Newest Entries
| Name | Filename | Status | Description |
|---|---|---|---|
| WDF Sound | wdf.exe | X | Added by the Cloud Packager miner. This miner will use both your GPU and CPU resources to mine for digital currency. |
| NVU | NvProfileUpdater64.exe | X | Added by the Cloud Packager miner. This miner will use both your GPU and CPU resources to mine for digital currency. |
| UC Browser Service | UCService.exe | X | This Windows service is added by the UC Browser potentially unwanted program. UC Browser is commonly bundled with and installed via adware bundles that you download from the Internet. |
| safe_urls768 | s768.exe | X | Added by the Browser Security potentially unwanted program. |
| PCOptimize | PCOptimize.exe | X | Added by the PC Optimize Trojan. This Trojan will run silently in the background while transmitting data back to a remote computer under the developers control. |
| ShadowsocksS | ShadowsocksS | X | Added by the Websock.exe, VPNTop, and Shadowsocks miner. This miner is installed via a program that pretends to be a VPN software, but instead installs a CPU miner on the computer.
It should be noted that while this program is installed as Shadowsocks, it is not the legitimate Shadowsocks proxy software. |
| TablacusApp2 | TablacusApp.exe | X | This startup entry is for the TablacusApp potentially unwanted program. This program will sit silently running in the background, while connecting to numerous sites. As this activity is not disclosed, it is not suggested that it remain running. |
| vtuiso | vtuiso.sys | X | This is the driver for the the MirageISO adware and affiliate commission software. |
| PPass.exe.lnk | PPass.exe | X | Added by the PPass PUP. This program connects to remote sites and transmits data without indicate it is running in Windows. |
| kceidjgdigbhildogdafgekneemgibfe | pythonw.exe | X | Added by the Mini&Comfortable TT adware and unwanted Chrome extension. It should be noted that Pythonw.exe is a legitimate Python for Windows executable. It should only be removed if found in this specific directory. Otherwise, you may cause legitimate applications to no longer work. |
| Telephone | oxy.exe | X | This service is added by an adware program that installs the Privoxy proxy server. It then configures your computer to connect to this proxy server so that ads are injected into web sites as you are browsing the web. |
| svchostws | start.vbs | X | Added by the Micro Foundation 7 Monero Miner Trojan. This Trojan will mine for monero coins on your computer without your permission. Please note that Wscript.exe is a legitimate program and should not be deleted. |
| svchostwn | start64.vbs | X | Added by the Micro Foundation 7 Monero Miner Trojan. This Trojan will mine for monero coins on your computer without your permission. Please note that Wscript.exe is a legitimate program and should not be deleted. |
| RemoveIT Pro v9Ent | removeit.exe | X | Added by the RemoveIT Pro 2017 Enterprise security program. In my test, this program detected numerous legitimate programs as infections and also stated a file, which did not even exist on the computer, was a threat. Due to this, the program should be avoided. |
| Windows Driver Service | windriver.exe | X | This Windows service is added by the Novo Optimizer GPU miner. This program will use your computer's GPU to miner for digital currency. This will cause your computer to become slower. |
| Novo Ping Service | npsvc.exe | X | This Windows service is added by the Novo Optimizer GPU miner. This program will use your computer's GPU to miner for digital currency. This will cause your computer to become slower. |
| Novo Optimization Service | novoopt.exe | X | This Windows service is added by the Novo Optimizer GPU miner. This program will use your computer's GPU to miner for digital currency. This will cause your computer to become slower. |
| ShutdownTime | ShutdownTime.exe | X | Added by the Shutdown Time adware. This program will install adware components that display a constant stream of advertisements in your browser. |
| exitnode | exitnode.vbs | X | Added by the IP Ninja potentially unwanted program. This program configures your computer to act as a exit node for either a proxy service or a VPN service. This does not appear to be done with any warning to the user. |
| PignorateU | PignorateU.exe | X | Added by the Pignorate Umbellately Fence Trojan.Clicker. This Trojan will constantly connect to remote sites and render them in the background so that the user does not see them. |
| Intel | C:\Program Files\Intel\IntelService.exe | X | Added by the IntelService.exe Miner. It should be noted that srvany.exe is a legitimate program that in this case is being used to install the miner as a service. |
| Vatico.vbs | Vatico.vbs | X | Added by the Vatico Monero CPU Miner. |
| WinResSync | 0fe34d5b-0158-47d5-92de-e5fb872d1f82.rs | X | This is a startup entry for the BlockAdsPro clicker Trojan. This infection will make constant connections to remote hosts in order to generate advertisement revenue for the developer. It should be noted that C:\Windows\System32\regsvr32.exe is a legitimate Windows program and should not be deleted. |
| SystemTools | SystemTools.exe | X | Added by the SystemTools.exe Clicker Trojan. |
| msiql | msiql.exe | X | Added by the Msiql.exe adware. This adware will display various sites and advertisements in your default browser. |
| File Helper | fhelper.exe | X | Added by the MoneyFriend adware. |
| geforce_amd86 | geforce_amd86.exe | X | Added by the Geforce_amd86.exe Trojan. |
| mediatek_86 | mediatek_86.exe | X | Added by the WindowService Trojan. This Trojan is used to send information back to remote servers. |
| Zaxar Games Browser.lnk | ZaxarLoader.exe | X | Added by the Zaxar Games Browser potentially unwanted program |
| QIPApp | QIPApp.exe | X | Added by the QIPApp Adware. |
Search Startups
Startup Database Navigation