» uninstall24195411.exe
Overview
Analysis
File Details
Programs (1)

uninstall24195411.exe

GoforFiles

Righway Technologies, Inc

This is the Via Advertising bundle installer which bundles applications with offers for additional 3rd party software, mostly unwanted adware, and may be installed with minimal consent. The application uninstall24195411.exe by Righway Technologies, Inc has been detected as adware by 23 anti-malware scanners. The program is a setup application that uses the YourFile Downloader installer. This file is typically installed with the program GoforFiles by Righway Technologies, Inc which is a potentially unwanted software program.

File name:

Publisher:

http://www.goforfiles.com/ (signed by Righway Technologies, Inc)

Product:

GoforFiles

Version:

1, 0, 0, 464

MD5:

a08b7956091954f1eacf5dfc70a9b841

SHA-1:

303f059ac316364f603355a5ba0ca9ad54064251

SHA-256:

66fe937b271bed3add2673b3775c8a0a04bab915503944e979cb5a665d5fe03c

Scanner detections:

23 / 68

Status:

Adware

Description:

This is also known as bundleware, or downloadware, which is an downloader designed to simply deliver ad-supported offers in the setup routine of an otherwise legitimate software.

Analysis date:

11/15/2024 5:29:01 AM UTC (today)

Scan engine

Detection

Engine version

AhnLab V3 Security

PUP/Win32.ExpressFiles

2013.11.02

Avira AntiVirus

Adware/ExpressFiles.A

7.11.110.156

avast!

Win32:PUP-gen [PUP]

2014.9-141130

AVG

Skodna.Generic_r

2014.0.3612

Baidu Antivirus

Trojan.Win32.YourFileDownloader

4.0.3.141130

Bkav FE

W32.Clod0ae.Trojan

1.3.0.4613

Dr.Web

Tool.DownLoader.52

9.0.1.0334

Emsisoft Anti-Malware

Trojan.Win32.YourFileDownloader.AMN

8.14.11.30.12

ESET NOD32

Win32/YourFileDownloader (variant)

7.8355

Fortinet FortiGate

Adware/YourFileDownloader

11/30/2014

G Data

Win32.Application.ExpressDownloader

14.11.24

herdProtect (fuzzy)

variant of uninstall16165993.exe (Adware)

2014.1.5.18

IKARUS anti.virus

AdWare.Win32.YourFileDownloader

t3scan.2.2.29

K7 AntiVirus

Unwanted-Program

13.175.10837

Malwarebytes

PUP.Optional.GoForFiles.A

v2014.11.30.12

McAfee

Artemis!1DD42C91BE13

5600.6931

Qihoo 360 Security

Malware.QVM10.Gen

1.0.0.1015

Reason Heuristics

PUP.RighwayTechnologies.R

14.8.7.21

Rising Antivirus

PE:PUF.GoForFiles!1.9F70

23.00.65.141128

Sophos

Go For Files

4.89

Trend Micro House Call

TROJ_GEN.F47V0430

7.2.334

Trend Micro

TROJ_SPNR.08BK13

10.465.30

VIPRE Antivirus

Yontoo

17960

File size:

6.1 MB (6,438,536 bytes)

Product version:

2,0,0,0

Original file name:

GoforFiles.exe

File type:

Executable application (Win32 EXE)

Bundler/Installer:

YourFile Downloader

Language:

Language Neutral

Common path:

C:\users\{user}\appdata\local\temp\uninstall24195411.exe

Digital Signature

Signed by:

Righway Technologies, Inc

Authority:

COMODO CA Limited

Valid from:

8/22/2012 1:00:00 AM

Valid to:

8/23/2015 12:59:59 AM

Subject:

CN="Righway Technologies, Inc", O="Righway Technologies, Inc", STREET="1740 H Dell Range Blvd #281", L=Cheyenne, S=Wyoming, PostalCode=82009, C=US

Issuer:

CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:

0089B8C147F063769F8D685962C161E027

File PE Metadata

Compilation timestamp:

4/1/2013 5:39:41 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

196608:eR0whBjGZxJ4jTYx98cxxh0zRV4Y+ETOs:eR0qQZxbx9Zxr0bEs

Entry address:

0xDDAD

Entry point:

E8, C3, 6B, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 57, 56, 8B, 75, 0C, 8B, 4D, 10, 8B, 7D, 08, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, A0, 01, 00, 00, 81, F9, 80, 00, 00, 00, 72, 1C, 83, 3D, 84, A7, 42, 00, 00, 74, 13, 57, 56, 83, E7, 0F, 83, E6, 0F, 3B, FE, 5E, 5F, 75, 05, E9, 47, 08, 00, 00, F7, C7, 03, 00, 00, 00, 75, 14, C1, E9, 02, 83, E2, 03, 83, F9, 08, 72, 29, F3, A5, FF, 24, 95, 40... 
[+]

Code size:

109 KB (111,616 bytes)

The file uninstall24195411.exe has been discovered within the following program.

GoforFiles by Righway Technologies, Inc

GoforFiles bundles various adware toolbars including the Delta Search Toolbar (an adware toolbar that modifies the user's web browser home page, search settings and other settings).

www.goforfiles.com

70% remove it

Remove uninstall24195411.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.