» Service Start.exe
Overview
Analysis
File Details
Programs (2)

Service Start.exe

MyPC Backup Service

JDI BACKUP LIMITED

The application Service Start.exe by JDI BACKUP LIMITED has been detected as a potentially unwanted program by 4 anti-malware scanners. Additionally, the file is typically installed by a number of programs including ZipCloud by JDI BACKUP LIMITED and MyPC Backup by JDI BACKUP LIMITED.

File name:

Service Start.exe

Publisher:

MyPCBackup.com (signed by JDI BACKUP LIMITED)

Product:

MyPC Backup Service

Version:

1.0.0.0

MD5:

f2f3f9338be42bcd7b1fcd282714c6f9

SHA-1:

4c23f83a59db911e92f85241834ae04950815203

SHA-256:

12357e1fef2bb5fb751906b76a6620dd683c11506fa9cc5e70ba48cc8dc03cf5

Scanner detections:

4 / 68

Status:

Potentially unwanted

Analysis date:

4/26/2024 1:40:15 AM UTC (today)

Scan engine

Detection

Engine version

AVG

Generic

2016.0.3024

Dr.Web

riskware program Program.Unwanted.113

9.0.1.0219

Malwarebytes

PUP.Optional.MyPCBackup.A

v2015.08.07.06

Reason Heuristics

Win32.Generic.JDIBACKUP.Meta

15.8.7.18

File size:

13.5 KB (13,864 bytes)

Product version:

1.0.0.0

Original file name:

Service Start.exe

File type:

Executable application (Win32 EXE)

Language:

Language Neutral

Common path:

C:\Program Files\mypc backup\service start.exe

Digital Signature

Signed by:

JDI BACKUP LIMITED

Authority:

VeriSign, Inc.

Valid from:

2/22/2012 5:00:00 PM

Valid to:

2/21/2015 4:59:59 PM

Subject:

CN=JDI BACKUP LIMITED, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=JDI BACKUP LIMITED, L=Havant, S=Hampshire, C=GB

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

35E738AE8513757EEEC7C3A8DC10E470

File PE Metadata

Compilation timestamp:

1/8/2013 6:08:59 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

11.0

.NET CLR dependent:

Yes

CTPH (ssdeep):

192:7c3+C4IrAXeHapXqTgRszYcHe+mJpr9ZCApkT1rrZgjluroz+v4rAFX:Q3CwAXWaxqTgCzYcHe+mSp1P6j5GFX

Entry address:

0x307E

Entry point:

FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00... 
[+]

Entropy:

6.0114

Developed / compiled with:

Microsoft Visual C# / Basic .NET

Code size:

4.5 KB (4,608 bytes)

The file Service Start.exe has been discovered within the following programs.

MyPC Backup by JDI BACKUP LIMITED

MyPC Backup (JustDevelopIT) is a Windows backup utility that is typically distributed in a co-bundled offer situation using download managers.

www.mypcbackup.com

68% remove it

ZipCloud by JDI BACKUP LIMITED

ZipCloud is part of the Just Develop It! group of Backup brands that offers web hosting and online backup services run by JDI Backup (the parent company to similar brands MyPCBackup, Backup Genie and JustCloud).

www.zipcloud.com

58% remove it

Remove Service Start.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.