Home Possibly Unwanted Program Uncheckit

Uncheckit

Posted: May 27, 2016

Threat Metric

Ranking: 12,382
Threat Level: 1/10
Infected PCs: 58,412
First Seen: May 27, 2016
Last Seen: January 29, 2025
OS(es) Affected: Windows


Uncheckit is suspicious software that is supposed to help you prevent the installations of Potentially Unwanted Programs (PUPs). In theory, this application should unmark the checkboxes of all questionable programs that try to sneak in alongside a software that you download willingly. Ironically, Uncheckit is itself a PUP. Some PC users may install Uncheckit intentionally from its official site or several other pages that host it. In some cases, Uncheckit may enter silently via this mentioned method known as bundling. If you trust only legit software platforms and conduct a setup process via the 'Advanced' menu, you should be able to keep such PUPs away. There are several negative aspects of Uncheckit. Since this app is not legit, Uncheckit may be unable to fulfill the features that it promises. Another problem is that this PUP is supported by annoying online ads. You may notice them whenever you launch Google Chrome, Mozilla Firefox or Internet Explorer. The developers of Uncheckit may use different tactics to make the user visit their partners. Uncheckit may inject commercial materials like pop-ups and banners, which may seize a substantial area of the screen. The PUP also may interfere with the search results or suggest you another search provider. You may notice such a questionable site as your homepage. At the front positions, Uncheckit may show you links that lead to affiliated sites. Some of the ads may open e-commerce platforms that sell different merchandise. Other sponsored links, however, may open highly questionable domains that may offer you additional PUPs. They may even attempt to deploy threats, so you should not agree to install anything. The ads by Uncheckit may lead to real functionality errors and glitches of your browsers. If your hardware is older, you may experience sudden speed drops or freezes. As you probably suspect, this PUP is stubborn and may be immune to conventional uninstall tactics. You should use special security software to eliminate Uncheckit efficiently.

Technical Details

File System Modifications

Tutorials: If you wish to learn how to remove malware components manually, you can read the tutorials on how to find malware, kill unwanted processes, remove malicious DLLs and delete other harmful files. Always be sure to back up your PC before making any changes.

The following files were created in the system:



