UNINS001.EXE
What you should do about UNINS001.EXE:
Check Your PC Now
The most common objects with the name of UNINS001.EXE have yet to be classified as safe by our research department.
If you are concerned that your PC might be infected why not try our Free Prevx CSI Scanner. It will thoroughly check your PC for millions of active Spyware and malware infections and takes less than 2 minutes. Don't take the risk, check your PC now by clicking the green button.
Who Uses Prevx CSI?
Prevx has been detecting the threats that others miss since 2004.
More than 2,050,615 people have scanned with Prevx CSI and between them have checked 29.1 billion files. 65% of the PCs scanned had malware present.
What we know about UNINS001.EXE:
The filename UNINS001.EXE was first seen on Nov 28 2007 in RUSSIAN FEDERATION. It has also been seen in the following geographical regions of the Prevx community:
- NETHERLANDS on Mar 18 2008
- The UNITED STATES on Mar 12 2008
- The EUROPEAN UNION on Dec 4 2007
- SPAIN on Dec 4 2007
The most common file size is 695,578 bytes. But the following file sizes have also been seen:
- 708,889 bytes
- 692,143 bytes
- 709,465 bytes
- 685,149 bytes
- 693,866 bytes
These files may have the following Vendor, Product, Version Information in the file header ; Setup/Uninstall; 0.0.0.0
- The following Vendor, Product, Version Information has also been reported:
UNINS001.EXE has been seen to perform the following behavior(s):
- Executes Processes stored in Temporary Folders
- This Process Creates Other Processes On Disk
- This Process Deletes Other Processes From Disk
- Executes a Process
- The Process is polymorphic and can change its structure
- Adds a Registry Key (RUN) to auto start Programs on system start up
- Adds a Registry Key (RUNONCE) to auto start Programs on system start up
- Writes to another Process's Virtual Memory (Process Hijacking)
UNINS001.EXE has been the subject of the following behavior(s):
- Created as a process on disk
- Executed as a Process
- Executed from Temporary Folders
- Deleted as a process from disk
- Terminated as a Process
- Has code inserted into its Virtual Memory space by other programs
- Registered as a Dynamic Link Library File
UNINS001.EXE can also use the following file names:
- _IU14D2N.TMP
- UNINS000.EXE
- A0010391.EXE
- A0240558.EXE
- 42961069.EXE
- 78787282.EXE
- 62549268.EXE
- 68912635.EXE
- 45129254.SVD
- 00000488.EXE
- 00009095.EXE
- UNINS005.EXE
- 85199534.EXE
- A0044050.EXE
- A0067789.EXE
- A0067894.EXE