Should I block it?

45%
45% of PCs block this file from running.
Possible reason:
Performance resource utilization

VersionsAdditional versions

4,0,7,71382 2.17%
4,0,1,55251 4.35%
4,0,0,48672 2.17%
3,7,1,43377 17.39%
3,7,1,42904 2.17%
3,7,1,41782 2.17%
3,7,1,39149 4.35%
3,2,0,29 13.04%
3,2,0,25 2.17%
3,0,0,4 2.17%
1,18,0,9 2.17%
1,17,0,4 10.87%
1,16,0,7 17.39%
1,16,0,6 2.17%
1,13,0,17 15.22%

Relationships


PE structurePE file structure

Show functions
Import table
advapi32.dll
SetSecurityDescriptorSacl, RegDeleteValueW, RegCloseKey, RegCreateKeyExW, RegOpenKeyExW, RegEnumKeyExW, RegSetValueExW, RegQueryInfoKeyW, RegCreateKeyW, RegOpenKeyW, RegQueryValueExW, GetUserNameW, RevertToSelf, RegOpenCurrentUser, ImpersonateLoggedOnUser, ConvertSidToStringSidW, LookupAccountNameW, AdjustTokenPrivileges, LookupPrivilegeValueW, OpenProcessToken, CreateProcessAsUserW, SetSecurityInfo, InitializeSecurityDescriptor, SetSecurityDescriptorDacl, ConvertStringSecurityDescriptorToSecurityDescriptorW, GetSecurityDescriptorSacl, RegDeleteKeyW
comctl32.dll
InitCommonControlsEx
directui.dll
DirectUI_GetStringItem, DirectUI_Button_SetCheck, DirectUI_ShowControl, DirectUI_EnableControl, DirectUI_GetStringLength, DirectUI_SetControlPos, DirectUI_ComboBox_SetCurSel, DirectUI_ComboBox_GetCurSel, DirectUI_Button_GetCheck, DirectUI_SubclassWindow, DirectUI_SetControlText, DirectUI_ListCtrl_EnsureVisible, DirectUI_TreeCtrl_SetTooltipString, DirectUI_TreeCtrl_ShowControl, DirectUI_TreeCtrl_SetControlText, DirectUI_TreeCtrl_InsertItem, DirectUI_TreeCtrl_DeleteAllItems, DirectUI_Progress_SetRange, DirectUI_TreeCtrl_EnableAnimate, DirectUI_AutoText_SetControlText, DirectUI_SetControlTextEx, DirectUI_GetControlRect, DirectUI_Progress_SetPos, DirectUI_LoadSkinResourceFromFolder, DirectUI_TrackPopupMenu, DirectUI_UpdateSkin, DirectUI_GetControlText, DirectUI_IsControlVisible, _DirectUI_ChangeStyle@12, DirectUI_ComboBox_AddString, _DirectUI_GetControlPos@28, DirectUI_SetLanguageStyle
gdi32.dll
DeleteObject
iphlpapi.dll
GetAdaptersAddresses
kernel32.dll
GetDateFormatA, GetTimeFormatA, SetConsoleCtrlHandler, FlushFileBuffers, GetTickCount, QueryPerformanceCounter, GetCommandLineW, GetEnvironmentStringsW, FreeEnvironmentStringsW, GetConsoleMode, GetConsoleCP, SetFilePointer, GetStartupInfoA, GetFileType, SetHandleCount, IsValidCodePage, GetOEMCP, GetACP, GetTimeZoneInformation, GetModuleHandleA, GetModuleFileNameA, GetStdHandle, ExitProcess, GetCurrentThread, TlsFree, WaitForSingleObject, TlsAlloc, TlsGetValue, FatalAppExitA, HeapCreate, GetCPInfo, LCMapStringW, WideCharToMultiByte, LCMapStringA, GetStartupInfoW, CreateThread, ExitThread, GetSystemTimeAsFileTime, IsDebuggerPresent, GetUserDefaultLCID, RtlUnwind, InterlockedExchange, VirtualAlloc, VirtualFree, IsProcessorFeaturePresent, LoadLibraryA, InterlockedCompareExchange, HeapSize, HeapReAlloc, HeapDestroy, SetUnhandledExceptionFilter, GetLocaleInfoA, EnumSystemLocalesA, IsValidLocale, GetStringTypeA, GetStringTypeW, InitializeCriticalSectionAndSpinCount, GetLocaleInfoW, SetStdHandle, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEndOfFile, CreateFileA, CompareStringA, CompareStringW, WritePrivateProfileSectionW, WritePrivateProfileStringW, GetPrivateProfileStringW, WTSGetActiveConsoleSessionId, LocalFree, CreateFileW, WriteFile, CreateToolhelp32Snapshot, Process32FirstW, Process32NextW, LoadLibraryW, HeapAlloc, IsBadReadPtr, GetDiskFreeSpaceW, GetProcessHeap, HeapFree, GetLongPathNameW, SetLastError, GetVersionExW, lstrcmpiW, LoadLibraryExW, MultiByteToWideChar, FreeLibrary, InitializeCriticalSection, GetModuleFileNameW, lstrlenW, InterlockedDecrement, InterlockedIncrement, SetEnvironmentVariableA, OpenFileMappingW, IsBadWritePtr, VirtualQuery, TerminateProcess, CreateProcessW, GetLocalTime, VerSetConditionMask, VerifyVersionInfoW, CreateDirectoryW, ReadFile, GetFileSize, OpenProcess, Thread32Next, ResumeThread, SuspendThread, OpenThread, GetCurrentProcessId, Thread32First, UnhandledExceptionFilter, GetCurrentProcess, FlushInstructionCache, LeaveCriticalSection, EnterCriticalSection, FindResourceExW, LoadResource, LockResource, SizeofResource, FindResourceW, RaiseException, DeleteCriticalSection, GetPrivateProfileIntW, CreateFileMappingW, GetLastError, MapViewOfFile, CloseHandle, UnmapViewOfFile, Sleep, GetModuleHandleW, GetProcAddress, GetCurrentThreadId, TlsSetValue, ExpandEnvironmentStringsW, IsDBCSLeadByteEx, CreateMutexW, ReleaseMutex, GetPrivateProfileSectionW, GlobalAlloc, GlobalFree, DeviceIoControl, GetExitCodeProcess
log.dll
CreateLog, WriteLog
ole32.dll
CoCreateInstance, CoTaskMemRealloc, CoInitialize, CoTaskMemAlloc, CoTaskMemFree, CoUninitialize, CoCreateGuid
rpcrt4.dll
UuidToStringW, UuidCreate, RpcStringFreeW
shell32.dll
SHQueryRecycleBinW, SHGetSpecialFolderPathW, SHGetFolderPathW, SHAppBarMessage, ShellExecuteW, Shell_NotifyIconW, ShellExecuteExW
shlwapi.dll
PathAppendW, PathRemoveFileSpecW, PathCombineW, PathFileExistsW, StrRChrW, StrFormatByteSizeW, PathFindFileNameW, SHGetValueW, PathFindExtensionW, PathAddBackslashW
urlmon.dll
FindMimeFromData
user32.dll
MonitorFromWindow, GetMonitorInfoW, wsprintfW, ScreenToClient, MonitorFromPoint, GetMenuItemInfoW, RemoveMenu, GetMenuItemCount, TrackPopupMenuEx, InvalidateRect, PtInRect, GetClientRect, MapWindowPoints, SetWindowPos, PeekMessageW, GetMessageW, TranslateMessage, DispatchMessageW, DestroyMenu, MessageBeep, LoadStringA, PostQuitMessage, SetFocus, GetWindowLongW, GetWindowRect, GetWindow, GetParent, DefWindowProcW, SendMessageW, DestroyWindow, RegisterClassExW, LoadImageW, LoadCursorW, GetClassInfoExW, CreateWindowExW, SetWindowLongW, RegisterWindowMessageW, CharNextW, LoadIconW, DestroyIcon, SetMenuItemBitmaps, AppendMenuW, UnregisterClassA, CreatePopupMenu, TranslateAcceleratorW, LoadBitmapW, AttachThreadInput, WindowFromPoint, GetWindowThreadProcessId, ClientToScreen, SetMenuDefaultItem, GetCursorPos, RedrawWindow, SetActiveWindow, SetForegroundWindow, GetActiveWindow, IsWindowVisible, GetPropW, RegisterClassW, SetPropW, CallWindowProcW, BringWindowToTop, GetDlgItem, CreateDialogParamW, GetDesktopWindow, GetShellWindow, GetForegroundWindow, FindWindowW, GetSystemMetrics, MoveWindow, UpdateWindow, SetLayeredWindowAttributes, IsWindow, ShowWindow, EndDialog, SetWindowTextW, PostMessageW, DialogBoxParamW, KillTimer, SetTimer, LoadStringW, SetCursor
userenv.dll
DestroyEnvironmentBlock, CreateEnvironmentBlock
version.dll
VerQueryValueW, GetFileVersionInfoW, GetFileVersionInfoSizeW
winhttp.dll
WinHttpReadData, WinHttpQueryHeaders, WinHttpReceiveResponse, WinHttpWriteData, WinHttpSendRequest, WinHttpSetCredentials, WinHttpOpenRequest, WinHttpConnect, WinHttpCloseHandle, WinHttpOpen, WinHttpSetOption, WinHttpCreateUrl, WinHttpAddRequestHeaders
wininet.dll
InternetCrackUrlW, InternetOpenW, InternetConnectW, HttpOpenRequestW, HttpSendRequestW, HttpQueryInfoW, InternetReadFile, InternetCloseHandle, InternetCreateUrlW
wtsapi32.dll
WTSQueryUserToken, WTSEnumerateSessionsW, WTSFreeMemory

pcfaster.exe

Baidu PC Faster by Baidu Online Network Technology (Beijing)Co. (Signed)

Remove pcfaster.exe
Version:   3,7,1,43377
MD5:   0a2d683f1fe544286ac946e0db9df3bf
SHA1:   6fc6c41eb3ee491a47fc7478e6cd7edf0cd117e1
SHA256:   95aa085ec83158934dfb86aa33ffc9fe03e19ae9ce8e30a709013cecb8268ec6

Overview

pcfaster.exe executes as a process with the local user's privileges. It is set to be start when the PC boots and any user logs into Windows (added to the Run registry key for the all users under the local machine). It is installed with a couple of know programs including Baidu PC Faster published by Baidu, Inc., Baidu PC Faster from Baidu, Inc. and Baidu PC Faster by Baidu, Inc.. The file is digitally signed by Baidu Online Network Technology (Beijing)Co. which was issued by the VeriSign certificate authority (CA).

