MyPC Backup

MyPC Backup

Known Adware

by JDI BACKUP LIMITED

What is MyPC Backup?

MyPC Backup is software application developed by JDI BACKUP LIMITED. It is most commonly found on computers running Windows 7 with nearly 56.52% of installations running this operating system. MyPC Backup's installer is typically 27.00 MB in size and installs around 41 files.

MyPC Backup is most popular in the United States with 46.95% of installations residing in this country.

MyPC Backup adds 3 scheduled tasks to the Windows Task Scheduler launching the program at randomly scheduled times. When using a computer that is connected to the internet, MyPC Backup is known to create 1 firewall exception to allow inbound and outbound connectivity.

About MyPC Backup?

MyPC Backup is a software program that is often bundled with adware installers and third-party download managers such as CBS Interactive, Somoto, Conduit, Bechiro, and others. After installation, it bombards users with frequent pop-up notifications encouraging them to sign up for the service. MyPC Backup is part of the Just Develop It! group of backup brands, distributed under the sub company MyPCBackup Ltd/Backup Software Limited. This company offers web hosting and online backup services through JDI Backup, which is the parent company to similar brands Backup Genie and JustCloud.

Multiple virus scanners have detected malware in MyPC Backup.

uninst.exe (MD5: 461420b8a9a8546ba3b9d4bf1e88ce49) has been flagged by 2 scanners:
Scanner Software Result
SUPERAntiSpyware Trojan.Agent/Gen-FraudPack
TrendMicro-HouseCall HV_ZYX_BK08294A.TOMC
BackupStack.exe (MD5: 9697bb01cc775dbec6e7a52bdb6dc3e3) has been flagged by 52 scanners:
Scanner Software Result
Lavasoft Ad-Aware Win32.Runouce.B@mm
Agnitum Outpost I-Worm.Chir.B
AhnLab-V3 Win32/ChiHack.6652
Avira AntiVir W32/Chir.B
Antiy-AVL Worm[Email]/Win32.Runouce.b
avast! Win32:Oncer
AVG Win32/Chir.B@mm
Baidu-International Virus.Win32.Runouce.$a
Bitdefender Win32.Runouce.B@mm
Bkav FE W32.ChirBPE
CAT-QuickHeal W32.Runouce.B
Clam AntiVirus WIN.Worm.Brontok
CMC Antivirus Virus.Worm.Win32.Runouce.1!O
Commtouch SDK W32/Thecid.B@mm
Comodo Security EmailWorm.Win32.Runonce.~v001
Dr.Web Win32.Runonce.6652
Emsisoft Anti-Malware Win32.Runouce.B@mm
ESET-NOD32 Win32/Chir.B
Fortinet FortiGate W32/Chir.B@mm
F-Prot W32/Thecid.B@mm
F-Secure Win32.Runouce.B@mm
G Data Win32.Runouce.B@mm
IKARUS anti.virus Email-Worm.Win32.Runouce
Jiangmin Win32/cnPeace.b
K7 AntiVirus EmailWorm
K7GW EmailWorm ( 00176e371 )
Kaspersky Email-Worm.Win32.Runouce
Kingsoft AntiVirus Win32.Type.b.6637
Malwarebytes Virus.Chir
McAfee W32/Chir.b@MM
McAfee-GW-Edition Heuristic.LooksLike.Win32.SuspiciousPE.J
Microsoft Security Essentials Virus:Win32/Chir.B@mm
MicroWorld-eScan Win32.Runouce.B@mm
NANO AntiVirus Virus.Win32.Runouce.bxafx
Norman Agent.VAFM
nProtect Win32.Runouce.B@mm
Panda Antivirus W32/Chir.B
Qihoo-360 Virus.Win32.CNHacker.C
Rising Antivirus PE:Worm.ChineseHacker-2!23772
Sophos W32/Chir-A
Symantec W32.Chir.B@mm
Tencent Virus.Win32.ChineseHacker.a
The Hacker W32/Chir.b.dannado
Total Defense Win32/Chir.B
Trend Micro PE_Chir.B
TrendMicro-HouseCall PE_Chir.B
Vba32 AntiVirus Virus.Win32.Chur.A
VIPRE Antivirus Win32.chir.b (v)
ViRobot Win32.Chir.B
Zillya Worm.Runouce.Win32.2
AVware MyPC Backup (fs)
SUPERAntiSpyware Trojan.Agent/Gen-FraudPack
Signup Wizard.exe (MD5: 9d0cc110ab0605885d98ae08377f6f66) has been flagged by 6 scanners:
Scanner Software Result
AVG MyBackup.940
AVware MyPC Backup (fs)
Bkav FE W32.HfsAdware.C479
Trend Micro ADW_MYPCBACKUP
TrendMicro-HouseCall ADW_MYPCBACKUP
VIPRE Antivirus MyPC Backup (fs) (not malicious)
MyPC Backup.exe (MD5: 732761dfcfad0863e216931e29c75630) has been flagged by 18 scanners:
Scanner Software Result
AVG Generic.DE7
AVware MyPC Backup (fs)
Bkav FE W32.HfsAdware.4655
ESET-NOD32 a variant of MSIL/MyPCBackup.A potentially unwanted
Malwarebytes PUP.Optional.MyPCBackup.A
Symantec MyPCBackup!gen1
VIPRE Antivirus MyPC Backup (fs) (not malicious)
SUPERAntiSpyware Trojan.Agent/Gen-FraudPack
TrendMicro-HouseCall HV_ZYX_BK08294A.TOMC
Agnitum Outpost Riskware.BackupMyPC
CAT-QuickHeal RiskTool.BackupMyPC.r3 (Not a Virus)
Cyren W32/BackupMyPC.VBBU-8711
F-Prot W32/BackupMyPC.A
K7 AntiVirus Unwanted-Program
K7GW Unwanted-Program ( 004a8e8b1 )
Kaspersky not-a-virus:RiskTool.Win32.BackupMyPC
Trend Micro ADW_MYPCBACKUP
Panda Antivirus PUP/MyPCBackup

