unwash.exe

Discussion in 'malware problems & news' started by mr burns, Oct 9, 2004.

Thread Status:
Not open for further replies.
  1. mr burns

    mr burns Registered Member

    Joined:
    Sep 24, 2004
    Posts:
    8
    has anyone any idea what this 'unwash.exe' is?
    i've tried a google search and it only came up with one link - in german.

    it was found when i was running an ewido scan, and is now quarantined. but i'd like to know what it is and where it could have come from.

    i'm usually clean as a whistle and this is annoying me!
     
  2. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,779
    Location:
    Texas
    I checked the Ewido database and it wasn't listed.
    You can submit that file to Ewido here
     
  3. Bubba

    Bubba Updates Team

    Joined:
    Apr 15, 2002
    Posts:
    11,271
  4. FanJ

    FanJ Guest

    Yes, as others already posted, submit it to Ewido and scan the file online at KAV and Dr.Web.


    I too have the file :
    C:\WINDOWS\unwash.exe

    Somehow I think it might be related to uninstalling an older version of WindowWasher from WebRoot, but I am not completely sure about that.

    I also have :
    C:\WINDOWS\unwash5.exe
    and that file is the uninstall file for the version of WindowWasher which I have at the moment installed.
     
  5. peter.ewido

    peter.ewido former ewido team

    Joined:
    Nov 10, 2003
    Posts:
    737
    Location:
    Brno, Czech Republic
    Could be a false positive. Could you please send the file to submit@ewido.net? Thanks!
     
  6. FanJ

    FanJ Guest

    Hi,

    I don't know whether both files are the same, so here is my MD5 checksum (calculated by CryptoSuite) :

    The file <C:\WINDOWS\unwash.exe> has the following Checksum(s)

    MD5 - 4621F52EA51C8E37C120C066ED8480FB
     
  7. FanJ

    FanJ Guest

    Hi,

    I'll send you my file (zipped).
    Give me a few minutes ;)

    Of course I don't know whether the file from Mr.Burns is the same as mine ;)

    Cheers, Jan.
     
  8. peter.ewido

    peter.ewido former ewido team

    Joined:
    Nov 10, 2003
    Posts:
    737
    Location:
    Brno, Czech Republic
    Thanks for the file! It's indeed a false positive and will be fixed with the next update.
     
  9. FanJ

    FanJ Guest

  10. mr burns

    mr burns Registered Member

    Joined:
    Sep 24, 2004
    Posts:
    8
    sorry to sound like a fool, but how do i do this?

    it may not matter anyway, judging by the response below.
     
  11. mr burns

    mr burns Registered Member

    Joined:
    Sep 24, 2004
    Posts:
    8

    certainly i had windows washer installed a long time ago, just for the evaluation period, then i ditched it.

    but nothing has ever shown up on registry cleans etc.
     
Thread Status:
Not open for further replies.