» optimizerpro.exe
Overview
Analysis
File Details
Downloads (1)

optimizerpro.exe

Optimizer Pro

PC Utilities Software Limited

Part of the Optimizer Pro / Driver 'PC optimizer' product lines marketed by Adsology and distributed through various bundled software (PPI and commission) channels. The application optimizerpro.exe, “Fix, clean, optimize your PC!” by PC Utilities Software Limited has been detected as a potentially unwanted program by 21 anti-malware scanners. This is a setup program which is used to install the application. It is also typically executed from an Internet Explorer cache folder. The file has been seen being downloaded from dl.softservers.net.

File name:

optimizerpro.exe

Publisher:

PC Utilities Pro (signed by PC Utilities Software Limited)

Product:

Optimizer Pro

Description:

Fix, clean, optimize your PC!

Version:

3.0.1.0

MD5:

a0d4eb754cb2732edb4c3d5e45a6de68

SHA-1:

962f8feb6bcbd3dd47483fd99c70cecca5a66889

SHA-256:

1796486e3dc8293b979c5e1248b3642242a0c62b0c8568eb095ba13abbcc8106

Scanner detections:

21 / 68

Status:

Potentially unwanted

Explanation:

Installed with the Optimizer Pro software which is bundled by 3rd-party monetization programs.

Analysis date:

11/15/2024 7:40:27 AM UTC (today)

Scan engine

Detection

Engine version

Agnitum Outpost

Trojan.Agent

7.1.1

AVG

MalSign.Generic

2015.0.3389

Bkav FE

W32.Clod4c3.Trojan

1.3.0.4613

Boost by Reason

Optional.PCUtilities.M

188838

Comodo Security

UnclassifiedMalware

16837

Dr.Web

riskware program Program.Unwanted.29

9.0.1.0220

ESET NOD32

Win32/SpeedingUpMyPC (variant)

7.8899

Fortinet FortiGate

W32/SpeedingUpMyPC.B

2/16/2014

F-Prot

W32/OptimizePro.A.gen

v6.4.7.1.166

G Data

Win32.Application.OptimizerPro

14.8.24

herdProtect (fuzzy)

variant of optimizer_pro.exe (PUP)

2013.12.28.14

IKARUS anti.virus

PUA.SpeedingUpMyPC

t3scan.1.6.1.0

K7 AntiVirus

Trojan

13.176.11510

Kaspersky

not-a-virus:RiskTool.Win32.Agent

14.0.0.3439

Malwarebytes

PUP.Optional.OptimizePro.A

v2013.12.23.03

McAfee

Artemis!D84B92824CEE

5600.7272

NANO AntiVirus

Riskware.Win32.Unwanted.ccmwkx

0.26.0.55366

Qihoo 360 Security

Malware.QVM06.Gen

1.0.0.1015

Reason Heuristics

PUP.PCUtilities.M

14.8.8.3

Trend Micro House Call

TROJ_GEN.F47V0809

7.2.357

VIPRE Antivirus

Trojan.Win32.Generic

25654

File size:

3.8 MB (4,024,232 bytes)

Product version:

3.0.1.0

PC Utilities Pro

Trademarks:

PC Utilities Pro

Original file name:

OptimizerPro

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\optimizerpro.exe

Digital Signature

Signed by:

PC Utilities Software Limited

Authority:

GoDaddy.com, Inc.

Valid from:

4/5/2013 6:29:35 PM

Valid to:

4/3/2015 2:23:14 PM

Subject:

CN=PC Utilities Software Limited, O=PC Utilities Software Limited, L=London, S=UK, C=GB

Issuer:

SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:

2B239BABC97410

File PE Metadata

Compilation timestamp:

6/19/1992 11:22:17 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

98304:WOh0m6ZKJNLF1pxmY4XmRXPk8O9dSy/8C4C:3h0mNLFJD4XmRXs/94o4C

Entry address:

0x13768

Entry point:

55, 8B, EC, 83, C4, F0, B8, D0, 36, 41, 00, E8, 94, 24, FF, FF, E8, FF, 05, FF, FF, 8D, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Developed / compiled with:

Microsoft Visual C++

Code size:

74 KB (75,776 bytes)

The file optimizerpro.exe has been seen being distributed by the following URL.

http://dl.softservers.net/.../optimizerpro.exe

Remove optimizerpro.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.