home

pcsusd.exe

Safe Download Ltd.

The application pcsusd.exe by Safe Download has been detected as adware by 8 anti-malware scanners. It runs as a scheduled task under the Windows Task Scheduler. This file is typically installed with the program Zrychleni Pocitace by Speedchecker Limited which is a potentially unwanted software program.
Publisher:
Safe Download Ltd.  (signed and verified)

MD5:
7c133c2ee732e24cb9b85bd24f96541e

SHA-1:
b3934aa787b1257ae60287da2d4e68b26d756b13

SHA-256:
bfa2a86fda83bbe56580e08a6a86a6299c1f3ff868872c94768640b3c3c8bf4d

Scanner detections:
8 / 68

Status:
Adware

Analysis date:
11/5/2024 9:54:11 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Riskware.Agent
7.1.1

Baidu Antivirus
PUA.Win32.Speedchecker
4.0.3.1587

Dr.Web
Program.Unwanted.12
9.0.1.0129

ESET NOD32
Win32/Speedchecker.B potentially unwanted application
9.7.0.302.0

herdProtect (fuzzy)
variant of 904805.gz.tdl
2015.8.7.12

Panda Antivirus
PUP/SpeedUpMyPC
15.08.07.12

Reason Heuristics
Threat.Task.SafeDownload
15.5.9.17

Trend Micro House Call
Suspicious_GEN.F47V0425
7.2.219

File size:
394.4 KB (403,888 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\zrychleni pocitace\pcsusd.exe

Digital Signature
Signed by:
Safe Download Ltd.

Authority:
Entrust, Inc.

Valid from:
6/30/2014 6:45:32 PM

Valid to:
7/1/2015 5:19:01 AM

Subject:
CN=Safe Download Ltd., O=Safe Download Ltd., L=Douglas, C=IM

Issuer:
CN=Entrust Code Signing Certification Authority - L1D, OU="(c) 2009 Entrust, Inc.", OU=www.entrust.net/rpa is incorporated by reference, O="Entrust, Inc.", C=US

Serial number:
4C177DE0

File PE Metadata
Compilation timestamp:
4/8/2012 7:37:51 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
12288:JWpJ0TonZvReCGKYp2LQvsnzwpAZf+7QtVgglcYh4z1v9yX9Lk39pkv5uk:odEszh+7QtCFYqz1v9yX9LkNCRuk

Entry address:
0x2F16A

Entry point:
E8, 9E, 79, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 33, C9, 3B, 04, CD, 58, C4, 45, 00, 74, 13, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0E, 6A, 0D, 58, 5D, C3, 8B, 04, CD, 5C, C4, 45, 00, 5D, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, 5D, C3, E8, 9D, 5F, 00, 00, 85, C0, 75, 06, B8, C0, C5, 45, 00, C3, 83, C0, 08, C3, E8, 8A, 5F, 00, 00, 85, C0, 75, 06, B8, C4, C5, 45, 00, C3, 83, C0, 0C, C3, 8B, FF, 55, 8B, EC, 56, E8, E2, FF, FF, FF, 8B, 4D, 08...
 
[+]

Code size:
299.5 KB (306,688 bytes)

Scheduled Task
Task name:
PC SpeedUp Service Deactivator

Trigger:
Idle (Runs when idle)

Action:
pcsusd.exe \dev0 \idle


The file pcsusd.exe has been discovered within the following program.

Zrychleni Pocitace  by Speedchecker Limited
Publisher's description - “Using one-click, PC Speed Up will make your network settings, hard disc, memory and CPU optimised and will improve the overall performance. Fast and easy to use PC Speed Up will clean your PC and will make it run faster.”
www.pcspeedup.com
70% remove it
 
Powered by Should I Remove It?

Remove pcsusd.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.