home

optimizerpro.exe

Optimizer Pro

PC Utilities Software Limited

Part of the Optimizer Pro / Driver 'PC optimizer' product lines marketed by Adsology and distributed through various bundled software (PPI and commission) channels. The application optimizerpro.exe, “Fix, clean, optimize your PC!” by PC Utilities Software Limited has been detected as a potentially unwanted program by 21 anti-malware scanners. This is a setup program which is used to install the application. It is also typically executed from an Internet Explorer cache folder. The file has been seen being downloaded from d3emsmln8xfj03.cloudfront.net and multiple other hosts.
Publisher:
PC Utilities Pro  (signed by PC Utilities Software Limited)

Product:
Optimizer Pro

Description:
Fix, clean, optimize your PC!

Version:
3.0.1.0

MD5:
ea54473db7769dc19eaa3236478f5752

SHA-1:
c1df2a95959d537da1a0780e5059012ac4475bc8

SHA-256:
a141f7bf87b06a0eb716e261d8fdbfa67d3f29def592db01ae284ac5b81c7491

Scanner detections:
21 / 68

Status:
Potentially unwanted

Explanation:
Installed with the Optimizer Pro software which is bundled by 3rd-party monetization programs.

Analysis date:
1/24/2025 10:30:35 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.Agent
7.1.1

AVG
MalSign.Generic
2015.0.3389

Bkav FE
W32.Clod4c3.Trojan
1.3.0.4613

Boost by Reason
Optional.PCUtilities.M
188838

Comodo Security
UnclassifiedMalware
16837

Dr.Web
riskware program Program.Unwanted.29
9.0.1.0220

ESET NOD32
Win32/SpeedingUpMyPC (variant)
7.8899

Fortinet FortiGate
W32/SpeedingUpMyPC.B
2/15/2014

F-Prot
W32/OptimizePro.A.gen
v6.4.7.1.166

G Data
Win32.Application.OptimizerPro
14.8.24

herdProtect (fuzzy)
variant of air5bf2.exe (PUP)
2013.12.20.16

IKARUS anti.virus
PUA.SpeedingUpMyPC
t3scan.1.6.1.0

K7 AntiVirus
Trojan
13.176.11510

Kaspersky
not-a-virus:RiskTool.Win32.Agent
14.0.0.3439

Malwarebytes
PUP.Optional.OptimizePro.A
v2013.12.23.10

McAfee
Artemis!D84B92824CEE
5600.7273

NANO AntiVirus
Riskware.Win32.Unwanted.ccmwkx
0.26.0.55366

Qihoo 360 Security
Malware.QVM06.Gen
1.0.0.1015

Reason Heuristics
PUP.PCUtilities.M
14.8.8.3

Trend Micro House Call
TROJ_GEN.F47V0809
7.2.357

VIPRE Antivirus
Trojan.Win32.Generic
25654

File size:
3.5 MB (3,628,656 bytes)

Product version:
3.0.1.0

Copyright:
PC Utilities Pro

Trademarks:
PC Utilities Pro

Original file name:
OptimizerPro

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\optimizerpro.exe

Digital Signature
Signed by:
PC Utilities Software Limited

Authority:
GoDaddy.com, Inc.

Valid from:
4/5/2013 8:29:35 PM

Valid to:
4/3/2015 4:23:14 PM

Subject:
CN=PC Utilities Software Limited, O=PC Utilities Software Limited, L=London, S=UK, C=GB

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2B239BABC97410

File PE Metadata
Compilation timestamp:
6/20/1992 12:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:PtV09YWZqJrN5JaUw1zJ6QGY+Zl9FftrIgEEdlpnngW8GAOoJ2w76XMGFKLr0Or:P/+ayUCF6HlzSgB0GAfbJGIs

Entry address:
0x13474

Entry point:
55, 8B, EC, B9, 27, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, 56, 57, B8, EC, 33, 41, 00, E8, F8, 26, FF, FF, 33, C0, 55, 68, 44, 39, 41, 00, 64, FF, 30, 64, 89, 20, B2, 01, A1, 38, 2F, 41, 00, E8, 3A, FB, FF, FF, 8B, D8, BA, 01, 00, 00, 80, 8B, C3, E8, CC, FB, FF, FF, B1, 01, BA, 5C, 39, 41, 00, 8B, C3, E8, 22, FC, FF, FF, 84, C0, 74, 20, 8D, 55, EC, 33, C0, E8, FC, F7, FE, FF, 8B, 4D, EC, BA, 7C, 39, 41, 00, 8B, C3, E8, 29, FD, FF, FF, 8B, C3, E8, 6A, FB, FF, FF, B2, 01, 8B, C3, 8B, 08, FF, 51, FC, 8D...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
75 KB (76,800 bytes)

The file optimizerpro.exe has been seen being distributed by the following 3 URLs.

http://d3emsmln8xfj03.cloudfront.net/bundles/.../optimizerpro.exe

http://d1t653m828c3x8.cloudfront.net/bundles/.../optimizerpro.exe

http://d22z5jqfvuej9a.cloudfront.net/bundles/.../optimizerpro.exe

Remove optimizerpro.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.