• Home
  • Virus, Spyware, Malware, & PUP Removal Guides
  • Your Computer is heavily damaged Image

    Remove the Your Computer is heavily damaged Scam

    The Your Computer is heavily damaged Scam is a browser based scam that tries to trick people into thinking that their computer is infected and that they should download a program to fix it. As this is just a scam and the site has no idea what is running on your computer, you should not download and install anything it promotes. ...

  • Elastisearch.com Web Request Image

    Elastisearch.com Web Request

    If your web browser is making connections to https://elastisearch.com/ or https://instant.elastisearch.com/ then you most likely have a Chrome extension that is causing this behavior. These extensions will connect to the elastisearch.com site and send the search term you enter into the address bar or in various search engines....

  • Speedycar Adware Image

    Remove the Speedycar Adware

    Speedycar is an potentially unwanted game that allows you to race around a car and collect coins. What is not disclosed, is that this program also includes an adware component that displays advertisements at various intervals. These advertisements are for unwanted programs, Chrome extensions, adult dating sites, and tech support scams....

  • Svchost.exe *32 Miner Trojan Image

    Remove the Svchost.exe *32 Miner Trojan

    If you see a process called svchost.exe *32 listed in Task Manager and it is utilizing a lot of the CPU, then you are most likely infected with a Miner Trojan. It has become a common tactic for Trojans to create Windows services that utilize svchost.exe to load a Miner Trojan DLL. As these DLLs are 32-bit programs, it causes svchost.exe to be listed with the *32 after it when seen in the Windows 7 Task Manager....

  • Businessconnetads.com Ad Proxy Server Image

    Remove Businessconnetads.com Ad Proxy Server

    Businessconnetads.com Proxy Server is an adware program from the family that injects advertisements into web sites that you are visiting. When this adware is installed, it will change the proxy settings on your browser to send all web traffic through a bundled Privoxy server. This server will be running on the computer as a process called oxy.exe and allows the adware program to monitor all of the victim's web traffic and inj...

  • MicroService CPU Miner Image

    Remove the MicroService CPU Miner

    The MicroService CPU Miner is a Trojan that utilizes your computer's CPU resources to mine for the cryptocurrency. When installed, this Trojan will create a Windows service called MicroService that will load the %UserProfile%\AppData\Local\XService\XService.dll DLL file through svchost.exe. This will cause a svchost.exe process to utilize 90+% of the computer's CPU when displayed in Task Manager....

  • De-mi-nis-ner2.info In-Browser Miner Image

    Remove the De-mi-nis-ner2.info In-Browser Miner

    If you find that your browser is connecting to the de-mi-nis-ner2.info site and Chrome is using a lot of CPU in Task Manager, then you are infected with an in-browser miner. Some adware bundles are configuring an autorun that automatically open Chrome in a hidden window and haves it open the de-mi-nis-ner2.info/cdn-41.html?t=0.4 URL to mine for cryptocurrency in your browser....

  • PandaViewer PUP Image

    Remove the PandaViewer PUP

    PandaViewer is an image viewing program that allows you to open a variety of image formats. This program works well, but it is commonly bundle with adware bundles and also installs other adware such as YahooChrome without your knowledge or permission. This causes programs on the computer to connect to unknown remote sites where it transmits and receives information....

  • Proxycheck.exe Process Image

    Remove the Proxycheck.exe Process

    Proxycheck.exe is an unwanted program that is used to make sure your computer is connected to a particular proxy. This process is part of the AnonymizerGadgett PUP and will have multiple instances of it running when you look in task manager. ...

  • Multitimer PUP Image

    Remove the Multitimer PUP

    Multitimer is an potentially unwanted program that allows you to set a timer and alarms. While the program itself is perfectly fine, it is also bundled with adware that displays advertisements on the computer. These advertisements are for unwanted programs, Chrome extensions, adult dating sites, and tech support scams....

  • YahooChrome PUP Image

    Remove the YahooChrome PUP

    YahooChrome is a potentially unwanted program that is commonly bundled with other programs. When installed, it will create a Windows service, which is currently named "saiyi technology limit". This service will start automatically when the computer starts and connect to remote sites where it sends and receive information....

  • Betterworld PUP Image

    Remove the Betterworld PUP

    Betterworld is a potentially unwanted program that executes a program called exitnode.exe, which connects to remote servers to transfer and receive data. It is not know what exactly this program is doing, but strings such as "adsproxy" that are found inside the program indicate that it may be an ad injector. ...

  • System Table Chrome Adware Extension Image

    Remove the System Table Chrome Adware Extension

    System Table is a Chrome extension that injects advertisements from feed.exssmith.com into web sites that you visit. These advertisements will be for adult sites, dating sites, online adult games, and unwanted software....

  • Mgdisk PUP Image

    Remove the Mgdisk PUP

    Mgdisk is a potentially unwanted program that is commonly installed by adware bundles that allows you to create virtual disks that can be mounted as drive letters. This program is commonly used as a front end for miners, trojans, and adware programs and if you see mgdisk installed, you may have further unwanted malware installed on the computer as well....

  • Prefs Secure & Nettrans.exe PUP Image

    Remove the Prefs Secure & Nettrans.exe PUP

    Prefs Secure & Nettrans.exe is a PUP/adware that is commonly downloaded and installed by adware bundles. When installed, a Windows service named "Prefs Secure" will be created that loads the C:\ProgramData\PrefsSecure\Nettrans.exe program. ...

  • Butler Miner Trojan Image

    Remove the Butler Miner Trojan

    The Butler Miner is a Trojan that pretends to be a virtual disk creation program, but in reality injects the XMRig Miner into the Explorer.exe process.This program is typically installed in adware bundles that pretend to game cracks, cheats, or key generators. ...

Login

Remember Me
Sign in anonymously