home

mtpc.exe

MyTurboPC

MyTurboPC LLC

The executable mtpc.exe has been detected as malware by 1 anti-virus scanner. It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This file is typically installed with the program MyTurboPC by MyTurboPC.com which is a potentially unwanted software program.
Publisher:
MyTurboPC.com  (signed by MyTurboPC LLC)

Product:
MyTurboPC

Version:
3.3.18.0

MD5:
a44d5f0d4487113071862cb374643ded

SHA-1:
feaa008c7ca1b14213fb9e09060c29577a5b7c12

SHA-256:
21e4918b43ba1487b810fb17bdd65997965c707b227e50f981582325f65548f8

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/10/2025 5:00:34 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Win32.Generic
16.11.11.3

File size:
5.5 MB (5,798,336 bytes)

Product version:
3.3.18.0

Copyright:
Copyright © 2016 MyTurboPC.com

Original file name:
mtpc.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\myturbopc.com\myturbopc\mtpc.exe

Digital Signature
Signed by:
MyTurboPC LLC

Authority:
Symantec Corporation

Valid from:
3/14/2016 8:00:00 PM

Valid to:
3/15/2017 7:59:59 PM

Subject:
CN=MyTurboPC LLC, O=MyTurboPC LLC, L=Elkhart, S=Indiana, C=US

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
47FEB1362892142E48C59A37E851814A

File PE Metadata
Compilation timestamp:
11/10/2016 12:53:33 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
12.0

CTPH (ssdeep):
98304:8EbeRysKo7bJq+vUijIY4Ij0uFFprcLy718Xeg4iasUMoAcvUZ2r8Zm1Qg:8c6Tq+eu1g4iQMoAcvUZY3B

Entry address:
0x34E915

Entry point:
E8, 53, 5C, 01, 00, E9, 7F, FE, FF, FF, 3B, 0D, C0, 55, 90, 00, 75, 02, F3, C3, E9, 0A, 29, 00, 00, 55, 8B, EC, 56, 8B, 75, 14, 85, F6, 75, 04, 33, C0, EB, 6D, 8B, 45, 08, 85, C0, 75, 13, E8, DD, 6E, 00, 00, 6A, 16, 5E, 89, 30, E8, 89, 64, 01, 00, 8B, C6, EB, 53, 57, 8B, 7D, 10, 85, FF, 74, 14, 39, 75, 0C, 72, 0F, 56, 57, 50, E8, 74, 81, 00, 00, 83, C4, 0C, 33, C0, EB, 36, FF, 75, 0C, 6A, 00, 50, E8, B2, 87, 00, 00, 83, C4, 0C, 85, FF, 75, 09, E8, 9C, 6E, 00, 00, 6A, 16, EB, 0C, 39, 75, 0C, 73, 13, E8, 8E...
 
[+]

Entropy:
6.6362

Code size:
4 MB (4,239,872 bytes)

Scheduled Task
Task name:
MyTurboPC Startup

Trigger:
Logon (Runs on logon)

Description:
Runs MyTurboPC at startup.


The file mtpc.exe has been discovered within the following program.

MyTurboPC  by MyTurboPC.com
Publisher's description - “MyTurboPC is a comprehensive diagnostic program that increases the speed, performance and security of your Windows based personal computer. It cleans your registry, defrag your PC or manage startup items to increase overall speed and performance.”
www.MyTurboPC.com
64% remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communication in live environments.

TCP (HTTP):
Connects to ec2-52-73-217-72.compute-1.amazonaws.com  (52.73.217.72:80)

Remove mtpc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.