home

setup_143518.exe

Optimizer Pro v3.2

PC Utilities Software Limited

Part of the Optimizer Pro / Driver 'PC optimizer' product lines marketed by Adsology and distributed through various bundled software (PPI and commission) channels. The application setup_143518.exe, “Optimizer Pro – Clean up your PC” by PC Utilities Software Limited has been detected as a potentially unwanted program by 17 anti-malware scanners. Also know as BrowserDefender, this bundled service will prevent various web browser toolbars and extensions from running as well as block changes to the search page and provider.
Publisher:
PCUtilities Software Limited  (signed by PC Utilities Software Limited)

Product:
Optimizer Pro v3.2

Description:
Optimizer Pro – Clean up your PC

Version:
3.3.1.7

MD5:
bb62029f576e017b5c4d430716a0ed6a

SHA-1:
0ee558902057e0a30bb79b661d41c7269f89f325

SHA-256:
6008204dd3c19a1c1a117abd8521ed9ddd6c70ae361347086bb281259cf07b85

Scanner detections:
17 / 68

Status:
Potentially unwanted

Explanation:
Installed with the Optimizer Pro software which is bundled by 3rd-party monetization programs.

Analysis date:
4/20/2024 3:10:24 AM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.Inject
7.1.1

Avira AntiVirus
TR/Bprotector.1969704
7.11.217.14

avast!
PUP-gen [PUP]
2014.9-150328

AVG
Generic
2016.0.3156

Dr.Web
Threat.Undefined
9.0.1.087

ESET NOD32
Generik.ENIMIUX (variant)
9.11297

Fortinet FortiGate
W32/Inject.UMUB!tr
3/28/2015

G Data
Win32.Application.OptimizerPro
15.3.25

herdProtect (fuzzy)
variant of setup.exe (PUP)
2015.7.3.8

K7 AntiVirus
Adware
13.200.15211

Kaspersky
Trojan.Win32.Inject
14.0.0.2276

Malwarebytes
PUP.Optional.OptimizerPR0
v2015.03.28.09

McAfee
Artemis!83104CC0EBA4
5600.6812

Panda Antivirus
Trj/Genetic.gen
15.07.03.08

Qihoo 360 Security
Win32/Trojan.Multi.daf
1.0.0.1015

Reason Heuristics
PUP.Installer.PC Utilities
15.3.28.21

VIPRE Antivirus
Threat.4150696
37788

File size:
7 MB (7,346,640 bytes)

Product version:
3.3.1.7

Copyright:
PCUtilities Software Limited

Original file name:
OptimizerPR0

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\ProgramData\{a2c8420e-0a58-dc16-a2c8-8420e0a50838}\setup_143518.exe

Digital Signature
Signed by:
PC Utilities Software Limited

Authority:
COMODO CA Limited

Valid from:
11/20/2014 4:00:00 PM

Valid to:
11/21/2015 3:59:59 PM

Subject:
CN=PC Utilities Software Limited, O=PC Utilities Software Limited, STREET=78 York Street, L=London, PostalCode=W1H 1DP, C=GB

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
00F10854548D47F74C920D7091D9057D6E

File PE Metadata
Compilation timestamp:
3/4/2015 5:39:40 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:60ZoF2s4hOn80p14Zu5rFRrErO34UrUPT4ARHvW0cEs:60ZA2C8U4Zud934g2PwEs

Entry address:
0xA193

Entry point:
E8, 97, 76, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 85, C0, 74, 12, 83, E8, 08, 81, 38, DD, DD, 00, 00, 75, 07, 50, E8, 28, ED, FF, FF, 59, 5D, C3, 8B, FF, 55, 8B, EC, 83, EC, 10, A1, F0, 36, 43, 00, 33, C5, 89, 45, FC, 8B, 55, 18, 53, 33, DB, 56, 57, 3B, D3, 7E, 1F, 8B, 45, 14, 8B, CA, 49, 38, 18, 74, 08, 40, 3B, CB, 75, F6, 83, C9, FF, 8B, C2, 2B, C1, 48, 3B, C2, 7D, 01, 40, 89, 45, 18, 89, 5D, F8, 39, 5D, 24, 75, 0B, 8B, 45, 08, 8B, 00, 8B, 40, 04, 89, 45, 24, 8B, 35, 40, A1, 42, 00...
 
[+]

Entropy:
7.9798  (probably packed)

Code size:
163 KB (166,912 bytes)

Remove setup_143518.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.