home

usodefragsrv64.exe

UTILILAB SystemOPTIMIZER

Utililab GmbH

The executable usodefragsrv64.exe, “UTILILAB SystemOPTIMIZER - Defrag Service” has been detected as malware by 1 anti-virus scanner. It runs as a separate (within the context of its own process) windows Service named “USODiskOptimizer”. This file is typically installed with the program UTILILAB SystemOPTIMIZER by UTILILAB which is a potentially unwanted software program.
Publisher:
UTILILAB GmbH, (www.utililab.com)  (signed by Utililab GmbH)

Product:
UTILILAB SystemOPTIMIZER

Description:
UTILILAB SystemOPTIMIZER - Defrag Service

Version:
3.5.1000.15093

MD5:
889de0756c29ba6c446286428d79c695

SHA-1:
e6283297b82409d6a7a4a5499d9ee21bfbab7b35

SHA-256:
875742682f1c0ed3cb9e59329ba3500cf6542dad9045fd8253507d255444bb29

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/26/2024 9:44:42 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Optional.Utililab.SystemOptimizer (L)
17.1.22.18

File size:
285.2 KB (292,016 bytes)

Copyright:
Copyright (C) 2012 UTILILAB GmbH. All rights reserved.

Trademarks:
UTILILAB SystemOPTIMIZER

File type:
Executable application (Win64 EXE)

Common path:
C:\Program Files\utililab\systemoptimizer\usodefragsrv64.exe

Digital Signature
Signed by:
Utililab GmbH

Authority:
The USERTRUST Network

Valid from:
1/31/2011 8:00:00 AM

Valid to:
1/31/2014 7:59:59 AM

Subject:
CN=Utililab GmbH, O=Utililab GmbH, STREET=Schumannstraße 17, L=Berlin, S=Berlin, PostalCode=10117, C=DE

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
00B233BC32FCEFAC7A7B4F96557686C278

File PE Metadata
Compilation timestamp:
5/6/2013 9:02:47 PM

OS version:
5.2

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
9.0

Entry address:
0x17984

Entry point:
48, 83, EC, 28, E8, 8B, 3E, 00, 00, 48, 83, C4, 28, E9, 1A, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 09, 27, 02, 00, 75, 11, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 02, F3, C3, 48, C1, C9, 10, E9, FD, 3E, 00, 00, CC, 48, 89, 5C, 24, 08, 57, 48, 83, EC, 30, 33, FF, 48, 3B, CF, 74, 0D, 48, 3B, D7, 76, 08, 4C, 3B, C7, 75, 30, 66, 89, 39, E8, 59, 1B, 00, 00, BB, 16, 00, 00, 00, 45, 33, C9, 45, 33, C0, 33, D2, 33, C9, 48, 89...
 
[+]

Entropy:
5.8991

Code size:
163.5 KB (167,424 bytes)

Service
Display name:
USODiskOptimizer

Type:
Win32OwnProcess


The file usodefragsrv64.exe has been discovered within the following program.

UTILILAB SystemOPTIMIZER  by UTILILAB
Publisher's description - “SystemOPTIMIZER provides automated, all-in-one solution for your PC.”
www.utililab.com/uso
About 72% of users remove it
 
Powered by Should I Remove It?

Remove usodefragsrv64.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.