• Home
  • Virus, Spyware, Malware, & PUP Removal Guides
  • Svchost.exe *32 Miner Trojan Image

    Remove the Svchost.exe *32 Miner Trojan

    If you see a process called svchost.exe *32 listed in Task Manager and it is utilizing a lot of the CPU, then you are most likely infected with a Miner Trojan. It has become a common tactic for Trojans to create Windows services that utilize svchost.exe to load a Miner Trojan DLL. As these DLLs are 32-bit programs, it causes svchost.exe to be listed with the *32 after it when seen in the Windows 7 Task Manager....

  • Businessconnetads.com Ad Proxy Server Image

    Remove Businessconnetads.com Ad Proxy Server

    Businessconnetads.com Proxy Server is an adware program from the family that injects advertisements into web sites that you are visiting. When this adware is installed, it will change the proxy settings on your browser to send all web traffic through a bundled Privoxy server. This server will be running on the computer as a process called oxy.exe and allows the adware program to monitor all of the victim's web traffic and inj...

  • MicroService CPU Miner Image

    Remove the MicroService CPU Miner

    The MicroService CPU Miner is a Trojan that utilizes your computer's CPU resources to mine for the cryptocurrency. When installed, this Trojan will create a Windows service called MicroService that will load the %UserProfile%\AppData\Local\XService\XService.dll DLL file through svchost.exe. This will cause a svchost.exe process to utilize 90+% of the computer's CPU when displayed in Task Manager....

  • De-mi-nis-ner2.info In-Browser Miner Image

    Remove the De-mi-nis-ner2.info In-Browser Miner

    If you find that your browser is connecting to the de-mi-nis-ner2.info site and Chrome is using a lot of CPU in Task Manager, then you are infected with an in-browser miner. Some adware bundles are configuring an autorun that automatically open Chrome in a hidden window and haves it open the de-mi-nis-ner2.info/cdn-41.html?t=0.4 URL to mine for cryptocurrency in your browser....

  • PandaViewer PUP Image

    Remove the PandaViewer PUP

    PandaViewer is an image viewing program that allows you to open a variety of image formats. This program works well, but it is commonly bundle with adware bundles and also installs other adware such as YahooChrome without your knowledge or permission. This causes programs on the computer to connect to unknown remote sites where it transmits and receives information....

  • Proxycheck.exe Process Image

    Remove the Proxycheck.exe Process

    Proxycheck.exe is an unwanted program that is used to make sure your computer is connected to a particular proxy. This process is part of the AnonymizerGadgett PUP and will have multiple instances of it running when you look in task manager. ...

  • Multitimer PUP Image

    Remove the Multitimer PUP

    Multitimer is an potentially unwanted program that allows you to set a timer and alarms. While the program itself is perfectly fine, it is also bundled with adware that displays advertisements on the computer. These advertisements are for unwanted programs, Chrome extensions, adult dating sites, and tech support scams....

  • YahooChrome PUP Image

    Remove the YahooChrome PUP

    YahooChrome is a potentially unwanted program that is commonly bundled with other programs. When installed, it will create a Windows service, which is currently named "saiyi technology limit". This service will start automatically when the computer starts and connect to remote sites where it sends and receive information....

  • Betterworld PUP Image

    Remove the Betterworld PUP

    Betterworld is a potentially unwanted program that executes a program called exitnode.exe, which connects to remote servers to transfer and receive data. It is not know what exactly this program is doing, but strings such as "adsproxy" that are found inside the program indicate that it may be an ad injector. ...

  • System Table Chrome Adware Extension Image

    Remove the System Table Chrome Adware Extension

    System Table is a Chrome extension that injects advertisements from feed.exssmith.com into web sites that you visit. These advertisements will be for adult sites, dating sites, online adult games, and unwanted software....

  • Mgdisk PUP Image

    Remove the Mgdisk PUP

    Mgdisk is a potentially unwanted program that is commonly installed by adware bundles that allows you to create virtual disks that can be mounted as drive letters. This program is commonly used as a front end for miners, trojans, and adware programs and if you see mgdisk installed, you may have further unwanted malware installed on the computer as well....

  • Prefs Secure & Nettrans.exe PUP Image

    Remove the Prefs Secure & Nettrans.exe PUP

    Prefs Secure & Nettrans.exe is a PUP/adware that is commonly downloaded and installed by adware bundles. When installed, a Windows service named "Prefs Secure" will be created that loads the C:\ProgramData\PrefsSecure\Nettrans.exe program. ...

  • Butler Miner Trojan Image

    Remove the Butler Miner Trojan

    The Butler Miner is a Trojan that pretends to be a virtual disk creation program, but in reality injects the XMRig Miner into the Explorer.exe process.This program is typically installed in adware bundles that pretend to game cracks, cheats, or key generators. ...

  • FastDataX.exe Trojan Image

    Remove the FastDataX.exe Trojan

    FastDataX.exe is a Trojan that is commonly downloaded and install by adware bundles and has a digital signature from a company named 'PRIVATELY OWNED ENTERPRISE "SINETEKO"'. When this executable is executed, it will connect to a remote site and transmit data. It is not known what is transmitted....

  • Watch Folder Trojan Downloader Image

    Remove the Watch Folder Trojan Downloader

    Watch Folder is a Trojan distributed by adware bundles that acts as a program that can monitor a folder for changes. In the background, though, it will download and install other adware, malware, ransomware, and potentially unwanted programs to the %AppData%\Folder\Service.exe file and then execute it....

  • ExpertChange PUP Image

    Remove the ExpertChange PUP

    ExpertChange is a potentially unwanted program that is commonly installed by adware bundles. When installed, it will display a small overlay that stays on top of your other Windows and contains links to Twitter, Facebook, and a site called ExpertChange....

Login

Remember Me
Sign in anonymously