home

uninstaller.exe

ADV Publishing

The application uninstaller.exe by ADV Publishing has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. This is a setup and installation application and has been known to bundle potentially unwanted software. This is the uninstaller utility registered in the Windows Control Panel for the program PCBackup wizard by PCBackup wizard. This file is typically installed with the program PCBackup wizard.
Publisher:
ADV Publishing  (signed and verified)

MD5:
45b923365d2e0809a974fc4adfa011d5

SHA-1:
49986152a23aef617a34c60cc09b8c605123e06d

SHA-256:
6bb6dc33457013948cbe8baaedd501e1cad06e5fa8bfe9cd692427518a3e59b2

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/5/2024 1:36:25 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.ADVPubli.Installer (M)
16.7.8.18

File size:
295.3 KB (302,344 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\pcbackup wizard\uninstaller.exe

Digital Signature
Signed by:
ADV Publishing

Authority:
DigiCert Inc

Valid from:
7/14/2015 1:00:00 AM

Valid to:
9/20/2017 1:00:00 PM

Subject:
CN=ADV Publishing, O=ADV Publishing, L=West Hollywood, S=California, C=US

Issuer:
CN=DigiCert SHA2 Assured ID Code Signing CA, OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:
0D3EE7D0C318767DCA11A80A3452B8C4

File PE Metadata
Compilation timestamp:
7/8/2016 9:06:49 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
6144:J3UmsXiYdf3hBERlV4LoDIRe18dH4OSg7:JbsSYx3h6lzDIRe1KYOSg7

Entry address:
0xD96A

Entry point:
E8, CB, 05, 00, 00, E9, 80, FE, FF, FF, FF, 25, D8, 31, 42, 00, 50, 64, FF, 35, 00, 00, 00, 00, 8D, 44, 24, 0C, 2B, 64, 24, 0C, 53, 56, 57, 89, 28, 8B, E8, A1, BC, 01, 43, 00, 33, C5, 50, 89, 65, F0, FF, 75, FC, C7, 45, FC, FF, FF, FF, FF, 8D, 45, F4, 64, A3, 00, 00, 00, 00, F2, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 51, 8D, 4C, 24, 08, 2B, C8, 83, E1, 0F, 03, C1, 1B, C9, 0B, C1, 59, E9, CA, 06, 00, 00, 51, 8D, 4C, 24, 08, 2B, C8, 83, E1, 07, 03, C1, 1B, C9, 0B, C1, 59, E9, B4, 06...
 
[+]

Code size:
133.5 KB (136,704 bytes)

Program Uninstaller
Program name:
PCBackup wizard

Display publisher:
PCBackup wizard

Uninstall string:
"C:\Program Files (x86)\PCBackup Wizard\uninstaller.exe" /uninstall


The file uninstaller.exe has been discovered within the following program.

PCBackup wizard  by PCBackup wizard
support.pcbackupwizard.net
About 3% of users remove it
 
Powered by Should I Remove It?

Remove uninstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.