home

PCFix.exe

PC Fix 2011 | Registry Cleaner

Dubai Click LLC

The application PCFix.exe by Dubai Click has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PCFix’. This file is typically installed with the program PCFix by Dubai Click LLC which is a potentially unwanted software program.
Publisher:
Dubai Click LLC  (signed and verified)

Product:
PC Fix 2011 | Registry Cleaner

Version:
3.0.1

MD5:
c41de5c0e13f43afb89dc5f0eafae478

SHA-1:
377d39062f8b4fd7adaf3a3897f2e809fb5145ce

SHA-256:
0d3cf2c128f8154c63a9cbaee1be2913ada530d334fa0dae62a5195baf17a8a9

Scanner detections:
1 / 68

Status:
Potentially unwanted

Analysis date:
4/25/2024 8:40:43 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP.DubaiClick.PCFix.Meta (L)
16.6.14.7

File size:
6.5 MB (6,776,880 bytes)

Product version:
3.0.1

Copyright:
Dubai Click LLC 2011 All rights reserved.

Original file name:
PCFix.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\pcfix\pcfix.exe

Digital Signature
Signed by:
Dubai Click LLC

Authority:
The USERTRUST Network

Valid from:
5/3/2010 3:30:00 AM

Valid to:
5/4/2011 3:29:59 AM

Subject:
CN=Dubai Click LLC, O=Dubai Click LLC, POBox=40735, STREET=Dubai Internet City Building 4/C1, L=Dubai, S=Dubai, PostalCode=Dubai, C=AE

Issuer:
CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:
5F07B7008900CBD44DB1790BBF54015B

File PE Metadata
Compilation timestamp:
2/28/2011 3:19:53 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
49152:te69eXmNJIBYyQKckKSU7zc99YsIy+FNVr:ZeXmNJMw7VM+FNVr

Entry address:
0x5CF57

Entry point:
E8, 0F, 7E, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 8B, 45, 14, 56, 57, 33, FF, 3B, C7, 74, 47, 39, 7D, 08, 75, 1B, E8, A4, 24, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 14, 0A, 00, 00, 83, C4, 14, 8B, C6, EB, 29, 39, 7D, 10, 74, E0, 39, 45, 0C, 73, 0E, E8, 7F, 24, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, D7, 50, FF, 75, 10, FF, 75, 08, E8, 4D, 7E, 00, 00, 83, C4, 0C, 33, C0, 5F, 5E, 5D, C3, 51, C7, 01, 44, 6D, 48, 00, E8, 9D, 81, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01...
 
[+]

Entropy:
5.0797

Code size:
516 KB (528,384 bytes)

Startup File (All Users Run)
Registry location:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PCFix

Command:
C:\Program Files\pcfix\pcfix.exe


The file PCFix.exe has been discovered within the following program.

PCFix  by Dubai Click LLC
Publisher's description - “PC FIX Cleaner Registry Cleaner is the next generation software for Windows registry maintenance.”
www.dubai-click.com/products.html
68% remove it
 
Powered by Should I Remove It?

Remove PCFix.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.