PC MightyMax Description

PC MightyMax portrays itself as a legitimate registry repair software, generally installed manually by the user due to inexperience or faulty advertising, from the PCMightyMax.net web site. Once installed, PC MightyMax will scan the registry for any problems, and then display fictitious and sometimes grossly exaggerated infection results in order to intimidate the user into purchasing the commercial version of PC MightyMax.

Type: Rogue Registry Cleaner

How Can You Detect PC MightyMax?

PC MightyMax Technical Report

As new PC MightyMax details are reported by our customers and findings from our Threat Research Center, we will update this section.

The following PC MightyMax files with its MD5s were created in the system:

PC MightyMax has typically the following processes in memory:

• PCMightyMaxSetup[1].EXE
• %program_files%\PC MightyMax\ExeAfter.exe
• ExeAfter.exe
• %program_files%\PC MightyMax\beep.exe
• pcmm.exe
• PC MightyMax v9.msi

PC MightyMax created the following directories, files, paths:

• %ProgramFiles%\PC MightyMax

PC MightyMax creates the following registry entries:

• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders@^C:\Program Files\PC MightyMax\
• HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache@^C:\Program Files\PC MightyMax\pcmm.exe
• HKEY_CURRENT_USER\Software\Microsoft\Installer\UpgradeCodes\713B41478A517224DA270783641C4644
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\713B41478A517224DA270783641C4644
• Microsoft\Installer\Products\F0FA5D49EE6E57A4EB13C9C9A978DA54
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders@^C:\Documents and Settings\Administrator\Start Menu\Programs\PC MightyMax\
• HKEY_CURRENT_USER\Software\Microsoft\Windows\ShellNoRoam\MUICache@^C:\Program Files\PC MightyMax\ExeAfter.exe
• HKEY_CURRENT_USER\Software\Microsoft\Installer\Features\F0FA5D49EE6E57A4EB13C9C9A978DA54
• HKEY_LOCAL_MACHINE\SOFTWARE\PC MightyMax
• PC MightyMax
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders@^C:\Documents and Settings\Administrator\Application Data\Microsoft\Installer\{94D5AF0F-E6EE-4A75-BE31-9C9C9A87AD45}\
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run@^PCMMRealtime
• HKEY_CURRENT_USER\Software\Microsoft\Installer\Products\F0FA5D49EE6E57A4EB13C9C9A978DA54
• HKEY_CURRENT_USER\Software\PC MightyMax
• HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{94D5AF0F-E6EE-4A75-BE31-9C9C9A87AD45}
• Microsoft\Installer\Features\F0FA5D49EE6E57A4EB13C9C9A978DA54

Important Article Disclaimer