VirusTotal: 0/67 antivirus engines
UniClean 1.0.0 was scanned on VirusTotal on November 10, 2026. No antivirus engine detected it, and the download URL was clean across 93 security vendors.
File scan
0/67
antivirus engines · Undetected
URL scan
0/93
security vendors · Clean
Scanned November 10, 2026
Scanned file
- File
- UniClean_1.0.0_x64-setup.zip
- Size
- 4.27 MB
- Version
- 1.0.0
- Scan date
- November 10, 2026
- SHA-256
- 40e70989cff862cfc428efd86ff4b46290b529cd18fad45df0bfe867cb07c416
What about the two Sigma rule matches?
VirusTotal's behavior analysis shows two Sigma rule matches for the installer. Sigma rules are like security-camera alerts — they flag patterns that could be misused. Here is exactly what each one means.
Executable Creation
MediumUniClean’s installer writes executable files to disk while it installs. Every Windows installer that copies a program onto your PC does this, so this behavioral rule matches legitimate installers all the time. It is a pattern alert, not a virus detection.
RstrtMgr.DLL Loaded
LowRstrtMgr.dll is Windows Restart Manager, a component built into Windows by Microsoft and also used by Windows Installer. UniClean uses it to safely close programs that keep files locked during removal — essential for antivirus suites that actively protect their own files.
Neither of these is a virus detection. 0 out of 67 antivirus engines flagged UniClean as malicious.
Engines that cleared UniClean
A selection from the report — every one returned “Undetected”.
- Microsoft Undetected
- Kaspersky Undetected
- McAfee Scanner Undetected
- Symantec Undetected
- Avast Undetected
- AVG Undetected
- BitDefender Undetected
- ESET-NOD32 Undetected
- Sophos Undetected
- Malwarebytes Undetected
- TrendMicro Undetected
- Fortinet Undetected
- CrowdStrike Undetected
- Emsisoft Undetected
- Google Undetected
- Webroot Undetected
- WithSecure Undetected
- ZoneAlarm Undetected
…and 49 more. See all 67 on VirusTotal
Check it yourself
- Download UniClean from the official page.
- In PowerShell, run
Get-FileHash .\UniClean_1.0.0_x64-setup.zipand compare the result with the SHA-256 above. - Open the live VirusTotal report or upload the file yourself. Results can shift slightly over time as engines update.
Why do uninstallers occasionally get false positives? They legitimately stop services and delete files — behavior that some heuristic engines associate with malware. If an engine ever flags a future release, we investigate, submit it for review and note it on this page.
VirusTotal FAQ
Sigma rules are like security-camera alerts: they flag behavior patterns that could be misused, such as creating executable files. Installing almost any software triggers them. The result that matters is the antivirus verdict — 0 of 67 engines detected anything harmful.
The file scan (0/67) checks the actual installer with antivirus engines. The URL scan (0/93) checks the download address against website-reputation and phishing lists. Both came back clean.
Open PowerShell in your Downloads folder and run Get-FileHash on the file. The SHA-256 should match the hash shown on this page and in the VirusTotal report.
They can, as engines update their rules. We re-scan every release and update this page; the live report on VirusTotal always shows the current verdicts.
Clean Windows — with the safety of undo
Free download. No account needed. Windows 11 & 10. Fully local.