RobeoSuaver
from InstalleRex-WebPick
What is RobeoSuaver?
This adware program is a JustPlug.It web browser extension that is delivered via the WebPick (InstalleRex) download and install manager. It is included with various adware offer bundles and is a cross browser extension that runs with multiple parts including a Windows service, an auto-starting component and the browser toolbar/plugin which is designed to inject advertisements in the browser in form of banner ads, hyper-text links and popups. In addition, some versions might hijack existing advertising on web sites as well as inject affiliate codes in links as coupon offers. The program will install itself in a folder with a random name in Program Files or ProgramData and each of the included files will also have a shared random generated name. The advertisements that are displayed in the browser could include deceptive malvertising ads for 'required' updates of known common programs as well as unwanted pop-ups advertisements. If downloaded these programs install a number of bundled adware utilities and additional browser extensions. Additionally components of the program will modify the browser's default security levels.
Overview
The primary executable is named ZIpTr8lsTQ.exe. A majority of users end up uninstalling this less than a week of it being installed. The setup package is about 1.87 MB (1,963,242 bytes) when donwloaded.
- Malware detected in the program
- Installs bundled adware using the WebPick InstalleRex
- Lowers the security level of the web browser
- May inject additional advertising in the browser
- Displays unwanted advertisements
- The experts agree, you should remove it!
Warning, multiple anti-virus scanners have detected possible malware in RobeoSuaver.
| ZIpTr8lsTQ.exe (4093b564f2e1195a2fe2290b4218afdb) has been flagged by the following 31 scanners: |
| Anti-Virus software | Version | Detection |
| Lavasoft Ad-Aware |
807 |
Gen:Variant.Adware.Strictor.61989 |
| AegisLab |
1.5 |
Troj.W32.Gen |
| Agnitum Outpost |
7.1.1 |
PUA.MultiPlug |
| AhnLab-V3 |
2014.10.18 |
Trojan/Win32.Preloader |
| Antiy-AVL |
1.0.0.1 |
Trojan/Win32.SGeneric |
| avast! |
2014.9-141120 |
Win32:Adware-gen [Adw] |
| AVG |
2015.0.3285 |
Generic5 |
| Avira |
7.11.179.110 |
TR/Crypt.EPACK.Gen2 |
| AVware |
1.5.0.21 |
Trojan.Win32.Generic!BT |
| Baidu-International |
4.0.3.141120 |
Adware.Win32.MultiPlug.bBN |
| Bitdefender |
1.0.20.1620 |
Gen:Variant.Adware.Strictor.61989 |
| Comodo Security |
19832 |
ApplicUnwnt |
| Emsisoft Anti-Malware |
8.14.11.20.02 |
Gen:Variant.Adware.Strictor.61989 |
| ESET-NOD32 |
8.10581 |
a variant of Win32/AdWare.MultiPlug.BN |
| Fortinet FortiGate |
11/20/2014 |
Riskware/MultiPlug |
| F-Secure |
11.2014-20-11_5 |
Gen:Variant.Adware.Strictor.61989 |
| G Data |
14.11.24 |
Gen:Variant.Adware.Strictor.61989 |
| K7 AntiVirus |
13.184.13718 |
Riskware |
| K7GW |
13.184.13718 |
Riskware ( 0040eff71 ) |
| Malwarebytes |
v2014.11.20.02 |
PUP.Optional.MultiPlug |
| McAfee |
5600.6941 |
RDN/Generic PUP.x!cmx |
| McAfee-GW-Edition |
7.6941 |
BehavesLike.Win32.Downloader.jh |
| MicroWorld-eScan |
15.0.0.972 |
Gen:Variant.Adware.Strictor.61989 |
| NANO AntiVirus |
0.28.2.62671 |
Trojan.Win32.EPACK.denyxj |
| Qihoo-360 |
1.0.0.1015 |
Win32/Trojan.e54 |
| Rising Antivirus |
23.00.65.141118 |
PE:Trojan.Win32.Generic.1742C76D!390252397 |
| Sophos |
4.98 |
Generic PUA ME |
| Symantec |
11/20/2014 rev. 5 |
Trojan.Gen |
| Trend Micro |
10.465.20 |
TROJ_SPNR.35JG14 |
| TrendMicro-HouseCall |
7.2.324 |
TROJ_SPNR.35JG14 |
| VIPRE Antivirus |
34026 |
Trojan.Win32.Generic!BT |
View all 31 all detections
Program details
Displayed publisher: ROboSAAvver
Installation folder: C:\ProgramData\robeosuaver
Uninstaller: "C:\ProgramData\RobeoSuaver\ZIpTr8lsTQ.exe" /s /n /C:"ExecuteCommands;UninstallCommands" ""
Estimated size: 1.87 MB
Files installed by RobeoSuaver
| Program executable: | ZIpTr8lsTQ.exe (Malware detected) |
| Name: | data stable applications |
| servers |
| Path: | C:\ProgramData\robeosuaver\ZIpTr8lsTQ.exe |
| MD5: | 4093b564f2e1195a2fe2290b4218afdb |
How do I remove RobeoSuaver?
You can uninstall RobeoSuaver from your computer by using the Add/Remove Program feature in the Window's Control Panel.
- On the Start menu (for Windows 8, right-click the screen's bottom-left corner), click Control Panel, and then, under Programs, do one of the following:
- Windows Vista/7/8/10: Click Uninstall a Program.
- Windows XP: Click Add or Remove Programs.
- When you find the program RobeoSuaver, click it, and then do one of the following:
- Windows Vista/7/8/10: Click Uninstall.
- Windows XP: Click the Remove or Change/Remove tab (to the right of the program).
- Follow the prompts. A progress bar shows you how long it will take to remove RobeoSuaver.
- If for some reason uninstallation fails, please install Microsoft's uninstall fixer utility which will help fix problems with programs that can't be uninstalled at support.microsoft.com.
USER ACTIONS
 |
Uninstall it 83%
Keep it 17%
|
|
|
MOST USED OS
~99%
Windows 7 (SP1)
|
|
COUNTRY POPULARITY
83.33%
United States
|
Geography
83.33% of installs come from the United States
Which countries install it?
| United States |
83.33% |
| Ireland |
16.67% |