How to remove mwesuninstall.exe

mwesuninstall.exe

The module mwesuninstall.exe has been detected as Adware.MyWebShield

mwesuninstall.exe
Remove mwesuninstall.exe

File Details

Product Name:

My Web Shield
Company Name:

"My Web Shield"
MD5: bc5322d1ebaa3b7d3d246ab76b51ee50
Size: 444 KB
First Published: 2017-05-26 12:10:10 (8 years ago)
Latest Published: 2022-02-19 23:30:18 (3 years ago)
Status: Adware.MyWebShield (on last analysis)
Analysis Date: 2022-02-19 23:30:18 (3 years ago)

Overview

Signed By: Chichek Konstrakshn, TOV
Status: Invalid (digital signature could be stolen or file could be patched)

Common Places:

%windir%\temp\f9626892-7a78-3199-abd2-97bbce96297b
%programfiles%\my web shield
%localappdata%\temp
%sysdrive%\docume~1\admin\locals~1\temp
%temp%\72a364ab-30f1-4745-95fe-f4ebd1f77468
%sysdrive%\adwcleaner\quarantine\files\iqztaxpbphnvcxfyhlgykawdhxzhykpv
%temp%\4a611ab1-9729-4bff-b0fa-aeca5fb6005f
%temp%\bffb227e-8416-4d23-9557-c7221f844bd7
%sysdrive%\docume~1\yura\locals~1\temp
%sysdrive%\system volume information\_restore{e96762e9-1e37-4932-bdaf-62a61d8243bb}\rp335

File Names:

adv_333.exe
mwesuninstall.exe
mwesinstall.exe
72A364AB-30F1-4745-95FE-F4EBD1F77468.exe
4A611AB1-9729-4BFF-B0FA-AECA5FB6005F.exe
BFFB227E-8416-4D23-9557-C7221F844BD7.exe
A0387722.exe
A0353761.exe
4D1D5641-71BD-4C6F-A914-A3C1D2828B92.exe
10077B99-1D37-426F-A2E1-BF42C183AC6C.exe.deleted.1393328
2A3A3985-849D-43E8-99E3-CE19A311D563.exe.deleted.2624484
2AF3A279-8C3A-4D3F-9A9C-3FAF0A32B77A.exe
2EB4B8A8-F1BE-4120-AF5D-1EF4A8546B62.exe
5C3CCEDD-AE87-4805-B218-960FC96EEA19.exe

Geography:

45.5%
21.6%
13.6%
6.8%
3.4%
3.4%
2.3%
2.3%
1.1%

OS Version:

Windows 10 40.7%
Windows XP 20.9%
Windows 8.1 19.8%
Windows 7 15.4%
Windows 8 3.3%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x0000e499

PE Sections:

Name Size of data MD5
.text 118272 7cb0400f264d5b69509566a46733dc51
.rdata 37888 9ab1961b5de7bc69dd64bdd9cc0fb4d2
.data 6656 17fc78546fed70d132f06245f15ab55e
.rsrc 276992 de060bf2b0e49d5a5155359105adbdaa
.reloc 8704 ae4db5d0298f48d15aff3bf876943873

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for mwesuninstall.exe
copyright for information about mwesuninstall.exe