C:\Program Files (x86)\Uncheckit\trzA91D.tmp File name: trzA91D.tmp
Size: 282.91 KB (282912 bytes)
MD5: 4f68de7a17fc238023c03779810bfbea
Detection count: 923
File type: Temporary File
Mime Type: unknown/tmp
Path: C:\Program Files (x86)\Uncheckit\trzA91D.tmp
Group: Malware file
Last Updated: November 27, 2021
%WINDIR%\System32\MRT\E36D6367-DF23-4D09-B5B1-1FC38109F29C\FilesStash\CC289A69-D57A-F7E5-1BC9-7384E1036569_1d23d88eceeae2a File name: CC289A69-D57A-F7E5-1BC9-7384E1036569_1d23d88eceeae2a
Size: 274.17 KB (274176 bytes)
MD5: a8fab6dc582505217f78e9068cab2d23
Detection count: 646
Path: %WINDIR%\System32\MRT\E36D6367-DF23-4D09-B5B1-1FC38109F29C\FilesStash\CC289A69-D57A-F7E5-1BC9-7384E1036569_1d23d88eceeae2a
Group: Malware file
Last Updated: July 26, 2021
C:\WINDOWS\System32\MRT\2168C094-1DFC-43A9-B58E-EB323313845B\FilesStash\DF8F271D-887D-4142-4E82-D23D5C5239C0_1d212ac86d2f66a File name: DF8F271D-887D-4142-4E82-D23D5C5239C0_1d212ac86d2f66a
Size: 294.14 KB (294144 bytes)
MD5: 6f3c9f16cbcb73bb32adbafeba020aca
Detection count: 574
Path: C:\WINDOWS\System32\MRT\2168C094-1DFC-43A9-B58E-EB323313845B\FilesStash\DF8F271D-887D-4142-4E82-D23D5C5239C0_1d212ac86d2f66a
Group: Malware file
Last Updated: March 24, 2022
%WINDIR%\System32\MRT\E36D6367-DF23-4D09-B5B1-1FC38109F29C\FilesStash\202DF4DB-D24F-BE57-1925-4B9FEE5A6890_1d23d88ece1fa77 File name: 202DF4DB-D24F-BE57-1925-4B9FEE5A6890_1d23d88ece1fa77
Size: 294.14 KB (294144 bytes)
MD5: 055add9e7d58c9215e6728735e492217
Detection count: 497
Path: %WINDIR%\System32\MRT\E36D6367-DF23-4D09-B5B1-1FC38109F29C\FilesStash\202DF4DB-D24F-BE57-1925-4B9FEE5A6890_1d23d88ece1fa77
Group: Malware file
Last Updated: July 26, 2021
C:\WINDOWS\System32\MRT\2168C094-1DFC-43A9-B58E-EB323313845B\FilesStash\2C19ADD4-E52F-A8F2-8580-8349F4E69731_1d212ac980bf971 File name: 2C19ADD4-E52F-A8F2-8580-8349F4E69731_1d212ac980bf971
Size: 274.17 KB (274176 bytes)
MD5: e3e5935a2d38a10b01f7f2f2df1f03f9
Detection count: 478
Path: C:\WINDOWS\System32\MRT\2168C094-1DFC-43A9-B58E-EB323313845B\FilesStash\2C19ADD4-E52F-A8F2-8580-8349F4E69731_1d212ac980bf971
Group: Malware file
Last Updated: March 24, 2022
%WINDIR%\System32\MRT\E36D6367-DF23-4D09-B5B1-1FC38109F29C\FilesStash\35A55740-3B33-1E1E-D85D-092EE3F42C2D_1d23d88ecfdde1e File name: 35A55740-3B33-1E1E-D85D-092EE3F42C2D_1d23d88ecfdde1e
Size: 247.55 KB (247552 bytes)
MD5: cbbbfd8d0b29c9a1a6a3721e155d7fe4
Detection count: 382
Path: %WINDIR%\System32\MRT\E36D6367-DF23-4D09-B5B1-1FC38109F29C\FilesStash\35A55740-3B33-1E1E-D85D-092EE3F42C2D_1d23d88ecfdde1e
Group: Malware file
Last Updated: January 29, 2022
c:\program files (x86)\uncheckit\cktsvc.exe File name: cktsvc.exe
Size: 274.17 KB (274176 bytes)
MD5: 38ae3c23f047281846843f1ac9ac7d0b
Detection count: 232
File type: Executable File
Mime Type: unknown/exe
Path: c:\program files (x86)\uncheckit\cktsvc.exe
Group: Malware file
Last Updated: February 19, 2023
C:\Program Files (x86)\Uncheckit\UncheckitSvc.exe File name: UncheckitSvc.exe
Size: 247.62 KB (247624 bytes)
MD5: c9080d2100e578a706c2895fff1a83b3
Detection count: 199
File type: Executable File
Mime Type: unknown/exe
Path: C:\Program Files (x86)\Uncheckit\UncheckitSvc.exe
Group: Malware file
Last Updated: November 28, 2023
%PROGRAMFILES%\Uncheckit\Uncheckit.exe File name: Uncheckit.exe
Size: 281.88 KB (281888 bytes)
MD5: 8477bae1fef7e9279c1c75613bed8807
Detection count: 28
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Uncheckit
Group: Malware file
Last Updated: December 14, 2020
%PROGRAMFILES%\Uncheckit\UncheckitHelper.exe File name: UncheckitHelper.exe
Size: 460.06 KB (460064 bytes)
MD5: a621b9eed83d8bd02e310eb54cc4f33b
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Uncheckit
Group: Malware file
Last Updated: December 14, 2020
%PROGRAMFILES%\Uncheckit\UncheckitUpdate.exe File name: UncheckitUpdate.exe
Size: 195.32 KB (195324 bytes)
MD5: 5d9f1d91ad01c07d8a0fe1098b7ee03a
Detection count: 23
File type: Executable File
Mime Type: unknown/exe
Path: %PROGRAMFILES%\Uncheckit
Group: Malware file
Last Updated: July 30, 2016

More files

Registry Modifications

The following newly produced Registry Values are:

File name without pathUncheckit.lnkRegexp file mask%WinDir%\System32\Tasks\UncheckitTask[RANDOM CHARACTERS]%WinDir%\System32\Tasks\UncheckitUpdateTask[RANDOM CHARACTERS]HKEY..\..\..\..{RegistryKeys}SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\UncheckitTaskMNSOFTWARE\UncheckitSOFTWARE\Wow6432Node\UncheckitSYSTEM\ControlSet001\services\cktSvcSYSTEM\ControlSet001\services\UncheckitSvcSYSTEM\ControlSet002\services\cktSvcSYSTEM\ControlSet002\services\UncheckitSvcSYSTEM\CurrentControlSet\services\cktSvcSYSTEM\CurrentControlSet\services\UncheckitSvcHKEY_LOCAL_MACHINE\Software\[APPLICATION]\Microsoft\Windows\CurrentVersion\Uninstall..{Uninstaller}Uncheckit

Additional Information

The following directories were created:
%ALLUSERSPROFILE%\Application Data\Uncheckit%ALLUSERSPROFILE%\Application Data\uckt%ALLUSERSPROFILE%\Microsoft\Windows\Start Menu\Programs\Uncheckit%ALLUSERSPROFILE%\Uncheckit%ALLUSERSPROFILE%\uckt%PROGRAMFILES%\Uncheckit%PROGRAMFILES(x86)%\Uncheckit%WINDIR%\SysWOW64\config\systemprofile\AppData\Roaming\Uncheckit%WINDIR%\system32\config\systemprofile\AppData\Roaming\Uncheckit%appdata%\Uncheckit
Loading...