Software Behaviors

Services:
  • BackupStack.exe runs as a service named 'Computer Backup (MyPC Backup)' (BackupStack).
Firewall:
  • MyPC Backup.exe is added as a firewall exception for 'C:\Program Files\MyPC Backup\MyPC Backup.exe'.
Scheduled tasks:
  • MyPC Backup.exe is scheduled as a task named 'LaunchApp' (runs monthly on Tuesdays at 7:53 AM).
  • Signup Wizard.exe is scheduled as a task named 'LaunchSignup' (runs monthly on Tuesdays at 8:41 PM).
  • uninst.exe is scheduled as a task with the class '{407B1493-012F-4ED0-9C36-CCDB1587665F}' (runs on registration).

Software Details

URL:
https://www.mypcbackup.com
Support:
https://support.mypcbackup.com
Installation path:
C:\Program Files\mypc backup
Uninstaller:
C:\Program Files\MyPC Backup\uninst.exe
Size:
27.00 MB
Language:
English

MyPC Backup Executable Details

Primary executable:
MyPC Backup.exe
Name:
MyPC Backup
Path:
C:\Program Files\mypc backup\MyPC Backup.exe
MD5:
732761dfcfad0863e216931e29c75630
SHA-1:
–
SHA-256:
–
Files installed by MyPC Backup
File Type Filename MD5
EXE
DEL_Signup Wizard.exe
8c7259ff20cf6ebe02edf455ac2db271
DLL
BackupStack.dll
8eca9e3eafb07ebbeb44f455b17dd506
DLL
AlphaVSS.51.x86.dll
4c1f85a153ab5d7cf07eed67652eedd6
DLL
AlphaVSS.52.x64.dll
fc0f6e3b239d816440284630214e0996
DLL
AlphaVSS.52.x86.dll
d67f3082f5ce71501578253590cde090
DLL
AlphaVSS.60.x64.dll
32c7607c7d0fc8dfe7d8206d347b45c6
DLL
AlphaVSS.60.x86.dll
6b7af0fe83263e7e1cbc1a38003268f8
DLL
AlphaVSS.Common.dll
d98298efd97509f39860af00782e61c0
DLL
AWSSDK.dll
0ad82338f7de55112d55bbce500d63f2
DLL
Backup Controls.dll
1d6fe9970035d50caf010e924b3b6ec1