home

UninstallTool.exe

Uninstall Tool

crystalidea.com

This is a self-extracting archive and installer. This file is installed with the program Uninstall Tool.
Publisher:
CrystalIDEA Software  (signed by crystalidea.com)

Product:
Uninstall Tool

Version:
3.3.0.5304

MD5:
32d86d8af4f0a9f41e5ee297a0e134cc

SHA-1:
6a14f0fc7f2a70ed08c552739e6485abb2c6465e

SHA-256:
e71ccf0b09cdebdd6769063c5c8c79dbb6c0852bbfbbc6c0a84eec157d7fe8b8

Scanner detections:
4 / 68

Status:
Clean  (4 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
12/26/2024 11:12:28 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.TsCabk
1.3.0.4613

Trend Micro House Call
TROJ_GEN.F47V0122
7.2.342

VIPRE Antivirus
Trojan.Crypt.Krap
16396

ViRobot
Backdoor.Win32.A.Hupigon.3313656
2011.4.7.4223

File size:
3.2 MB (3,311,608 bytes)

Product version:
3.3.0.5304

Copyright:
Copyright (C) 2004-2013 CRYSTALIDEA Software

Original file name:
UninstallTool.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\uninstall tool\uninstalltool.exe

Digital Signature
Signed by:
crystalidea.com

Authority:
Unizeto Technologies S.A.

Valid from:
1/19/2012 8:01:33 AM

Valid to:
1/18/2014 8:01:33 AM

Subject:
E=support@crystalidea.com, CN=crystalidea.com, O=crystalidea.com, C=PL

Issuer:
CN=Certum Code Signing CA, OU=Certum Certification Authority, O=Unizeto Technologies S.A., C=PL

Serial number:
1DDC40D355C5DF7D3AF4E0D69A788359

File PE Metadata
Compilation timestamp:
4/7/2013 5:02:24 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:FFPCzc/2VLJAB2olhJqHwdubaJqHwdub0hCfFh5DgoEMT:rCp1ABtu5DgMT

Entry address:
0x31B03A

Entry point:
E9, 67, 74, FF, FF, 68, 51, 55, 13, E1, BE, A3, EA, 0E, 34, 47, F5, 1E, 7A, 74, EA, 9E, 37, 00, 00, CB, 2D, 48, B8, B3, D4, 6F, 4C, 53, B4, B2, 8B, 28, D8, 27, 7E, 4A, BA, 61, E9, B4, 6F, 00, 00, E8, AF, AB, FE, FF, 8F, 4E, E2, 1B, F7, D1, E8, 4B, 0A, FE, FF, 1F, E6, 2C, C1, 26, 07, F0, B6, E8, 2C, 4B, FC, FF, 83, 73, D6, 87, DE, 06, 00, AD, E9, 64, 41, FF, FF, E8, 8C, 58, FC, FF, A5, CD, E4, 3D, 05, 07, F0, 9E, E8, E5, 18, FE, FF, AF, BE, B4, 23, 05, 07, 20, D8, E9, 52, 11, 00, 00, E8, BF, 1F, FE, FF, B2...
 
[+]

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
1.8 MB (1,915,904 bytes)

The file UninstallTool.exe has been discovered within the following program.

Uninstall Tool  by CrystalIdea Software, Inc.
Publisher's description - “Uninstaller that works with lightning speed, performs complete removal of software and manages programs that run at system startup.”
www.crystalidea.com
22% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communications in live environments.

TCP (HTTP SSL):
Connects to crystalidea.com  (173.230.144.164:443)

Scan UninstallTool.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.