home

MaxComputerCleaner.exe

CONCEPTION SELECTION DISTRIBUTION INTERNATIONALE

The application MaxComputerCleaner.exe by CONCEPTION SELECTION DISTRIBUTION INTERNATIONALE has been detected as a potentially unwanted program by 3 anti-malware scanners. It runs as a scheduled task under the Windows Task Scheduler triggered to execute each time a user logs in. This file is typically installed with the program Max Computer Cleaner. While running, it connects to the Internet address box1290.bluehost.com on port 80 using the HTTP protocol.
Publisher:
Max Computer Cleaner  (signed by CONCEPTION SELECTION DISTRIBUTION INTERNATIONALE)

Product:
Max Computer Cleaner

Version:
2.6.9.0

MD5:
19dae7f40f031709e44c317c64fbf6c6

SHA-1:
7eab830ee819363216afc89e787de8a63da2f2cc

SHA-256:
b966bdef30a38a226e2d9539c50498796afd5b67b88a40f5fe0b339585893523

Scanner detections:
3 / 68

Status:
Potentially unwanted

Analysis date:
6/29/2025 1:33:21 PM UTC  (today)

Scan engine
Detection
Engine version

ESET NOD32
MSIL/Rebrand.LittleRegClean.A potentially unwanted (variant)
9.11441

IKARUS anti.virus
PUA.MSIL.Rebrand
t3scan.1.8.9.0

Reason Heuristics
PUP.Optional.Task
15.6.15.13

File size:
4.5 MB (4,726,464 bytes)

Product version:
2.6.9.0

Copyright:
Copyright © 2015

Original file name:
MaxComputerCleaner.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\max computer cleaner\maxcomputercleaner.exe

Digital Signature
Signed by:
CONCEPTION SELECTION DISTRIBUTION INTERNATIONALE

Authority:
GlobalSign nv-sa

Valid from:
12/16/2014 2:36:07 PM

Valid to:
12/17/2015 2:36:07 PM

Subject:
CN=CONCEPTION SELECTION DISTRIBUTION INTERNATIONALE, OU=Xhopever, O=CONCEPTION SELECTION DISTRIBUTION INTERNATIONALE, L=Paris, C=FR

Issuer:
CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:
112106B28CB2E4D8370E3EC157B3C5B3FF12

File PE Metadata
Compilation timestamp:
2/9/2015 12:49:11 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
49152:KpRULO5x/wnpi9P3PQ9hpQQ4pq7bwKeKRs7Lk:KXUKWnpxDCp6bwKeKa7o

Entry address:
0x46914E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
4.4 MB (4,616,704 bytes)

Scheduled Task
Task name:
MaxComputerCleaner_Start

Trigger:
Logon (Runs on logon)


The file MaxComputerCleaner.exe has been discovered within the following program.

Max Computer Cleaner  by Max Computer Cleaner
About 1% of users remove it
 
Powered by Should I Remove It?

The executing file has been seen to make the following network communication in live environments.

TCP (HTTP):
Connects to box1290.bluehost.com  (50.87.249.90:80)

Remove MaxComputerCleaner.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.