» PCFix.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

PCFix.exe

PC Fix 2011 | Registry Cleaner

Dubai Click LLC

The application PCFix.exe by Dubai Click has been detected as a potentially unwanted program by 1 anti-malware scanner with very strong indications that the file is a potential threat. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PCFix’. This file is typically installed with the program PCFix by Dubai Click LLC which is a potentially unwanted software program.

File name:

PCFix.exe

Publisher:

Dubai Click LLC (signed and verified)

Product:

PC Fix 2011 | Registry Cleaner

Version:

2.0.6

MD5:

ff8d9866610cd30e0bbe823275302f93

SHA-1:

e0434ac737808abae59383ce1c6522281508fd0a

SHA-256:

2608eefad0c5eca5d7d03972dcb425705c85cd0f82f7b42231339f67a249e97e

Scanner detections:

1 / 68

Status:

Potentially unwanted

Analysis date:

4/25/2024 12:55:11 PM UTC (today)

Scan engine

Detection

Engine version

Reason Heuristics

PUP.DubaiClick.PCFix.Meta (L)

16.2.27.17

File size:

6.4 MB (6,690,864 bytes)

Product version:

2.0.6

Original file name:

PCFix.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\pcfix\pcfix.exe

Digital Signature

Signed by:

Dubai Click LLC

Authority:

The USERTRUST Network

Valid from:

5/3/2010 2:00:00 AM

Valid to:

5/4/2011 1:59:59 AM

Subject:

CN=Dubai Click LLC, O=Dubai Click LLC, POBox=40735, STREET=Dubai Internet City Building 4/C1, L=Dubai, S=Dubai, PostalCode=Dubai, C=AE

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

5F07B7008900CBD44DB1790BBF54015B

File PE Metadata

Compilation timestamp:

12/18/2010 8:34:54 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

24576:2mxzU75z+FIJnw75FWcH7Y0H9cZGlwh81Td4nWkOrVFwPjDaCYuNHMi8lj:DzUFzcinwVFWc/wqxprcj9Y8snj

Entry address:

0x59AE9

Entry point:

E8, AD, 78, 00, 00, E9, 17, FE, FF, FF, 55, 8B, EC, 8B, 45, 14, 56, 57, 33, FF, 3B, C7, 74, 47, 39, 7D, 08, 75, 1B, E8, C8, 2B, 00, 00, 6A, 16, 5E, 89, 30, 57, 57, 57, 57, 57, E8, 12, 0A, 00, 00, 83, C4, 14, 8B, C6, EB, 29, 39, 7D, 10, 74, E0, 39, 45, 0C, 73, 0E, E8, A3, 2B, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, D7, 50, FF, 75, 10, FF, 75, 08, E8, EB, 78, 00, 00, 83, C4, 0C, 33, C0, 5F, 5E, 5D, C3, 51, C7, 01, 04, 1D, 48, 00, E8, 3B, 7C, 00, 00, 59, C3, 56, 8B, F1, E8, EA, FF, FF, FF, F6, 44, 24, 08, 01... 
[+]

Code size:

496 KB (507,904 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

PCFix

Command:

C:\Program Files\pcfix\pcfix.exe

The file PCFix.exe has been discovered within the following program.

PCFix by Dubai Click LLC

Publisher's description - “PC FIX Cleaner Registry Cleaner is the next generation software for Windows registry maintenance.”

www.dubai-click.com/products.html

68% remove it

Remove PCFix.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.