Name Filename Status Description
okagncigkfokplmopeninonbibkmpogi pythonw.exe X Added by the Interesting test always on truetest Chrome Extension. This extension injects Russian advertisements into web sites that you are visiting. Please note that Pythonw.exe is a legitimate program and only being used by this extension to inject ads.
gppagmpihgceldjoobjbjkcafgacljbd pythonw.exe X

Added by the Mini-vini test true Chrome Adware Extension. This extension will inject Russian advertisements into web sites that you visit and redirect you to Russian websites when you click on links on web pages.

Please note that pythonw.exe is normally a legitimate program, but in this case is being used by the adware for unwanted purposes.

The Desktop Weather Service WeatherService.exe X Added by the The Desktop Weather potentially unwanted program. This program is commonly distributed as a free download that is bundled with adware and potentially unwanted programs.
WDF Sound wdf.exe X

Added by the Cloud Packager miner.

This miner will use both your GPU and CPU resources to mine for digital currency.

NVU NvProfileUpdater64.exe X

Added by the Cloud Packager miner.

This miner will use both your GPU and CPU resources to mine for digital currency.

UC Browser Service UCService.exe X This Windows service is added by the UC Browser potentially unwanted program. UC Browser is commonly bundled with and installed via adware bundles that you download from the Internet.
safe_urls768 s768.exe X Added by the Browser Security potentially unwanted program.
PCOptimize PCOptimize.exe X

Added by the PC Optimize Trojan.

This Trojan will run silently in the background while transmitting data back to a remote computer under the developers control.

ShadowsocksS ShadowsocksS X Added by the Websock.exe, VPNTop, and Shadowsocks miner. This miner is installed via a program that pretends to be a VPN software, but instead installs a CPU miner on the computer.

It should be noted that while this program is installed as Shadowsocks, it is not the legitimate Shadowsocks proxy software.

TablacusApp2 TablacusApp.exe X This startup entry is for the TablacusApp potentially unwanted program. This program will sit silently running in the background, while connecting to numerous sites. As this activity is not disclosed, it is not suggested that it remain running.
vtuiso vtuiso.sys X This is the driver for the the MirageISO adware and affiliate commission software.
PPass.exe.lnk PPass.exe X Added by the PPass PUP. This program connects to remote sites and transmits data without indicate it is running in Windows.
kceidjgdigbhildogdafgekneemgibfe pythonw.exe X Added by the Mini&Comfortable TT adware and unwanted Chrome extension. It should be noted that Pythonw.exe is a legitimate Python for Windows executable. It should only be removed if found in this specific directory. Otherwise, you may cause legitimate applications to no longer work.
Telephone oxy.exe X This service is added by an adware program that installs the Privoxy proxy server. It then configures your computer to connect to this proxy server so that ads are injected into web sites as you are browsing the web.
svchostws start.vbs X Added by the Micro Foundation 7 Monero Miner Trojan. This Trojan will mine for monero coins on your computer without your permission. Please note that Wscript.exe is a legitimate program and should not be deleted.
svchostwn start64.vbs X Added by the Micro Foundation 7 Monero Miner Trojan. This Trojan will mine for monero coins on your computer without your permission. Please note that Wscript.exe is a legitimate program and should not be deleted.
RemoveIT Pro v9Ent removeit.exe X Added by the RemoveIT Pro 2017 Enterprise security program. In my test, this program detected numerous legitimate programs as infections and also stated a file, which did not even exist on the computer, was a threat. Due to this, the program should be avoided.
Windows Driver Service windriver.exe X This Windows service is added by the Novo Optimizer GPU miner. This program will use your computer's GPU to miner for digital currency. This will cause your computer to become slower.
Novo Ping Service npsvc.exe X This Windows service is added by the Novo Optimizer GPU miner. This program will use your computer's GPU to miner for digital currency. This will cause your computer to become slower.
Novo Optimization Service novoopt.exe X This Windows service is added by the Novo Optimizer GPU miner. This program will use your computer's GPU to miner for digital currency. This will cause your computer to become slower.
ShutdownTime ShutdownTime.exe X Added by the Shutdown Time adware. This program will install adware components that display a constant stream of advertisements in your browser.
exitnode exitnode.vbs X Added by the IP Ninja potentially unwanted program. This program configures your computer to act as a exit node for either a proxy service or a VPN service. This does not appear to be done with any warning to the user.
PignorateU PignorateU.exe X Added by the Pignorate Umbellately Fence Trojan.Clicker. This Trojan will constantly connect to remote sites and render them in the background so that the user does not see them.
Intel C:\Program Files\Intel\IntelService.exe X Added by the IntelService.exe Miner. It should be noted that srvany.exe is a legitimate program that in this case is being used to install the miner as a service.
Vatico.vbs Vatico.vbs X Added by the Vatico Monero CPU Miner.
WinResSync %AppData%\Microsoft\Protect\0fe34d5b-0158-47d5-92de-e5fb872d1f82.rs X This is a startup entry for the BlockAdsPro clicker Trojan. This infection will make constant connections to remote hosts in order to generate advertisement revenue for the developer. It should be noted that C:\Windows\System32\regsvr32.exe is a legitimate Windows program and should not be deleted.
SystemTools SystemTools.exe X Added by the SystemTools.exe Clicker Trojan.
msiql msiql.exe X Added by the Msiql.exe adware. This adware will display various sites and advertisements in your default browser.
File Helper fhelper.exe X Added by the MoneyFriend adware.
geforce_amd86 geforce_amd86.exe X Added by the Geforce_amd86.exe Trojan.

Login

Remember Me
Sign in anonymously