ShouldIRemoveIt.exe
Should I Remove It? by Reason Software Company Inc. (Signed)
| Version: | 1.0.4.781 |
| MD5: | 42928a1a713f8cda8a5660f788d0b89d |
| SHA1: | 9903fd463e4b3356b664264a081bf8aea443a34c |
| SHA256: | e7967ade3f86ce9254d095f90c968eaced311858b1756f9d13595f7cbaaf4a4c |
Overview
shouldiremoveit.exe executes as a process with the local user's privileges. It is an auto-starting process that used the Windows Task Scheduler service to load when the user logs into Windows (sometimes this is required to bypass the UAC protection). It is installed with a couple of know programs including Cloob Messenger published by cloob.com, Angry Birds Rio from Rovio and Angry Birds Rio by Rovio. The assembly utilizes the .NET run-time framework (which is required to be installed on the PC). The file is digitally signed by Reason Software Company Inc. which was issued by the VeriSign certificate authority (CA).
Details
| File name: | shouldiremoveit.exe |
| Publisher: | Reason Software Company Inc. |
| Product name: | Should I Remove It? |
| Typical file path: | C:\users\user\appdata\roaming\reason\should i remove it\shouldiremoveit.exe |
| File version: | 1.0.4.781 |
| Size: | 439.81 KB (450,368 bytes) |
| Certificate |
| Issued to: | Reason Software Company Inc. |
| Authority (CA): | VeriSign |
| Effective date: | Sunday, August 26, 2012 |
| Expiration date: | Tuesday, August 27, 2013 |
| Digital DNA |
| File packed: | No |
| Code language: | Microsoft Visual C# / Basic .NET |
| .NET CLR: | Yes |
| .NET NGENed: | No |
More details
Programs
The following programs will install this file
Cloob Messenger bundles a branded version of the Conduit Toolbar, which delivers search based advertising and results. During installation the user is presented in some cases with the option to install the toolbar. Once accepted, the packaged executable, ConduitInstaller.exe, will download and install the necessary components for the Conduit Toolbar.
LogMeIn remote access products use a proprietary remote desktop protocol that is transmitted via SSL. An SSL certificate is created for each remote desktop and is used to cryptographically secure communications between the remote desktop and the accessing computer. Users access remote desktops using either the LogMeIn Ignition stand-alone application or a web portal. The web portal requires either an ActiveX plugin for Internet Explorer...
“In Angry Birds Rio, the original Angry Birds are kidnapped and taken to the magical city of Rio de Janeiro, where they eventually escape their captors and set out to save their friends, Blu and Jewel – two rare macaws and the stars of the hit motion picture, Rio. Angry Birds Rio pairs the physics-based gameplay of the original game with unique twists based on the film.”
Behaviors
Scheduled tasks
- The job 'ShouldIRemoveIt_Notifications' runs on logon in the path '\ShouldIRemoveIt_Notifications'
- The job 'ShouldIRemoveIt' in the path '\ShouldIRemoveIt'
- Entry path '\ShouldIRemoveIt'
Scheduled tasks startups
Set to load on user login (bypasses Windows UAC if enabled)
- Login entry path '\ShouldIRemoveIt_Notifications'
Resource utilization
(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
| CPU |
| Total CPU: | 0.00049329% | |
| Kernel CPU: | 0.00038857% | |
| User CPU: | 0.00010472% | |
| Kernel CPU time: | 7,847 ms/min | |
| CPU cycles: | 7,591,717/sec | |
| Context switches: | 52/sec | |
| Memory |
| Private memory: | 34.47 MB | |
| Private (maximum): | 43.78 MB | |
| Private (minimum): | 3.81 MB | |
| Non-paged memory: | 34.47 MB | |
| Virtual memory: | 631.91 MB | |
| Virtual memory (peak): | 743.49 MB | |
| Working set: | 4.64 MB | |
| Working set (peak): | 48.81 MB | |
| Page faults: | 98,815/min | |
| I/O |
| I/O read transfer: | 1.94 MB/sec | |
| I/O read operations: | 498/sec | |
| I/O write transfer: | 164 Bytes/sec | |
| I/O write operations: | 1/sec | |
| I/O other transfer: | 6.78 KB/sec | |
| I/O other operations: | 103/sec | |
| Resource allocations |
| Threads: | 8 | |
| Handles: | 383 | |
| GUI GDI count: | 80 | |
| GUI GDI peak: | 101 | |
| GUI USER count: | 216 | |
| GUI USER peak: | 223 | |
Process properties
Threads
Averages
| ShouldIRemoveIt.exe (main module) |
| Total CPU: | 0.00292072% | |
| Kernel CPU: | 0.00062996% | |
| User CPU: | 0.00229076% | |
| CPU cycles: | 3,204,651/sec | |
| Context switches: | 18/sec | |
| Memory: | 464 KB | |
| mscorwks.dll |
| Total CPU: | 0.00041521% | |
| Kernel CPU: | 0.00008590% | |
| User CPU: | 0.00032930% | |
| CPU cycles: | 1,360,042/sec | |
| Context switches: | 17/sec | |
| Memory: | 9.62 MB | |
Distribution by Windows OS
| OS version | distribution |
| Windows 7 Home Premium |
38.71% |
|
| Windows 7 Ultimate |
14.52% |
|
| Windows 7 Professional |
11.83% |
|
| Windows 8.1 |
8.60% |
|
| Windows Vista Home Premium |
7.53% |
|
| Windows 8 |
4.84% |
|
| Windows 8.1 Pro |
2.69% |
|
| Windows 8 Pro with Media Center |
2.69% |
|
| Windows 7 Home Basic |
2.15% |
|
| Windows 8 Pro |
2.15% |
|
| Windows 8 Enterprise N |
0.54% |
|
| Windows Vista Home Basic |
0.54% |
|
| Windows Vista Business |
0.54% |
|
| Windows 8.1 Pro Preview with Media Center |
0.54% |
|
| Windows 8 Single Language |
0.54% |
|
| Microsoft Windows XP |
0.54% |
|
| Windows 7 Enterprise |
0.54% |
|
| Windows Vista Ultimate |
0.54% |
|
Distribution by country
United States installs about 56.99% of Should I Remove It?.
Distribution by PC manufacturer
| PC Manufacturer | distribution |
| Dell |
22.94% |
|
| Hewlett-Packard |
18.81% |
|
| Acer |
13.76% |
|
| ASUS |
12.84% |
|
| Toshiba |
11.01% |
|
| Intel |
5.50% |
|
| Sony |
4.59% |
|
| Lenovo |
2.75% |
|
| Samsung |
2.29% |
|
| GIGABYTE |
2.29% |
|
| Gateway |
1.83% |
|
| Alienware |
0.92% |
|
| American Megatrends |
0.46% |
|
