home

PCKeeper.exe

PCKeeper

ZeoBIT LLC

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘PCKeeper’. This is installed with PCKeeper.
Publisher:
ZeoBIT LLC  (signed and verified)

Product:
PCKeeper

Version:
1.3.100.6239

MD5:
ffa0ffd211c024c83927ebcadc99e225

SHA-1:
5d0871f00e5f2a2ec0ba05f8913769400b11f11d

SHA-256:
19ef8b4bd5e96524a9a428264d8133b645b26055d85fa4a556cef6aecb22d223

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 7:13:52 PM UTC  (today)

File size:
5.1 MB (5,358,928 bytes)

Product version:
1.3.100.6239

Copyright:
(c) ZeoBIT LLC. All rights reserved.

Original file name:
PCKeeper.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\Program Files\zeobit\pckeeper\pckeeper.exe

Digital Signature
Signed by:
ZeoBIT LLC

Authority:
VeriSign, Inc.

Valid from:
7/26/2011 5:00:00 PM

Valid to:
8/23/2012 4:59:59 PM

Subject:
CN=ZeoBIT LLC, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ZeoBIT LLC, L=Sunnyvale, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
538CF173836A5CCF0006BB4129B7D4E4

File PE Metadata
Compilation timestamp:
11/23/2011 3:20:48 AM

OS version:
6.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:Tcq/iQSTGy+ZVxr5Zx49L8v3iZevq5APzyLGA7qJW4MI2qKMdtvARoGyVRe:T//iPsGOS2q5APzyLGA7qA4/4R8y

Entry address:
0x1C481D

Entry point:
E8, C6, AD, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, D0, 5D, 67, 00, 75, 02, F3, C3, E9, 4D, AE, 00, 00, 8B, FF, 55, 8B, EC, 56, 8B, 75, 14, 85, F6, 75, 04, 33, C0, EB, 61, 83, 7D, 08, 00, 75, 13, E8, FA, 65, 00, 00, 6A, 16, 5E, 89, 30, E8, B7, B0, 00, 00, 8B, C6, EB, 48, 83, 7D, 10, 00, 74, 16, 39, 75, 0C, 72, 11, 56, FF, 75, 10, FF, 75, 08, E8, 99, 83, 00, 00, 83, C4, 0C, EB, C7, FF, 75, 0C, 6A, 00, FF, 75, 08, E8, 57, 67, 00, 00, 83, C4, 0C, 83, 7D, 10, 00, 74, BB, 39, 75, 0C, 73, 0E, E8, B0, 65, 00, 00, 6A...
 
[+]

Entropy:
7.0899

Code size:
2 MB (2,089,472 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PCKeeper

Command:
"C:\Program Files\zeobit\pckeeper\pckeeper.exe" \autorun


The file PCKeeper.exe has been discovered within the following program.

PCKeeper  by ZeoBIT LLC
Publisher's description - “Solve even your most complex PC security, cleaning and optimization problems with the help of Microsoft Certified Experts. Viruses and malware are constantly evolving, but with PCKeeper you can rest easy.”
pckeeperlive.zeobit.com
37% remove it
 
Powered by Should I Remove It?

Scan PCKeeper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.