{"id":1421,"date":"2014-08-12T22:21:37","date_gmt":"2014-08-12T22:21:37","guid":{"rendered":"http:\/\/www.freefixer.com\/b\/?p=1421"},"modified":"2018-05-29T12:02:47","modified_gmt":"2018-05-29T12:02:47","slug":"servicechecker-pirrit-uptupdater-exe","status":"publish","type":"post","link":"https:\/\/www.freefixer.com\/b\/servicechecker-pirrit-uptupdater-exe\/","title":{"rendered":"ServiceChecker, Pirrit and UptUpdater.exe Removal Instructions"},"content":{"rendered":"<p>Another find today. Stumbled on a file called\u00a0<a href=\"http:\/\/www.freefixer.com\/library\/file\/UptUpdater.exe-137043\/\">UptUpdater.exe<\/a>, also bundled by an <a title=\"Smart Secure Software S.l \u2013 Bundling and VirusTotal Report\" href=\"http:\/\/www.freefixer.com\/b\/smart-secure-software-s-l\/\">unofficial\u00a0Google Chrome download<\/a>. I first spotted the\u00a0UptUpdater.exe file running in the Windows Task Manager, but after a while UptUpdater.exe showed its GUI, where it claimed to install something called\u00a0<strong>ServiceChecker:<\/strong><a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/ServiceChecker.png\"><img loading=\"lazy\" class=\"alignnone wp-image-1422 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/ServiceChecker.png\" alt=\"ServiceChecker\" width=\"519\" height=\"408\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/ServiceChecker.png 519w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/ServiceChecker-300x235.png 300w\" sizes=\"(max-width: 519px) 100vw, 519px\" \/><\/a><\/p>\n<p>Anyway, as usual when I find some new file, I upload them to VirusTotal to see what the anti-virus scanners says about the file. Turns out\u00a0UptUpdater.exe is detected by a file of the anti-virus scanners, under names such as\u00a0<strong>Adware.Win32.Pirrit<\/strong>,\u00a0<strong>Adware.Downware<\/strong> and\u00a0<strong>Pirrit<\/strong>.<a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/UptUpdater.exe-Pirrit.png\"><img loading=\"lazy\" class=\"alignnone wp-image-1423 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/UptUpdater.exe-Pirrit.png\" alt=\"UptUpdater.exe Pirrit VirusTotal Report\" width=\"831\" height=\"355\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/UptUpdater.exe-Pirrit.png 831w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/UptUpdater.exe-Pirrit-300x128.png 300w\" sizes=\"(max-width: 831px) 100vw, 831px\" \/><\/a><\/p>\n<p>If you&#8217;d like to remove Pirrit from your machine, you can do so by selecting the\u00a0UptUpdater.exe file in <a title=\"About FreeFixer\" href=\"http:\/\/www.freefixer.com\/b\/about-freefixer\/\">FreeFixer<\/a>:<a href=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/UptUpdater.exe-process.png\"><img loading=\"lazy\" class=\"alignnone wp-image-1424 size-full\" src=\"http:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/UptUpdater.exe-process.png\" alt=\"UptUpdater.exe process\" width=\"736\" height=\"331\" srcset=\"https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/UptUpdater.exe-process.png 736w, https:\/\/www.freefixer.com\/b\/wp-content\/uploads\/2014\/08\/UptUpdater.exe-process-300x134.png 300w\" sizes=\"(max-width: 736px) 100vw, 736px\" \/><\/a><\/p>\n<p>Did you also find the\u00a0ServiceChecker\/Pirrit\/UptUpdater.exe on your computer? Any idea how it was installed?<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Another find today. Stumbled on a file called\u00a0UptUpdater.exe, also bundled by an unofficial\u00a0Google Chrome download. I first spotted the\u00a0UptUpdater.exe file running in the Windows Task Manager, but after a while UptUpdater.exe showed its GUI, where it claimed to install something called\u00a0ServiceChecker: Anyway, as usual when I find some new file, I upload them to VirusTotal &hellip; <a href=\"https:\/\/www.freefixer.com\/b\/servicechecker-pirrit-uptupdater-exe\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">ServiceChecker, Pirrit and UptUpdater.exe Removal Instructions<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[16],"tags":[],"_links":{"self":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1421"}],"collection":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/comments?post=1421"}],"version-history":[{"count":3,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1421\/revisions"}],"predecessor-version":[{"id":2327,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/posts\/1421\/revisions\/2327"}],"wp:attachment":[{"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/media?parent=1421"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/categories?post=1421"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.freefixer.com\/b\/wp-json\/wp\/v2\/tags?post=1421"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}