home

uninstaller.exe

One System Care Limited

The application uninstaller.exe by One System Care Limited has been detected as a potentially unwanted program by 2 anti-malware scanners. The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. This is the uninstaller utility registered in the Windows Control Panel for the program One System Care by OneSystemCare. This file is typically installed with the program One System Care by OneSystemCare.
Publisher:
One System Care Limited  (signed and verified)

Version:
2.00.00.1

MD5:
d392f3a65effd1f3954a425f9039c7f1

SHA-1:
80c373a94656a19bd42b7bac8757862a9448a52b

SHA-256:
2da5844280849f09dda2b146e957090eeb2012f135f2b8f45118938696d6057a

Scanner detections:
2 / 68

Status:
Potentially unwanted

Analysis date:
11/27/2024 6:28:41 AM UTC  (today)

Scan engine
Detection
Engine version

Malwarebytes
PUP.Optional.OneSystemCare.A
v2015.06.09.10

Reason Heuristics
PUP.OneSystemCare.Installer.Meta (M)
16.6.29.13

File size:
500.5 KB (512,488 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

Language:
English (United States)

Common path:
C:\Program Files\onesystemcare\uninstaller.exe

Digital Signature
Signed by:
One System Care Limited

Authority:
Symantec Corporation

Valid from:
3/23/2015 6:00:00 PM

Valid to:
3/23/2016 5:59:59 PM

Subject:
CN=One System Care Limited, OU=IT edepartment, O=One System Care Limited, L=London, S=London W1S 1DA, C=GB

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
2921701CD0BE5D77AE345A65F1DBA846

File PE Metadata
Compilation timestamp:
2/24/2012 1:19:59 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:VEUXT45auV/k4RlZHFm1ulePxZf4EX12ihmEhSM0gOhiw8yib5um/ejiqLUzwIQZ:VEu4C0X8xZgmdJhSBhiw8LYLUpDYZ0I

Entry address:
0x39E3

Entry point:
81, EC, D4, 02, 00, 00, 53, 55, 56, 57, 6A, 20, 33, ED, 5E, 89, 6C, 24, 18, C7, 44, 24, 10, D8, 91, 40, 00, 89, 6C, 24, 14, FF, 15, 30, 80, 40, 00, 68, 01, 80, 00, 00, FF, 15, B8, 80, 40, 00, 55, FF, 15, C0, 82, 40, 00, 6A, 08, A3, B8, 2E, 47, 00, E8, 37, 2A, 00, 00, 55, 68, B4, 02, 00, 00, A3, D0, 2D, 47, 00, 8D, 44, 24, 38, 50, 55, 68, 1C, 93, 40, 00, FF, 15, 84, 81, 40, 00, 68, 04, 93, 40, 00, 68, C0, AD, 46, 00, E8, 19, 27, 00, 00, FF, 15, B4, 80, 40, 00, 50, BF, A0, 30, 4C, 00, 57, E8, 07, 27, 00, 00...
 
[+]

Entropy:
7.8485

Packer / compiler:
Nullsoft install system v2.x

Code size:
28 KB (28,672 bytes)

Program Uninstaller
Program name:
One System Care

Display publisher:
OneSystemCare

Display version:
2.00.00.1

Uninstall string:
C:\Program Files (x86)\OneSystemCare\Uninstaller.exe


The file uninstaller.exe has been discovered within the following program.

One System Care  by OneSystemCare
www.onesystemcare.com
44% remove it
 
Powered by Should I Remove It?

Remove uninstaller.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.