Home Malware Programs Potentially Unwanted Programs (PUPs) Advanced Calendar

Advanced Calendar

Posted: September 1, 2015

Threat Metric

Ranking: 3,397
Threat Level: 1/10
Infected PCs: 347,066
First Seen: July 15, 2015
Last Seen: March 9, 2025
OS(es) Affected: Windows

You should think twice before you give permission for the installation of Advanced Calendar. This application comes with a range of annoying side effects, most noticeable of which are the newly generated advertising materials. The negative user feedback is the reason the computer experts label Advanced Calendar as a Potentially Unwanted Program (PUP). The most popular distribution strategy of this questionable tool is also rather misleading. In almost all cases, it arrives in the systems of its clients together with another free application. This approach is called "bundling", and is so efficient because the users often conduct the installation of freeware through the "Quick" menu. It usually doesn't provide detailed data about the suggested bonus elements, and, as a result, some users may load Advanced Calendar unintentionally. This program, which has been developed by Meixian Xie, allows its clients to schedule their daily tasks. You can achieve it with the help of the integrated Windows calendar as well, so the benefits of keeping Advanced Calendar are questionable at best. What annoys some users is that the PUP inserts pop-ups, banners and sponsored videos in Google Chrome, Mozilla Firefox and Internet Explorer. These ads may slow down the operating speed of the web clients. If your PC is not so powerful, you may experience occasional freezes and crashes as well because the commercial materials use some of the system resources. The ads are related to your browsing history and may be tempting, but you should not click on them. They may transfer you to fraudulent or potentially harmful domains. If you feel that Advanced Calendar comes with more cons than pros, you should delete it with a dedicated anti-malware product.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



%PROGRAMFILES(x86)%\calendartool\2.0.0.1000176\calendarserv.exe File name: calendarserv.exe
Size: 151.69 KB (151696 bytes)
MD5: 47333d19e8da47a6cdf23fc7a800983d
Detection count: 29,192
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\calendartool\2.0.0.1000176\calendarserv.exe
Group: Malware file
Last Updated: November 1, 2024
C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\CalendarTool\2.0.0.11153\CalendarServ.exe.vir File name: CalendarServ.exe.vir
Size: 153.22 KB (153224 bytes)
MD5: c1cd0889ed320a037125124f1a00665a
Detection count: 506
Mime Type: unknown/vir
Path: C:\AdwCleaner\FileQuarantine\C\Program Files (x86)\CalendarTool\2.0.0.11153\CalendarServ.exe.vir
Group: Malware file
Last Updated: June 9, 2023
%PROGRAMFILES(x86)%\CalendarTool\2.0.0.1000121\Calendar.exe File name: Calendar.exe
Size: 3.93 MB (3933808 bytes)
MD5: 8e1b795b41fb8d11eec02731d15cd362
Detection count: 316
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES(x86)%\CalendarTool\2.0.0.1000121
Group: Malware file
Last Updated: September 23, 2019
%PROGRAMFILES%\CalendarTool\2.0.0.11393\Connect.exe File name: Connect.exe
Size: 718.44 KB (718448 bytes)
MD5: d97aa57d141f4423c120d998f9a65165
Detection count: 201
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\CalendarTool\2.0.0.11393
Group: Malware file
Last Updated: January 23, 2020
C:\Users\<username>\AppData\Local\Temp\81436222446\1AB6RN3.exe File name: 1AB6RN3.exe
Size: 530.88 KB (530888 bytes)
MD5: 470387f47e2f8fdca495e926fe084146
Detection count: 21
File type: Executable File
Mime Type: unknown/exe
Path: C:\Users\<username>\AppData\Local\Temp\81436222446\1AB6RN3.exe
Group: Malware file
Last Updated: August 17, 2022

More files

Registry Modifications

The following newly produced Registry Values are:

Regexp file mask%WINDIR%\System32\Tasks\ToolsUpdatePlatform_ScheduledTask%WINDIR%\System32\Tasks\{3B7FD029-D932-411b-AF15-C96CF8EF0C18}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}%WINDIR%\System32\Tasks\{D9BAB2C9-5236-48c3-AF02-67E799F09BBD}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}%WINDIR%\Tasks\ToolsUpdatePlatform_ScheduledTask.job%WINDIR%\Tasks\{3B7FD029-D932-411b-AF15-C96CF8EF0C18}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}.job%WINDIR%\Tasks\{D9BAB2C9-5236-48c3-AF02-67E799F09BBD}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}.jobHKEY..\..\..\..{RegistryKeys}SOFTWARE\CalendarToolSOFTWARE\DtsEncodeToolsSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\ToolsUpdatePlatform_ScheduledTask.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\ToolsUpdatePlatform_ScheduledTask.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\{3B7FD029-D932-411b-AF15-C96CF8EF0C18}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\{3B7FD029-D932-411b-AF15-C96CF8EF0C18}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\{D9BAB2C9-5236-48c3-AF02-67E799F09BBD}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}.jobSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\CompatibilityAdapter\Signatures\{D9BAB2C9-5236-48c3-AF02-67E799F09BBD}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}.job.fpSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ToolsUpdatePlatform_ScheduledTaskSOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{3B7FD029-D932-411b-AF15-C96CF8EF0C18}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{D9BAB2C9-5236-48c3-AF02-67E799F09BBD}{19F8DB95-4D78-4ddb-AC71-C610654FE37F}SOFTWARE\ToolsUpdatePlatformSOFTWARE\Wow6432Node\ToolsUpdatePlatformSYSTEM\ControlSet001\services\TheCalendarServiceSYSTEM\ControlSet002\services\TheCalendarServiceSYSTEM\CurrentControlSet\services\TheCalendarServiceHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}{6A128791-4857-4484-9BB2-71D4C1257200}{D9BAB2C9-5236-48c3-AF02-67E799F09BBD}

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\ToolsUpdatePlatform%ALLUSERSPROFILE%\ToolsUpdatePlatform%APPDATA%\CalendarTool%APPDATA%\{2f3aa0f6-976c-4b02-a66a-5d1dea00811f}%PROGRAMFILES%\CalendarTool%PROGRAMFILES%\ToolsUpdatePlatform%PROGRAMFILES(x86)%\CalendarTool%PROGRAMFILES(x86)%\ToolsUpdatePlatform%WINDIR%\SysWOW64\config\systemprofile\AppData\Roaming\CalendarTool%WINDIR%\System32\config\systemprofile\AppData\Roaming\CalendarTool
Loading...