» SystemCleaner.exe
Overview
Analysis
File Details
Behaviors (1)
Programs (1)

SystemCleaner.exe

System Cleaner

Pointstone Software, LLC

The application SystemCleaner.exe, “It is time to give your computer a good cleaning on the inside!” by Pointstone Software has been detected as a potentially unwanted program by 3 anti-malware scanners. It is set to automatically execute when any user logs into Windows (through the local user run registry setting) with the name ‘PRD’. This file is typically installed with the program System Cleaner 5 by Pointstone Software, LLC.

File name:

SystemCleaner.exe

Publisher:

Pointstone Software, LLC (signed and verified)

Product:

System Cleaner

Description:

It is time to give your computer a good cleaning on the inside!

Version:

5.9.5.364

MD5:

c783f07a69f0e52f64b1b2f5b3109e17

SHA-1:

a27f1c3e862bc1743eada67406d8d560a9fb964e

SHA-256:

bd1709defe80ed60a1ffa5479dcd50ec19361cc3869742be89897f91541b2491

Scanner detections:

3 / 68

Status:

Potentially unwanted

Analysis date:

4/24/2024 3:55:50 PM UTC (today)

Scan engine

Detection

Engine version

Avira AntiVirus

TR/Drop.TDss.bxk

7.10.14.255

McAfee

Artemis!8EECF5EB167D

5600.6492

Reason Heuristics

PUP.Optional.Pointstone.Startup

16.2.11.20

File size:

2.9 MB (3,019,056 bytes)

Product version:

5.9.0.0

Trademarks:

System Cleaner and Pointstone are either trademarks or registered trademarks of Pointstone Software, LLC

Original file name:

SystemCleaner.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\Program Files\pointstone\system cleaner 5\systemcleaner.exe

Digital Signature

Signed by:

Pointstone Software, LLC

Authority:

The USERTRUST Network

Valid from:

3/18/2010 1:00:00 AM

Valid to:

3/18/2012 12:59:59 AM

Subject:

CN="Pointstone Software, LLC", O="Pointstone Software, LLC", STREET=220 E. Delaware Avenue, L=Newark, S=Delaware, PostalCode=19711, C=US

Issuer:

CN=UTN-USERFirst-Object, OU=http://www.usertrust.com, O=The USERTRUST Network, L=Salt Lake City, S=UT, C=US

Serial number:

39D522210A1786B5F689AF9B0415E163

File PE Metadata

Compilation timestamp:

1/16/2012 12:36:09 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

2.25

CTPH (ssdeep):

49152:ESE/uV4VFtXyzVFJi5SScJCleA493CDtQ8BU9qqwfBkYl2VmXw62ay1ZWZcdaJqz:ESFEtizY9cJ9RwSYpkNVh9IZcwJqG8J

Entry address:

0x1000

Entry point:

68, 01, 70, A5, 00, E8, 01, 00, 00, 00, C3, C3, A2, D1, DF, F6, DC, F6, 43, B6, 35, B2, A4, B1, 22, DC, D5, 11, B9, 9E, FA, B9, 55, 1D, AE, 0A, F7, 1A, 3E, 48, C9, 73, F2, 96, F1, 07, 94, 30, 37, 8F, CE, A5, AB, 4A, 4D, 87, 65, 21, 0A, FE, 19, 0E, 1A, C5, D1, 0F, 83, 26, 77, 9D, 02, 32, A7, B9, 92, 44, C3, 04, 69, 4E, ED, 7B, A6, 39, 7D, B7, 76, F9, C5, 65, 20, FE, 4B, 22, 92, E3, F3, 63, 4B, 7E, 34, B4, E6, EF, 90, 9C, 0F, 64, 93, 63, 7E, 99, DF, 73, 9A, 74, A3, 4D, 51, 79, DE, 9F, A1, B7, 78, 5A, 9F, FC... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

3.7 MB (3,852,288 bytes)

Startup File (All Users Run)

Registry location:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:

PRD

Command:

C:\Program Files\pointstone\system cleaner 5\systemcleaner.exe afterreboot

The file SystemCleaner.exe has been discovered within the following program.

System Cleaner 5 by Pointstone Software, LLC

Publisher's description - “Your PC is slowing down. Programs don't run as fast as they used to; it takes longer to boot up in the morning and sometimes it takes forever to shut down at the end of the day. Don't worry, you're not alone. These kinds of things happen to all PCs eventually. It's not your fault.”

www.systemcleaner.com

45% remove it

Remove SystemCleaner.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.