How to remove CatalinaUpdateOnDemand.exe

CatalinaUpdateOnDemand.exe

The module CatalinaUpdateOnDemand.exe has been detected as Hijack.IE

CatalinaUpdateOnDemand.exe
Remove CatalinaUpdateOnDema

File Details

Product Name:

CatalinaGroup Update
Company Name:

Catalina Group Ltd.
MD5: 1f6f423d4218a178c2c496aa0775b24c
Size: 58 KB
First Published: 2017-06-12 16:04:44 (8 years ago)
Latest Published: 2021-01-04 14:17:16 (4 years ago)
Status: Hijack.IE (on last analysis)
Analysis Date: 2021-01-04 14:17:16 (4 years ago)

Overview

Signed By: Catalina Group Limited
Status: Valid

Common Places:

%localappdata%\catalinagroup\update\1.3.25.225
%profile%\bd\local settings\application data\catalinagroup\update\1.3.25.225
%localappdata%\catalinagroup\update
%profile%\enatual\local settings\application data\catalinagroup\update
%sysdrive%\windows.old\users\samuel\appdata\local\catalinagroup\update
%localappdata%\catalinagroup\update
%localappdata%\catalinagroup\update
%localappdata%\catalinagroup\update
%localappdata%\catalinagroup\update
%localappdata%\catalinagroup\update

File Names:

catalinaupdateondemand.exe
CatalinaUpdateOnDemand.exe

Geography:

20.3%
7.8%
6.5%
5.9%
5.2%
3.9%
3.9%
3.3%
2.6%
2.6%
2.6%
2.6%
2.6%
2.6%
2.6%
2.6%
2.6%
2.6%
2.0%
1.3%
1.3%
1.3%
1.3%
1.3%
1.3%
1.3%
1.3%
1.3%
1.3%
1.3%
0.7%

OS Version:

Windows 10 54.9%
Windows 7 32.7%
Windows 8.1 10.5%
Windows XP 2.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000013af

PE Sections:

Name Size of data MD5
.text 26112 00faf9de14c1917c47df6d0f95072f98
.rdata 7680 2d0527dccd20c5a15c88275482d83dfc
.data 3584 2a1e7b4872d11ea74f7a4001b89245cc
.rsrc 13312 c467607c3176222f7cbb995cf5a49801
.reloc 3584 f6060ad90ce8b7301329db956a535b97

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for CatalinaUpdateOnDemand.exe
copyright for information about CatalinaUpdateOnDemand.exe