home

SystemCleaner.exe

System Cleaner

Pointstone Software, LLC

The application SystemCleaner.exe, “It is time to give your computer a good cleaning on the inside!” by Pointstone Software has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat.
Publisher:
Pointstone Software, LLC  (signed and verified)

Product:
System Cleaner

Description:
It is time to give your computer a good cleaning on the inside!

Version:
5.7.0.212

MD5:
2419dffd908626c32d62230411c099db

SHA-1:
28002976191f110491a831229cdb9418aac9a601

SHA-256:
7f6cbdd8aec81f67c0d89444aa76c30217cd9344da3bd867e6c21abffef7b1f3

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
11/5/2024 3:34:23 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.Optional.Pointstone
16.11.27.11

File size:
2.7 MB (2,824,920 bytes)

Product version:
5.7.0.0

Copyright:
Copyright © 1997 - 2009 Pointstone Software, LLC

Trademarks:
System Cleaner and Pointstone are either trademarks or registered trademarks of Pointstone Software, LLC

Original file name:
SystemCleaner.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\pointstone\system cleaner 5\systemcleaner.exe

Digital Signature
Signed by:
Pointstone Software, LLC

Authority:
The USERTRUST Network

Valid from:
3/5/2008 1:00:00 AM

Valid to:
3/6/2010 12:59:59 AM

Subject:
CN="Pointstone Software, LLC", O="Pointstone Software, LLC", STREET=220 E. Delaware Avenue, L=Newark, S=Delaware, PostalCode=19711, C=US

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
0A38CECD27D24D5BABCE0D05DC3CDAF9

File PE Metadata
Compilation timestamp:
12/27/2008 10:39:31 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:EWCE+UZo7Wema0NbwVzovRh3g/uIxON+vImtG3tzszhA+tIy6kQSJIahqFOz6jV5:DCE+UO77gbW8v2zhtG3x0fbIaj2HM0

Entry address:
0x1000

Entry point:
68, 01, E0, 9F, 00, E8, 01, 00, 00, 00, C3, C3, FD, 03, A2, 20, E0, 8A, 63, 95, B0, EE, BB, 06, A0, 6C, EF, 05, 06, 8D, F5, B0, EF, 7D, 78, 23, F1, 0C, 08, B9, A5, D7, F1, E8, 31, 8E, 67, 97, 96, 86, BF, 93, 89, 4E, FC, C0, 97, CF, B6, F5, 63, B0, 4B, 13, E8, 20, 02, 62, 59, 54, 21, 24, AA, 60, AE, 16, 8A, AD, DE, 1B, C5, 46, 24, 2A, 7C, 2E, 14, F9, F9, 07, CF, 11, 76, 37, 81, 0D, 32, 9F, D3, CA, B2, 3B, 8C, FF, 7A, 9E, BD, E4, 7D, E2, FE, 4B, BC, FC, 10, 73, 43, 86, 6D, F2, ED, 65, 1C, FA, B7, F5, AC, ED...
 
[+]

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
3.5 MB (3,671,552 bytes)

Remove SystemCleaner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.