home

PCKeeper.exe

PCKeeper

ZeoBIT LLC

It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘PCKeeper’. This is installed with PCKeeper.
Publisher:
ZeoBIT LLC  (signed and verified)

Product:
PCKeeper

Version:
1.3.100.6239

MD5:
0b10f00c9b07e129a2b26634d30d529b

SHA-1:
83a4e7c0e174e44e5269da8266d57fd704af9f4e

SHA-256:
1cfbcbc9d4b7141b1e14650d70b6c8ed0679a469c763dabac840e5fbb756db62

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/18/2024 11:04:31 PM UTC  (a few moments ago)

File size:
6.1 MB (6,351,360 bytes)

Product version:
1.3.100.6239

Copyright:
(c) ZeoBIT LLC. All rights reserved.

Original file name:
PCKeeper.exe

File type:
Executable application (Win64 EXE)

Language:
English (United States)

Common path:
C:\Program Files\zeobit\pckeeper\pckeeper.exe

Digital Signature
Signed by:
ZeoBIT LLC

Authority:
VeriSign, Inc.

Valid from:
7/26/2011 8:00:00 PM

Valid to:
8/23/2012 7:59:59 PM

Subject:
CN=ZeoBIT LLC, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=ZeoBIT LLC, L=Sunnyvale, S=California, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
538CF173836A5CCF0006BB4129B7D4E4

File PE Metadata
Compilation timestamp:
11/23/2011 6:29:01 AM

OS version:
6.0

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
98304:1mYrCuiMgB3Zp/zdCBeV48A341qrrA7qJW4MI2qKMdtvARoGyVR:lrSrrdC/JIwrA7qA4/4R8

Entry address:
0x238330

Entry point:
48, 83, EC, 28, E8, 23, B1, 00, 00, 48, 83, C4, 28, E9, 52, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 66, 66, 0F, 1F, 84, 00, 00, 00, 00, 00, 48, 3B, 0D, 39, C6, 12, 00, 75, 11, 48, C1, C1, 10, 66, F7, C1, FF, FF, 75, 02, F3, C3, 48, C1, C9, 10, E9, 91, B1, 00, 00, CC, 48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, D9, 49, 8B, F0, 48, 8B, FA, 4D, 85, C9, 75, 04, 33, C0, EB, 56, 48, 85, C9, 75, 15, E8, 91, 74, 00, 00, BB, 16, 00, 00, 00...
 
[+]

Entropy:
6.8804

Code size:
2.5 MB (2,591,744 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
PCKeeper

Command:
"C:\Program Files\zeobit\pckeeper\pckeeper.exe" \autorun


The file PCKeeper.exe has been discovered within the following program.

PCKeeper  by ZeoBIT LLC
Publisher's description - “Solve even your most complex PC security, cleaning and optimization problems with the help of Microsoft Certified Experts. Viruses and malware are constantly evolving, but with PCKeeper you can rest easy.”
pckeeperlive.zeobit.com
37% remove it
 
Powered by Should I Remove It?

Scan PCKeeper.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.