, BF, A0, F0, 4C, 00, 57, E8, 06, 27, 00, 00...
 
[+]

Entropy:
7.0956

Packer / compiler:
Nullsoft install system v2.x

Code size:
29 KB (29,696 bytes)

Program Uninstaller
Program name:
Best YouTube Downloader

Display publisher:
Neobars

Display version:
1.4.2

Uninstall string:
C:\Program Files\Best YouTube Downloader\uninstall.exe


The file uninstall.exe has been discovered within the following program.

Best YouTube Downloader  by Macte! Labs, Inc.
This is a potentially unwanted neobars Toolbar and may display advertising in the user's Internet browser by running as an extension and/or add-on. Ads are delivered in the form of search-related ads, banner and video ads, and text-links as well as some popup ads.
www.neobars.com
69% remove it
 
Powered by Should I Remove It?

Remove uninstall.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.