Newest Entries
| Name | Filename | Status | Description |
|---|---|---|---|
| MPgrd | MatchPop.exe | X | Added by the MatchPop CryptoMiner. When running, this application will quietly utilize the system's resources to mine cryptocurrency for the developer. |
| okagncigkfokplmopeninonbibkmpogi | pythonw.exe | X | Added by the Interesting test always on truetest Chrome Extension. This extension injects Russian advertisements into web sites that you are visiting. Please note that Pythonw.exe is a legitimate program and only being used by this extension to inject ads. |
| gppagmpihgceldjoobjbjkcafgacljbd | pythonw.exe | X | Added by the Mini-vini test true Chrome Adware Extension. This extension will inject Russian advertisements into web sites that you visit and redirect you to Russian websites when you click on links on web pages. Please note that pythonw.exe is normally a legitimate program, but in this case is being used by the adware for unwanted purposes. |
| The Desktop Weather Service | WeatherService.exe | X | Added by the The Desktop Weather potentially unwanted program. This program is commonly distributed as a free download that is bundled with adware and potentially unwanted programs. |
| WDF Sound | wdf.exe | X | Added by the Cloud Packager miner. This miner will use both your GPU and CPU resources to mine for digital currency. |
| NVU | NvProfileUpdater64.exe | X | Added by the Cloud Packager miner. This miner will use both your GPU and CPU resources to mine for digital currency. |
| UC Browser Service | UCService.exe | X | This Windows service is added by the UC Browser potentially unwanted program. UC Browser is commonly bundled with and installed via adware bundles that you download from the Internet. |
| safe_urls768 | s768.exe | X | Added by the Browser Security potentially unwanted program. |
| PCOptimize | PCOptimize.exe | X | Added by the PC Optimize Trojan. This Trojan will run silently in the background while transmitting data back to a remote computer under the developers control. |
| ShadowsocksS | ShadowsocksS | X | Added by the Websock.exe, VPNTop, and Shadowsocks miner. This miner is installed via a program that pretends to be a VPN software, but instead installs a CPU miner on the computer.
It should be noted that while this program is installed as Shadowsocks, it is not the legitimate Shadowsocks proxy software. |
| TablacusApp2 | TablacusApp.exe | X | This startup entry is for the TablacusApp potentially unwanted program. This program will sit silently running in the background, while connecting to numerous sites. As this activity is not disclosed, it is not suggested that it remain running. |
| vtuiso | vtuiso.sys | X | This is the driver for the the MirageISO adware and affiliate commission software. |
| PPass.exe.lnk | PPass.exe | X | Added by the PPass PUP. This program connects to remote sites and transmits data without indicate it is running in Windows. |
| kceidjgdigbhildogdafgekneemgibfe | pythonw.exe | X | Added by the Mini&Comfortable TT adware and unwanted Chrome extension. It should be noted that Pythonw.exe is a legitimate Python for Windows executable. It should only be removed if found in this specific directory. Otherwise, you may cause legitimate applications to no longer work. |
| Telephone | oxy.exe | X | This service is added by an adware program that installs the Privoxy proxy server. It then configures your computer to connect to this proxy server so that ads are injected into web sites as you are browsing the web. |
| svchostws | start.vbs | X | Added by the Micro Foundation 7 Monero Miner Trojan. This Trojan will mine for monero coins on your computer without your permission. Please note that Wscript.exe is a legitimate program and should not be deleted. |
| svchostwn | start64.vbs | X | Added by the Micro Foundation 7 Monero Miner Trojan. This Trojan will mine for monero coins on your computer without your permission. Please note that Wscript.exe is a legitimate program and should not be deleted. |
| RemoveIT Pro v9Ent | removeit.exe | X | Added by the RemoveIT Pro 2017 Enterprise security program. In my test, this program detected numerous legitimate programs as infections and also stated a file, which did not even exist on the computer, was a threat. Due to this, the program should be avoided. |
| Windows Driver Service | windriver.exe | X | This Windows service is added by the Novo Optimizer GPU miner. This program will use your computer's GPU to miner for digital currency. This will cause your computer to become slower. |
| Novo Ping Service | npsvc.exe | X | This Windows service is added by the Novo Optimizer GPU miner. This program will use your computer's GPU to miner for digital currency. This will cause your computer to become slower. |
| Novo Optimization Service | novoopt.exe | X | This Windows service is added by the Novo Optimizer GPU miner. This program will use your computer's GPU to miner for digital currency. This will cause your computer to become slower. |
| ShutdownTime | ShutdownTime.exe | X | Added by the Shutdown Time adware. This program will install adware components that display a constant stream of advertisements in your browser. |
| exitnode | exitnode.vbs | X | Added by the IP Ninja potentially unwanted program. This program configures your computer to act as a exit node for either a proxy service or a VPN service. This does not appear to be done with any warning to the user. |
| PignorateU | PignorateU.exe | X | Added by the Pignorate Umbellately Fence Trojan.Clicker. This Trojan will constantly connect to remote sites and render them in the background so that the user does not see them. |
| Intel | C:\Program Files\Intel\IntelService.exe | X | Added by the IntelService.exe Miner. It should be noted that srvany.exe is a legitimate program that in this case is being used to install the miner as a service. |
| Vatico.vbs | Vatico.vbs | X | Added by the Vatico Monero CPU Miner. |
| WinResSync | 0fe34d5b-0158-47d5-92de-e5fb872d1f82.rs | X | This is a startup entry for the BlockAdsPro clicker Trojan. This infection will make constant connections to remote hosts in order to generate advertisement revenue for the developer. It should be noted that C:\Windows\System32\regsvr32.exe is a legitimate Windows program and should not be deleted. |
| SystemTools | SystemTools.exe | X | Added by the SystemTools.exe Clicker Trojan. |
| msiql | msiql.exe | X | Added by the Msiql.exe adware. This adware will display various sites and advertisements in your default browser. |
| File Helper | fhelper.exe | X | Added by the MoneyFriend adware. |