home

optimizerpro.exe

Optimizer Pro

PC Utilities Software Limited

Part of the Optimizer Pro / Driver 'PC optimizer' product lines marketed by Adsology and distributed through various bundled software (PPI and commission) channels. The application optimizerpro.exe, “Fix, clean, optimize your PC!” by PC Utilities Software Limited has been detected as a potentially unwanted program by 20 anti-malware scanners. This is a setup program which is used to install the application. It is also typically executed from an Internet Explorer cache folder. The file has been seen being downloaded from dl.softservers.net.
Publisher:
PC Utilities Pro  (signed by PC Utilities Software Limited)

Product:
Optimizer Pro

Description:
Fix, clean, optimize your PC!

Version:
3.0.1.0

MD5:
cb1d61a855b39eb903beadc2a67087d2

SHA-1:
7fc47beb06b7965211b0670da092efbdcade05b6

SHA-256:
166e46ed49a3d4f98803be1c38344ac89e4117f0d06e4e188dbfb3af1947ee59

Scanner detections:
20 / 68

Status:
Potentially unwanted

Explanation:
Installed with the Optimizer Pro software which is bundled by 3rd-party monetization programs.

Analysis date:
4/18/2024 12:13:17 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.Agent
7.1.1

Avira AntiVirus
TR/Trash.Gen
7.11.30.172

AVG
MalSign.Generic
2017.0.2867

Bkav FE
W32.Clod4c3.Trojan
1.3.0.4613

Comodo Security
UnclassifiedMalware
16837

Dr.Web
Trojan.Damaged.1
9.0.1.012

ESET NOD32
Win32/SpeedingUpMyPC (variant)
10.8735

Fortinet FortiGate
W32/SpeedingUpMyPC.B
1/12/2016

F-Prot
W32/OptimizePro.A.gen
v6.4.7.1.166

G Data
Win32.Application.OptimizerPro
16.1.24

IKARUS anti.virus
PUA.SpeedingUpMyPC
t3scan.1.6.1.0

K7 AntiVirus
Trojan
13.176.11510

Malwarebytes
PUP.Optional.OptimizePro.A
v2016.01.12.05

McAfee
Artemis!D84B92824CEE
5600.6523

NANO AntiVirus
Riskware.Win32.Unwanted.ccmwkx
0.26.0.55366

Qihoo 360 Security
Malware.QVM06.Gen
1.0.0.1015

Reason Heuristics
PUP.PC Utilities.PCUtilities (M)
16.1.12.5

SUPERAntiSpyware
Trojan.Agent/Gen-Nullo[Short]
9391

Trend Micro House Call
TROJ_GEN.F47V0809
7.2.12

VIPRE Antivirus
Trojan.Win32.Generic
25654

File size:
3.6 MB (3,800,176 bytes)

Product version:
3.0.1.0

Copyright:
PC Utilities Pro

Trademarks:
PC Utilities Pro

Original file name:
OptimizerPro

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\microsoft\windows\temporary internet files\content.ie5\{random}\optimizerpro.exe

Digital Signature
Signed by:
PC Utilities Software Limited

Authority:
GoDaddy.com, Inc.

Valid from:
4/5/2013 3:29:35 PM

Valid to:
4/3/2015 11:23:14 AM

Subject:
CN=PC Utilities Software Limited, O=PC Utilities Software Limited, L=London, S=UK, C=GB

Issuer:
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US

Serial number:
2B239BABC97410

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
98304:T/ICh0m6ZKJNLF1pxmY4XmRXPk8O9dSvq/nmzbp3Nq:dh0mNLFJD4XmRXs/94vq/Gd3Nq

Entry address:
0x13474

Entry point:
55, 8B, EC, B9, 27, 00, 00, 00, 6A, 00, 6A, 00, 49, 75, F9, 53, 56, 57, B8, EC, 33, 41, 00, E8, F8, 26, FF, FF, 33, C0, 55, 68, 44, 39, 41, 00, 64, FF, 30, 64, 89, 20, B2, 01, A1, 38, 2F, 41, 00, E8, 3A, FB, FF, FF, 8B, D8, BA, 01, 00, 00, 80, 8B, C3, E8, CC, FB, FF, FF, B1, 01, BA, 5C, 39, 41, 00, 8B, C3, E8, 22, FC, FF, FF, 84, C0, 74, 20, 8D, 55, EC, 33, C0, E8, FC, F7, FE, FF, 8B, 4D, EC, BA, 7C, 39, 41, 00, 8B, C3, E8, 29, FD, FF, FF, 8B, C3, E8, 6A, FB, FF, FF, B2, 01, 8B, C3, 8B, 08, FF, 51, FC, 8D...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
75 KB (76,800 bytes)

The file optimizerpro.exe has been seen being distributed by the following URL.

http://dl.softservers.net/.../OptimizerPro.exe

Remove optimizerpro.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.