utitool.exe

MD5:	8673c62cf247f8bae04f7373bb3a8716
SHA1:	861979c662af50b29e89dd41194eae086180df07

Overview

utitool.exe executes as a process with the local user's privileges. It is an auto-starting process that used the Windows Task Scheduler service to load when the user logs into Windows (sometimes this is required to bypass the UAC protection). It is installed with a couple of know programs including OptimizerPro published by SummerSoft, OptimizerPro from SummerSoft and OptimizerPro by SummerSoft.

Details

File name:	utitool.exe
Typical file path:	C:\Documents and Settings\user\Application data\wintersoft\utitool\utitool.exe
Size:	527.5 KB (540,160 bytes)
Build date:	9/10/2013 4:03 PM
Digital DNA
PE subsystem:	Windows GUI
File packed:	No
.NET CLR:	No

More details

Programs

The following programs will install this file

OptimizerPro Updater

BetterSoft

77% remove

OptimizerPro is the update program which runs on the PC and checks for updates and automatically downloads and installs them if found. The program is primarily designed to keep the software up to date or provide product upgrades. In addition to releasing new versions of the software at regular intervals, the update program can provide additional information to the user or to the remote server. If it finds an item to download, it will do...

OptimizerPro

SummerSoft

84% remove

This is a re-brand of the OptimizerPro software distributed by various other companies, a program that is distributed with adware bundles from 3rd-party download managers such as InstalleRex. Once installed the software will run a scan and alert the user to potentially thousands of issues, most trivial and will require payment to 'fix' such problems.

SK.Enhancer

WebPick Internet Holdings Ltd.

83% remove

SK.Enhancer is a protection mechanism that is designed to protect bundled software of potentially unwanted programs distributed through bundles. Also know as SProtector, SK.Enhancer is typically installed with adware such as toolbars and its primary purpose is to prevent a web browser's home page or search engine from being modified to something other than what the adware has set it to. According to multiple anti-virus products this sof...

GS-Enabler

WebPick Internet Holdings Ltd.

83% remove

Behaviors

Scheduled tasks

The task 'ss u helper-S-1067267981' runs on logon in the path 'C:\WINDOWS\Tasks\ss u helper-S-1067267981.job'
The task 'UtiTool-S-418759871' runs on logon in the path 'C:\WINDOWS\Tasks\UtiTool-S-418759871.job'

Scheduled tasks startups

Set to load on user login (bypasses Windows UAC if enabled)

Resource utilization

(Note: statistics below are averages based on a minimum sample size of 200 unique participants)

Averages

CPU
Total CPU:	0.00040725%	0.028634%
Kernel CPU:	0.00029543%	0.013761%
User CPU:	0.00011182%	0.014873%
Kernel CPU time:	1,570 ms/min	100,923,805ms/min
Memory
Private memory:	980 KB	21.59 MB
Private (maximum):	2.76 MB
Private (minimum):	74 KB
Non-paged memory:	980 KB	21.59 MB
Virtual memory:	25.32 MB	140.96 MB
Virtual memory (peak):	30.83 MB	169.69 MB
Working set:	808 KB	18.61 MB
Working set (peak):	2.83 MB	37.95 MB
Page faults:	2,662/min	2,039/min
I/O
I/O read transfer:	173 Bytes/sec	1.02 MB/min
I/O read operations:	1/sec	343/min
I/O write transfer:	13 Bytes/sec	274.99 KB/min
I/O write operations:	1/sec	227/min
I/O other transfer:	20 Bytes/sec	448.09 KB/min
I/O other operations:	1/sec	1,671/min
Resource allocations
Threads:	1	12
Handles:	51	600
GUI GDI count:	4	103
GUI USER count:	2	49

Process properties

Integrety level:	Undefined
Platform:	32-bit
Command lines:	"C:\Documents and Settings\user\Application data\wintersoft\ss u helper\1067267981.ini" "C:\Documents and Settings\user\Application data\wintersoft\utitool\418759871.ini"
Owner:	User
Parent process:	svchost.exe (Generic Host Process for Win32 Services by Microsoft)