DetailsDetails

File name:pcfaster.exe
Publisher:Baidu Inc.
Product name:Baidu PC Faster
Typical file path:C:\Program Files\baidu security\pc faster\pcfaster.exe
File version:3,7,1,43377
Size:1.73 MB (1,808,880 bytes)
Build date:9/13/2013 6:55 AM
Certificate
Issued to:Baidu Online Network Technology (Beijing)Co.
Authority (CA):VeriSign
Digital DNA
File packed:No
.NET CLR:No
More details

ResourcesPrograms

The following programs will install this file
Baidu, Inc.
  65% remove
The software is typically bundled with third party installers such as Open Candy. "Offer your users a free system maintenance and utility suite to help them get the most out of their PC’s performance."

BehaviorsBehaviors

Startup files (all users) run
Runs under the registry key 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run'
  • 'Baidu PC Faster 4.0.0.0' → "C:\Program Files\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe" -auto -start
  • 'Baidu PC Faster 3.7.0.0' → "C:\Program Files\Baidu Security\PC Faster\3.7.0.0\PCFaster.exe" -auto -start
  • 'Baidu PC Faster 3.2.0.25' → "C:\Program Files\Baidu Security\PC Faster\3.2.0.25\PCFaster.exe" -auto -start
  • 'Baidu PC Faster 3.2.0.29' → "C:\Program Files\Baidu Security\PC Faster\3.2.0.29\PCFaster.exe" -auto -start
  • 'Baidu PC Faster 3.0.0.4' → "C:\Program Files\Baidu Security\PC Faster\3.0.0.4\PCFaster.exe" -auto -start
  • 'Baidu PC Faster 1.18.0.9' → "C:\Program Files\Baidu Security\PC Faster\1.18.0.9\PCFaster.exe" -auto -start
  • 'BaiduPCFaster' → "C:\Program Files\Baidu Security\PC Faster\PCFaster.exe" -auto -start

ResourcesResource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)
Averages
 
CPU
Total CPU:0.00200073%
0.028634%
Kernel CPU:0.00086448%
0.013761%
User CPU:0.00113625%
0.014873%
Kernel CPU time:156 ms/min
100,923,805ms/min
CPU cycles:25,036/sec
17,470,203/sec
Memory
Private memory:12.13 MB
21.59 MB
Private (maximum):19.95 MB
Private (minimum):11.67 MB
Non-paged memory:12.13 MB
21.59 MB
Virtual memory:112.64 MB
140.96 MB
Virtual memory (peak):121.78 MB
169.69 MB
Working set:13.96 MB
18.61 MB
Working set (peak):20 MB
37.95 MB
Page faults:11,236/min
2,039/min
I/O
I/O read transfer:1.86 KB/sec
1.02 MB/min
I/O read operations:1/sec
343/min
I/O write transfer:5 Bytes/sec
274.99 KB/min
I/O write operations:1/sec
227/min
I/O other transfer:37 Bytes/sec
448.09 KB/min
I/O other operations:4/sec
1,671/min
Resource allocations
Threads:12
12
Handles:156
600
GUI GDI count:153
103
GUI GDI peak:158
142
GUI USER count:30
49
GUI USER peak:34
71

BehaviorsProcess properties

Integrety level:High
Platform:64-bit
Command line:"C:\Program Files\baidu security\pc faster\3.7.0.0\pcfaster.exe" -auto -start
Owner:User

Windows OS versionsDistribution by Windows OS

OS versiondistribution
Microsoft Windows XP 32.61%
Windows 7 Ultimate 26.09%
Windows 7 Professional 19.57%
Windows 7 Home Premium 6.52%
Windows 8 Pro 4.35%
Windows 8 Single Language 2.17%
Windows 8.1 2.17%
Windows 8.1 Enterprise 2.17%
Windows 8.1 Pro 2.17%
Windows 7 Enterprise 2.17%

Distribution by countryDistribution by country

Thailand installs about 36.96% of Baidu PC Faster.

OEM distributionDistribution by PC manufacturer

PC Manufacturerdistribution
Acer 26.47%
Hewlett-Packard 11.76%
GIGABYTE 11.76%
Compaq 11.76%
Intel 11.76%
Lenovo 5.88%
ASUS 5.88%
MSI 5.88%
Toshiba 5.88%
American Megatrends 2.94%
Should I remove It? Clean your PC of unwanted adware, toolbars and bloatware.

Download it for FREE